February 13th, 2003, 04:17 PM
Tiger Shark:
Hmm...maybe it was how the web servers were setup that I had to investigate or maybe it was the version (I think they were 4.0 not 5.0), not sure. It seemed that every IIS server I...
February 13th, 2003, 01:13 AM
If your access_log is gone, where did you get those entries?
I have no idea whether your box was hacked or not, but one thing I can say for certain:
Based on the logs you showed here, I can say...
February 13th, 2003, 12:11 AM
Ok, short answer, no you haven't been hacked. What you are seeing is the various incarnations of nimda trying to check your box to see if you are succeptible. Here is why you are not hacked:
1) ...
