Server Attacks - LIRU Site

12 Jul 1999 00:00 AM - 5 Aug 2003 23:59 PM (-6)

This section shows where worms or viruses tried to access executable files on your computer. It does not necessarily mean that your computer security has been compromised, only that there were attempts.

Filters	Filename	IP	Referer
Exclude	/risimages/*.* /_vti_bin	129.118.68.*

Detail

Server Attacks   Filename File Requests % of Total File Requests Client Sessions Bandwidth 1 http://www.liru.asft.ttu.edu/default.ida (Possible Code Red 2 attack) 2053 88.84 1371 343.37 KB 2 http://www.liru.asft.ttu.edu/scripts/root.exe (Possible Nimda worm attack) 27 1.17 747 28.06 KB 3 http://www.liru.asft.ttu.edu/scripts/..\../winnt/system32/cmd.exe (Possible Nimda worm attack) 57 2.47 15 9.54 KB 4 http://www.liru.asft.ttu.edu/scripts/../../winnt/system32/cmd.exe (Possible Nimda worm attack) 51 2.21 15 34.48 KB 5 http://www.liru.asft.ttu.edu/winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 12 0.00 KB 6 http://www.liru.asft.ttu.edu/scripts/..À€¯../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 1 0.00 KB 7 http://www.liru.asft.ttu.edu/scripts/../../../../../../../..//winnt/system32/cmd.exe (Possible Nimda worm attack) 1 0.04 1 0.40 KB 8 http://www.liru.asft.ttu.edu/scripts/..%5c../winnt/system32/cmd.exe (Possible Nimda worm attack) 81 3.50 1 35.42 KB 9 http://www.liru.asft.ttu.edu/scripts/..%5c..%5c/winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 1 0.00 KB 10 http://www.liru.asft.ttu.edu/scripts/..%5c%5c../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 1 0.00 KB 11 http://www.liru.asft.ttu.edu/msadc/..Á%pc../..Á%pc../..Á%pc../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB 12 http://www.liru.asft.ttu.edu/msadc/..o../..o../..o../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB 13 http://www.liru.asft.ttu.edu/msadc/..À%9v../..À%9v../..À%9v../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB 14 http://www.liru.asft.ttu.edu/msadc/..À%qf../..À%qf../..À%qf../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB 15 http://www.liru.asft.ttu.edu/msadc/..Á../..Á../..Á../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB 16 http://www.liru.asft.ttu.edu/msadc/..Á%8s../..Á%8s../..Á%8s../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB 17 http://www.liru.asft.ttu.edu/msadc/..ø€€€¯../..ø€€€¯../..ø€€€¯../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB 18 http://www.liru.asft.ttu.edu/msadc/..ð€€¯../..ð€€¯../..ð€€¯../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB 19 http://www.liru.asft.ttu.edu/msadc/..ü€€€€¯../..ü€€€€¯../..ü€€€€¯../winnt/system32/cmd.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB 20 http://www.liru.asft.ttu.edu/root.exe (Possible Nimda worm attack) 0 0.00 Shared 0.00 KB   SubTotal 2270 98.23 2165 451.28 KB   Total 2311 100.00 2165 471.70 KB