Server Attacks - LIRU Site
12 Jul 1999 00:00 AM - 5 Aug 2003 23:59 PM (-6)
This section shows where worms or viruses tried to access executable files on your computer. It does not necessarily mean that your computer security has been compromised, only that there were attempts.
Filters Filename IP Referer
Exclude /risimages/*.* /_vti_bin 129.118.68.*  

 
Detail

Server Attacks
  Filename File Requests % of Total File Requests Client Sessions Bandwidth
1 http://www.liru.asft.ttu.edu/default.ida (Possible Code Red 2 attack) 2053 88.84 1371 343.37 KB
2 http://www.liru.asft.ttu.edu/scripts/root.exe (Possible Nimda worm attack) 27 1.17 747 28.06 KB
3 http://www.liru.asft.ttu.edu/scripts/..\../winnt/system32/cmd.exe (Possible Nimda worm attack) 57 2.47 15 9.54 KB
4 http://www.liru.asft.ttu.edu/scripts/../../winnt/system32/cmd.exe (Possible Nimda worm attack) 51 2.21 15 34.48 KB
5 http://www.liru.asft.ttu.edu/winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 12 0.00 KB
6 http://www.liru.asft.ttu.edu/scripts/..../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 1 0.00 KB
7 http://www.liru.asft.ttu.edu/scripts/../../../../../../../..//winnt/system32/cmd.exe (Possible Nimda worm attack) 1 0.04 1 0.40 KB
8 http://www.liru.asft.ttu.edu/scripts/..%5c../winnt/system32/cmd.exe (Possible Nimda worm attack) 81 3.50 1 35.42 KB
9 http://www.liru.asft.ttu.edu/scripts/..%5c..%5c/winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 1 0.00 KB
10 http://www.liru.asft.ttu.edu/scripts/..%5c%5c../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 1 0.00 KB
11 http://www.liru.asft.ttu.edu/msadc/..%pc../..%pc../..%pc../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB
12 http://www.liru.asft.ttu.edu/msadc/..o../..o../..o../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB
13 http://www.liru.asft.ttu.edu/msadc/..%9v../..%9v../..%9v../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB
14 http://www.liru.asft.ttu.edu/msadc/..%qf../..%qf../..%qf../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB
15 http://www.liru.asft.ttu.edu/msadc/..../..../..../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB
16 http://www.liru.asft.ttu.edu/msadc/..%8s../..%8s../..%8s../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB
17 http://www.liru.asft.ttu.edu/msadc/..../..../..../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB
18 http://www.liru.asft.ttu.edu/msadc/..../..../..../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB
19 http://www.liru.asft.ttu.edu/msadc/..../..../..../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB
20 http://www.liru.asft.ttu.edu/root.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB
  SubTotal 2270 98.23 2165 451.28 KB
  Total 2311 100.00 2165 471.70 KB