Join or sign in Register for your free TechRepublic membership or if you are already a member, sign in using your preferred method below. Use Your Email Use FacebookUse Linkedin

web server log files

Locked

I’m looking at the log files and I can see that I’ve been looked over by “odd” requests such as cmd.exe and all sorts of other neat things. And I’ve tracked down where some of these calls come from pacific, asia etc. But what I want to know is can I determine if the order of the script that is attempting to run on my server the same footprint as one of the worms running around.

I want to better understand what the script is that is hitting me, not just who.

Topic

web server log files

In reply to web server log files

If you go to the Microsoft Security web site (www.microsoft.com/technet and click the link to Security), you will find all the security bulletins that Microsoft has issued for IIS and NT over the past couple of years. These bulletins contain detailed information on the vulnerabilities of the system and what kinds of things you will see in your logs or file system if you have been attacked by the worm or virus that exploits that vulnerability. Hope this helps!

web server log files

In reply to web server log files

Poster rated this answer

[Author]

Replies