RE: Microsoft URL Control

["Glenn E. Bailey III" <gbailey () sprocketdata com>]

It's probally a IIS server infected w/nimba,codered,etc
trying to infect your apache server, which is can not.

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of
auto241065 () hushmail com
Sent: Friday, December 28, 2001 12:38 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Microsoft URL Control



I am getting lots of WEB-FRONTPAGE _vti_rpc access alerts on an apache
server.
The interesting thing is User-Agent: Microsoft URL Control - 6.00.8862.
What is that User-Agent from?

Thanks.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users