General discussion

Locked

Weird entry on port 80 ISA

By Iplogic ·
Weird entry on port 80 ISA
Can anyone be as kind as to tell me what this is ?

(66.76.49.132 anonymous - N 2003-07-1401:01:24 w3proxy name - - - - - 3818 3562 - GET http://33.90.33.99/default.ida? XXXXXXXXXff%u0078%u0000%u00=a - - 401 )

( Ihave shorten entries considerably for ease of reading and modified IP adress for security reason , I am sure you'll understand)

How can I block this request from being executed or accepted.


Help...and Thank you in advance for your help.

This conversation is currently closed to new comments.

6 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Weird entry on port 80 ISA

by joematus In reply to Weird entry on port 80 IS ...

CodeRed II -- make sure your IIS servers are patched. CodeRed II has been out for about two years now and some folks haven't patched their servers.

Collapse -

Weird entry on port 80 ISA

by Iplogic In reply to Weird entry on port 80 IS ...

Poster rated this answer

Collapse -

Weird entry on port 80 ISA

by Iplogic In reply to Weird entry on port 80 IS ...

Thanks for the sugestion, However our
IIS is and has been uptodate with patches, Our Antyvirus Software Checks for updates daily and has the latest deffinitions. This entry was found on our ISA Web Log. With the anonimous IP address changing daily.....???

Collapse -

Weird entry on port 80 ISA

by BeerMonster In reply to Weird entry on port 80 IS ...

Hi,
If you're system is patched then you shouldn't have a problem. the get command is attempting a known buffer overflow which will fail on a patched system. Bear in mind that patching cannot prevent someone TRYING to hack your system - as is the case here - but it does prevent the hack succeeding....

Collapse -

Weird entry on port 80 ISA

by Iplogic In reply to Weird entry on port 80 IS ...

Poster rated this answer

Collapse -

Weird entry on port 80 ISA

by Iplogic In reply to Weird entry on port 80 IS ...

This question was closed by the author

Back to Security Forum
6 total posts (Page 1 of 1)  

Related Discussions

Related Forums