Snort mailing list archives
RE: Microsoft URL Control
From: "Glenn E. Bailey III" <gbailey () sprocketdata com>
Date: Fri, 28 Dec 2001 12:43:43 -0600
It's probally a IIS server infected w/nimba,codered,etc trying to infect your apache server, which is can not. -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net]On Behalf Of auto241065 () hushmail com Sent: Friday, December 28, 2001 12:38 PM To: snort-users () lists sourceforge net Subject: [Snort-users] Microsoft URL Control I am getting lots of WEB-FRONTPAGE _vti_rpc access alerts on an apache server. The interesting thing is User-Agent: Microsoft URL Control - 6.00.8862. What is that User-Agent from? Thanks. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Microsoft URL Control auto241065 (Dec 28)
- RE: Microsoft URL Control Glenn E. Bailey III (Dec 28)