WEB-IIS signatures

[Gongya Yu <yu () gongya net>]

I got some WEB-IIS cmd.exe, WEB-IIS ISAPI .ida access logs originating
from a machine which I am pretty sure did not launch these intrusions.
Any ideas or suggestions ? Any one has got such kind of behaviors ?


thanks !!!

Snort user.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users