Ask a Question related to ASP.NET Security, Design and Development.
-
Eben Jansen van Rensburg #1
HTTP Error 401: Unauthorized
Hi all,
Sorry if you had this one before, but I hope you can help. I'm running
VS.NET 2003 on a Windows Server 2003 Standard Edition. The server acts
as a Domain Controller and a Web Server. It is purely used for
development. I should probably not do development on a server but I
need the functionality.
Everytime I want to create a new web project or open an existing one, I
am asked for my username and password. Although the username and
password IS CORRECT, it doesn't autheticate me. And if I cancel the
logon window, I receive a massage that I can't open or create the web
project because the virtual directory and the fisical path need to map
to the same location and I get that dreaded HTTP 401: Unauthorized
error.
How can I prevent being asked a username and password when opening a web
project in VS.NET. It must be some kind of a security issue. IT IS
DRIVING ME NUTS!
Thanx 4 you're help guys.
*** Sent via Developersdex [url]http://www.developersdex.com[/url] ***
Don't just participate in USENET...get rewarded for it!
Eben Jansen van Rensburg Guest
-
soapexception occurs with http status 401: unauthorized
Your web service is not running as the client user. It is running as a low-no permission local machine account. You need to make it run as the... -
error 401:Unauthorized in Win98se(SC)
hello!I meet a strange problem.I created a web service and aclient application by C#.The web service can call successfullyby the Client application... -
HTTP status 401: Unauthorized in SC Win98se
hello!I meet a strange problem.I created a web service and aclient application by C#.The web service can call successfullyby the Client application... -
The request failed with HTTP status 401: Unauthorized.
I have a web service that has been working before but now I am getting: The request failed with HTTP status 401: Unauthorized. This is to the... -
ASP.NET: 401 (Unauthorized) error
My distributed app has the following cofiguration: My machine is not networked and I use localhost on IIS as a Web container. On localhost I... -
Jim Cheshire [MSFT] #2 RE: HTTP Error 401: Unauthorized
Hi Eben,
In order to know what is causing this, we need to know the full status
code. There are many reason for a 401 status code. It should be 401.#.
What is the number after the dot?
Jim Cheshire [MSFT]
MCP+I, MCSE, MCSD, MCDBA
Microsoft Developer Support
[email]jamesche@online.microsoft.com[/email]
This post is provided "AS-IS" with no warranties and confers no rights.
--------------------cpmsftngxa06.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFT NGP08.phx.gbl!TK2MSFTNGP12>From: Eben Jansen van Rensburg <ebenj@proactive-integ.co.za>
>X-Newsreader: AspNNTP 1.50 (ActionJackson.com)
>Subject: HTTP Error 401: Unauthorized
>Mime-Version: 1.0
>Content-Type: text/plain; charset="us-ascii"
>Content-Transfer-Encoding: 7bit
>Message-ID: <u7#V0jibEHA.2660@TK2MSFTNGP12.phx.gbl>
>Newsgroups: microsoft.public.dotnet.framework.aspnet.security
>Date: Tue, 20 Jul 2004 00:12:43 -0700
>NNTP-Posting-Host: 67.41.129.85
>Lines: 1
>Path:
.phx.gblmicrosoft.public.dotnet.framework.aspnet.security: 10865>Xref: cpmsftngxa06.phx.gbl>X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.security
>
>
>
>Hi all,
>
>Sorry if you had this one before, but I hope you can help. I'm running
>VS.NET 2003 on a Windows Server 2003 Standard Edition. The server acts
>as a Domain Controller and a Web Server. It is purely used for
>development. I should probably not do development on a server but I
>need the functionality.
>
>Everytime I want to create a new web project or open an existing one, I
>am asked for my username and password. Although the username and
>password IS CORRECT, it doesn't autheticate me. And if I cancel the
>logon window, I receive a massage that I can't open or create the web
>project because the virtual directory and the fisical path need to map
>to the same location and I get that dreaded HTTP 401: Unauthorized
>error.
>
>How can I prevent being asked a username and password when opening a web
>project in VS.NET. It must be some kind of a security issue. IT IS
>DRIVING ME NUTS!
>
>Thanx 4 you're help guys.
>
>*** Sent via Developersdex [url]http://www.developersdex.com[/url] ***
>Don't just participate in USENET...get rewarded for it!
>Jim Cheshire [MSFT] Guest
-
Mike Schultz #3 RE: HTTP Error 401: Unauthorized
The good news is that I happened upon this thread and subject and it
matches exactly what I've been having problems with. The bad news is
that I also need help in dealing with the problem. Please consider that
there's one more person hoping to hear a solution to this.
*** Sent via Developersdex [url]http://www.developersdex.com[/url] ***
Don't just participate in USENET...get rewarded for it!
Mike Schultz Guest
-
Jim Cheshire [MSFT] #4 RE: HTTP Error 401: Unauthorized
Mike,
In order to determine the cause of any 401, we need to know the full status
code.
Jim Cheshire [MSFT]
MCP+I, MCSE, MCSD, MCDBA
Microsoft Developer Support
[email]jamesche@online.microsoft.com[/email]
This post is provided "AS-IS" with no warranties and confers no rights.
--------------------microsoft.public.dotnet.framework.aspnet.security: 10910>From: Mike Schultz <aquafoil@comcast.net>
>References: <u2k4AmmbEHA.600@cpmsftngxa06.phx.gbl>
>X-Newsreader: AspNNTP 1.50 (ActionJackson.com)
>Subject: RE: HTTP Error 401: Unauthorized
>Mime-Version: 1.0
>Content-Type: text/plain; charset="us-ascii"
>Content-Transfer-Encoding: 7bit
>Message-ID: <e6Fqu3$bEHA.3664@TK2MSFTNGP12.phx.gbl>
>Newsgroups: microsoft.public.dotnet.framework.aspnet.security
>Date: Thu, 22 Jul 2004 08:09:47 -0700
>NNTP-Posting-Host: 67.41.129.85
>Lines: 1
>Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTN GP12.phx.gbl
>Xref: cpmsftngxa06.phx.gbl>X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.security
>
>
>The good news is that I happened upon this thread and subject and it
>matches exactly what I've been having problems with. The bad news is
>that I also need help in dealing with the problem. Please consider that
>there's one more person hoping to hear a solution to this.
>
>
>*** Sent via Developersdex [url]http://www.developersdex.com[/url] ***
>Don't just participate in USENET...get rewarded for it!
>Jim Cheshire [MSFT] Guest
-
Mike Schultz #5 RE: HTTP Error 401: Unauthorized
frefacad
Thanks for your reply; it is heartening! Can you indulge me a little
further and clarify exactly what a 'full status code' is and how I go
about determining where I can find it.
As I'm certain you have discovered, I'm a bit of a novice at this.
Gratefully,
*** Sent via Developersdex [url]http://www.developersdex.com[/url] ***
Don't just participate in USENET...get rewarded for it!
Mike Schultz Guest
-
Jim Cheshire [MSFT] #6 RE: HTTP Error 401: Unauthorized
Hi Mike,
It will be in the IIS logs located in
c:\<windows_dir>\system32\logfiles\w3svc#. If you just send me that log
file, I can tell you the status code.
Jim Cheshire [MSFT]
MCP+I, MCSE, MCSD, MCDBA
Microsoft Developer Support
[email]jamesche@online.microsoft.com[/email]
This post is provided "AS-IS" with no warranties and confers no rights.
--------------------cpmsftngxa06.phx.gbl!TK2MSFTNGXS01.phx.gbl!TK2MSFT NGXA05.phx.gbl!TK2MSFTNGP0>From: Mike Schultz <aquafoil@comcast.net>
>References: <TBtlmEAcEHA.3848@cpmsftngxa06.phx.gbl>
>X-Newsreader: AspNNTP 1.50 (ActionJackson.com)
>Subject: RE: HTTP Error 401: Unauthorized
>Mime-Version: 1.0
>Content-Type: text/plain; charset="us-ascii"
>Content-Transfer-Encoding: 7bit
>Message-ID: <OL#OeMBcEHA.3988@tk2msftngp13.phx.gbl>
>Newsgroups: microsoft.public.dotnet.framework.aspnet.security
>Date: Thu, 22 Jul 2004 10:41:27 -0700
>NNTP-Posting-Host: 67.41.129.85
>Lines: 1
>Path:
8.phx.gbl!tk2msftngp13.phx.gblmicrosoft.public.dotnet.framework.aspnet.security: 10919>Xref: cpmsftngxa06.phx.gbl>X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.security
>
>
>
>frefacad
>
>Thanks for your reply; it is heartening! Can you indulge me a little
>further and clarify exactly what a 'full status code' is and how I go
>about determining where I can find it.
>As I'm certain you have discovered, I'm a bit of a novice at this.
>Gratefully,
>
>*** Sent via Developersdex [url]http://www.developersdex.com[/url] ***
>Don't just participate in USENET...get rewarded for it!
>Jim Cheshire [MSFT] Guest
-
Mike Schultz #7 RE: HTTP Error 401: Unauthorized
frefacad
Jim: Thanks for the information. I've included below the latest file in
C:\WINDOWS\system32\LogFiles\W3kSVC357097357\ex040 722.log. Once you've
determined the 'full status code', perhaps you can tell me how you
determined it, what is its significance, and what is to be done with the
information. I very much appreciate the time you're taking for this.
Cheers, Mike Schultz
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2004-07-22 01:21:10
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2004-07-22 01:21:10 192.168.0.200 GET /scripts/root.exe /c+dir 80 -
68.32.113.86 - 401 1 64
2004-07-22 01:21:10 192.168.0.200 GET /MSADC/root.exe /c+dir 80 -
68.32.113.86 - 401 1 64
2004-07-22 01:21:10 192.168.0.200 GET /c/winnt/system32/cmd.exe /c+dir
80 - 68.32.113.86 - 401 1 64
2004-07-22 01:21:10 192.168.0.200 GET /d/winnt/system32/cmd.exe /c+dir
80 - 68.32.113.86 - 401 1 64
2004-07-22 01:21:10 192.168.0.200 GET
/scripts/..%5c../winnt/system32/cmd.exe /c+dir 80 - 68.32.113.86 - 401 1
64
2004-07-22 01:21:10 192.168.0.200 GET
/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 80 -
68.32.113.86 - 401 1 64
2004-07-22 01:21:10 192.168.0.200 GET
/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 80 -
68.32.113.86 - 401 1 64
2004-07-22 01:21:10 192.168.0.200 GET /scripts/winnt/system32/cmd.exe
/c+dir 80 - 68.32.113.86 - 401 1 64
2004-07-22 01:21:10 192.168.0.200 GET
/scripts/..../winnt/system32/cmd.exe /c+dir 80 - 68.32.113.86 - 401 1 64
2004-07-22 01:21:14 192.168.0.200 GET
/scripts/..../winnt/system32/cmd.exe /c+dir 80 - 68.32.113.86 - 401 1 64
2004-07-22 01:21:14 192.168.0.200 GET
/scripts/..%5c../winnt/system32/cmd.exe /c+dir 80 - 68.32.113.86 - 401 1
64
2004-07-22 01:21:14 192.168.0.200 GET
/scripts/..%2f../winnt/system32/cmd.exe /c+dir 80 - 68.32.113.86 - 401 1
64
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2004-07-22 11:16:03
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2004-07-22 11:16:03 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:16:03 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:16:03 192.168.0.200 GET /WebApp - 80
AQUAFOIL\Administrator 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
301 0 0
2004-07-22 11:16:03 192.168.0.200 GET /WebApp/ - 80
AQUAFOIL\Administrator 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
403 14 5
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2004-07-22 11:17:59
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2004-07-22 11:17:59 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:17:59 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:17:59 192.168.0.200 GET /WebApp - 80
AQUAFOIL\Administrator 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
301 0 0
2004-07-22 11:17:59 192.168.0.200 GET /WebApp/ - 80
AQUAFOIL\Administrator 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
403 14 5
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2004-07-22 11:19:51
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2004-07-22 11:19:51 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:19:51 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:19:51 192.168.0.200 GET /WebApp - 80
AQUAFOIL\Administrator 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
301 0 0
2004-07-22 11:19:51 192.168.0.200 GET /WebApp/ - 80
AQUAFOIL\Administrator 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
403 14 5
2004-07-22 11:20:13 192.168.0.200 GET
/WebApp/vs-60820186029650909_tmp.htm - 80 - 192.168.0.200
Microsoft-Visual-Studio.NET/7.10.3077 401 1 0
2004-07-22 11:20:13 192.168.0.200 GET
/WebApp/vs-60820186029650909_tmp.htm - 80 - 192.168.0.200
Microsoft-Visual-Studio.NET/7.10.3077 401 1 0
2004-07-22 11:20:13 192.168.0.200 GET
/WebApp/vs-60820186029650909_tmp.htm - 80 AQUAFOIL\Administrator
192.168.0.200 Microsoft-Visual-Studio.NET/7.10.3077 200 0 0
2004-07-22 11:20:13 192.168.0.200 GET /_vti_inf.html - 80
AQUAFOIL\Administrator 192.168.0.200
Mozilla/2.0+(compatible;+MS+FrontPage+4.0) 404 0 2
2004-07-22 11:20:13 192.168.0.200 POST
/WebApp/_vti_bin/shtml.exe/_vti_rpc - 80 - 192.168.0.200 MSFrontPage/4.0
401 1 0
2004-07-22 11:20:13 192.168.0.200 POST
/WebApp/_vti_bin/shtml.exe/_vti_rpc - 80 AQUAFOIL\Administrator
192.168.0.200 MSFrontPage/4.0 404 0 3
2004-07-22 11:20:13 192.168.0.200 GET /_vti_inf.html - 80
AQUAFOIL\Administrator 192.168.0.200
Mozilla/2.0+(compatible;+MS+FrontPage+4.0) 404 0 2
2004-07-22 11:20:13 192.168.0.200 POST /_vti_bin/shtml.exe/_vti_rpc - 80
AQUAFOIL\Administrator 192.168.0.200 MSFrontPage/4.0 404 0 3
2004-07-22 11:20:15 192.168.0.200 GET /WebApp/get_aspx_ver.aspx - 80
AQUAFOIL\Administrator 192.168.0.200
Microsoft-Visual-Studio.NET/7.10.3077 404 0 0
2004-07-22 11:23:12 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:23:12 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:23:12 192.168.0.200 GET /WebApp - 80
AQUAFOIL\Administrator 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
301 0 0
2004-07-22 11:23:12 192.168.0.200 GET /WebApp/WebForm1.aspx - 80
AQUAFOIL\Administrator 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
200 0 0
2004-07-22 11:23:35 192.168.0.200 GET /WebApp/ - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:23:51 192.168.0.200 GET /WebApp/ - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:23:51 192.168.0.200 GET /WebApp/WebForm1.aspx - 80
AQUAFOIL\Guest 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 3 0
2004-07-22 11:24:13 192.168.0.200 GET /WebApp/ - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:24:13 192.168.0.200 GET /WebApp/WebForm1.aspx - 80
AQUAFOIL\Guest 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 3 0
2004-07-22 11:24:18 192.168.0.200 GET /WebApp/ - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:24:18 192.168.0.200 GET /WebApp/WebForm1.aspx - 80
AQUAFOIL\Guest 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 3 0
2004-07-22 11:24:54 192.168.0.200 GET /WebApp - 80 - 192.168.0.20
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:24:54 192.168.0.200 GET /WebApp - 80 - 192.168.0.20
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:24:54 192.168.0.200 GET /WebApp - 80
AQUAFOIL\Administrator 192.168.0.20
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CL R+1.1.4322)
301 0 0
2004-07-22 11:24:54 192.168.0.200 GET /WebApp/WebForm1.aspx - 80
AQUAFOIL\Administrator 192.168.0.20
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CL R+1.1.4322)
200 0 0
2004-07-22 11:32:30 192.168.0.200 GET /Acters - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:32:30 192.168.0.200 GET /Acters - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:32:30 192.168.0.200 GET /Acters - 80
AQUAFOIL\Administrator 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
404 0 2
2004-07-22 11:32:50 192.168.0.200 GET /WebApp - 80
AQUAFOIL\Administrator 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
301 0 0
2004-07-22 11:32:50 192.168.0.200 GET /WebApp/WebForm1.aspx - 80
AQUAFOIL\Administrator 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
200 0 0
2004-07-22 11:32:56 192.168.0.200 GET /WebDeploy - 80
AQUAFOIL\Administrator 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
404 0 2
2004-07-22 11:33:20 192.168.0.200 GET /Acters - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:33:27 192.168.0.200 GET /Acters - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:33:27 192.168.0.200 GET /Acters - 80 AQUAFOIL\Guest
192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
404 0 2
2004-07-22 11:36:06 192.168.0.200 GET /Acters - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:36:20 192.168.0.200 GET /Acters - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:36:20 192.168.0.200 GET /Acters - 80 AQUAFOIL\Guest
192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
404 0 2
2004-07-22 11:41:42 192.168.0.200 GET /Acters - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:41:42 192.168.0.200 GET /Acters - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:41:42 192.168.0.200 GET /Acters - 80
AQUAFOIL\Administrator 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
404 0 2
2004-07-22 11:45:04 192.168.0.200 GET /Acters - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:45:11 192.168.0.200 GET /Acters - 80 - 192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
401 1 0
2004-07-22 11:45:11 192.168.0.200 GET /Acters - 80 AQUAFOIL\Guest
192.168.0.200
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
404 0 2
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2004-07-22 14:48:15
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2004-07-22 14:48:15 192.168.0.200 GET /scripts/root.exe /c+dir 80 -
68.175.181.239 - 401 1 64
2004-07-22 14:48:15 192.168.0.200 GET /MSADC/root.exe /c+dir 80 -
68.175.181.239 - 401 1 64
2004-07-22 14:48:15 192.168.0.200 GET /c/winnt/system32/cmd.exe /c+dir
80 - 68.175.181.239 - 401 1 64
2004-07-22 14:48:15 192.168.0.200 GET /d/winnt/system32/cmd.exe /c+dir
80 - 68.175.181.239 - 401 1 64
2004-07-22 14:48:15 192.168.0.200 GET
/scripts/..%5c../winnt/system32/cmd.exe /c+dir 80 - 68.175.181.239 - 401
1 64
2004-07-22 14:48:15 192.168.0.200 GET
/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 80 -
68.175.181.239 - 401 1 64
2004-07-22 14:48:15 192.168.0.200 GET
/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 80 -
68.175.181.239 - 401 1 64
2004-07-22 14:48:15 192.168.0.200 GET /scripts/winnt/system32/cmd.exe
/c+dir 80 - 68.175.181.239 - 401 1 64
2004-07-22 14:48:16 192.168.0.200 GET
/scripts/..../winnt/system32/cmd.exe /c+dir 80 - 68.175.181.239 - 401 1
64
2004-07-22 14:48:16 192.168.0.200 GET
/scripts/..../winnt/system32/cmd.exe /c+dir 80 - 68.175.181.239 - 401 1
64
2004-07-22 14:48:19 192.168.0.200 GET
/scripts/..%5c../winnt/system32/cmd.exe /c+dir 80 - 68.175.181.239 - 401
1 64
2004-07-22 14:48:19 192.168.0.200 GET
/scripts/..%2f../winnt/system32/cmd.exe /c+dir 80 - 68.175.181.239 - 401
1 64
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2004-07-22 18:54:36
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2004-07-22 18:54:36 192.168.0.200 GET /default.ida
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXX
XXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3 %u7801%u9090%u6858%ucb
d3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b %u53ff%u0078%u0000%u00
=a 80 - 68.40.13.10 - 401 1 64
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2004-07-22 22:31:30
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2004-07-22 22:31:30 192.168.0.200 GET /default.ida
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXX
XXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3 %u7801%u9090%u6858%ucb
d3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b %u53ff%u0078%u0000%u00
=a 80 - 68.81.30.123 - 401 1 64
*** Sent via Developersdex [url]http://www.developersdex.com[/url] ***
Don't just participate in USENET...get rewarded for it!
Mike Schultz Guest
-
Jim Cheshire [MSFT] #8 RE: HTTP Error 401: Unauthorized
Hi Mike,
You are getting a 401.1. Look at this:
2004-07-22 14:48:15 192.168.0.200 GET /d/winnt/system32/cmd.exe /c+dir 80 -
68.175.181.239 - 401 1 64
Look at the end of the line, after the IP address. You'll see this:
401 1 64
401.1 is what you're seeing.
Here's an article that outlines all of the IIS status codes. You'll see
that 401.1 indicates logon failure, likely caused by the failure of the
account being used to execute cmd.exe:
[url]http://support.microsoft.com/default.aspx?scid=KB;EN-US;318380[/url]
Jim Cheshire [MSFT]
MCP+I, MCSE, MCSD, MCDBA
Microsoft Developer Support
[email]jamesche@online.microsoft.com[/email]
This post is provided "AS-IS" with no warranties and confers no rights.
--------------------microsoft.public.dotnet.framework.aspnet.security: 10923>From: Mike Schultz <aquafoil@comcast.net>
>References: <MJYg9PDcEHA.3120@cpmsftngxa06.phx.gbl>
>X-Newsreader: AspNNTP 1.50 (ActionJackson.com)
>Subject: RE: HTTP Error 401: Unauthorized
>Mime-Version: 1.0
>Content-Type: text/plain; charset="us-ascii"
>Content-Transfer-Encoding: 7bit
>Message-ID: <#xyMXJFcEHA.3864@TK2MSFTNGP10.phx.gbl>
>Newsgroups: microsoft.public.dotnet.framework.aspnet.security
>Date: Thu, 22 Jul 2004 18:14:00 -0700
>NNTP-Posting-Host: 67.41.129.85
>Lines: 1
>Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTN GP10.phx.gbl
>Xref: cpmsftngxa06.phx.gbl>X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.security
>
>
>
>frefacad
>
>Jim: Thanks for the information. I've included below the latest file in
>C:\WINDOWS\system32\LogFiles\W3kSVC357097357\ex04 0722.log. Once you've
>determined the 'full status code', perhaps you can tell me how you
>determined it, what is its significance, and what is to be done with the
>information. I very much appreciate the time you're taking for this.
>Cheers, Mike Schultz
>
>#Software: Microsoft Internet Information Services 6.0
>#Version: 1.0
>#Date: 2004-07-22 01:21:10
>#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
>cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
>2004-07-22 01:21:10 192.168.0.200 GET /scripts/root.exe /c+dir 80 -
>68.32.113.86 - 401 1 64
>2004-07-22 01:21:10 192.168.0.200 GET /MSADC/root.exe /c+dir 80 -
>68.32.113.86 - 401 1 64
>2004-07-22 01:21:10 192.168.0.200 GET /c/winnt/system32/cmd.exe /c+dir
>80 - 68.32.113.86 - 401 1 64
>2004-07-22 01:21:10 192.168.0.200 GET /d/winnt/system32/cmd.exe /c+dir
>80 - 68.32.113.86 - 401 1 64
>2004-07-22 01:21:10 192.168.0.200 GET
>/scripts/..%5c../winnt/system32/cmd.exe /c+dir 80 - 68.32.113.86 - 401 1
>64
>2004-07-22 01:21:10 192.168.0.200 GET
>/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 80 -
>68.32.113.86 - 401 1 64
>2004-07-22 01:21:10 192.168.0.200 GET
>/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 80 -
>68.32.113.86 - 401 1 64
>2004-07-22 01:21:10 192.168.0.200 GET /scripts/winnt/system32/cmd.exe
>/c+dir 80 - 68.32.113.86 - 401 1 64
>2004-07-22 01:21:10 192.168.0.200 GET
>/scripts/..../winnt/system32/cmd.exe /c+dir 80 - 68.32.113.86 - 401 1 64
>2004-07-22 01:21:14 192.168.0.200 GET
>/scripts/..../winnt/system32/cmd.exe /c+dir 80 - 68.32.113.86 - 401 1 64
>2004-07-22 01:21:14 192.168.0.200 GET
>/scripts/..%5c../winnt/system32/cmd.exe /c+dir 80 - 68.32.113.86 - 401 1
>64
>2004-07-22 01:21:14 192.168.0.200 GET
>/scripts/..%2f../winnt/system32/cmd.exe /c+dir 80 - 68.32.113.86 - 401 1
>64
>#Software: Microsoft Internet Information Services 6.0
>#Version: 1.0
>#Date: 2004-07-22 11:16:03
>#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
>cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
>2004-07-22 11:16:03 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:16:03 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:16:03 192.168.0.200 GET /WebApp - 80
>AQUAFOIL\Administrator 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>301 0 0
>2004-07-22 11:16:03 192.168.0.200 GET /WebApp/ - 80
>AQUAFOIL\Administrator 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>403 14 5
>#Software: Microsoft Internet Information Services 6.0
>#Version: 1.0
>#Date: 2004-07-22 11:17:59
>#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
>cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
>2004-07-22 11:17:59 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:17:59 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:17:59 192.168.0.200 GET /WebApp - 80
>AQUAFOIL\Administrator 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>301 0 0
>2004-07-22 11:17:59 192.168.0.200 GET /WebApp/ - 80
>AQUAFOIL\Administrator 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>403 14 5
>#Software: Microsoft Internet Information Services 6.0
>#Version: 1.0
>#Date: 2004-07-22 11:19:51
>#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
>cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
>2004-07-22 11:19:51 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:19:51 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:19:51 192.168.0.200 GET /WebApp - 80
>AQUAFOIL\Administrator 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>301 0 0
>2004-07-22 11:19:51 192.168.0.200 GET /WebApp/ - 80
>AQUAFOIL\Administrator 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>403 14 5
>2004-07-22 11:20:13 192.168.0.200 GET
>/WebApp/vs-60820186029650909_tmp.htm - 80 - 192.168.0.200
>Microsoft-Visual-Studio.NET/7.10.3077 401 1 0
>2004-07-22 11:20:13 192.168.0.200 GET
>/WebApp/vs-60820186029650909_tmp.htm - 80 - 192.168.0.200
>Microsoft-Visual-Studio.NET/7.10.3077 401 1 0
>2004-07-22 11:20:13 192.168.0.200 GET
>/WebApp/vs-60820186029650909_tmp.htm - 80 AQUAFOIL\Administrator
>192.168.0.200 Microsoft-Visual-Studio.NET/7.10.3077 200 0 0
>2004-07-22 11:20:13 192.168.0.200 GET /_vti_inf.html - 80
>AQUAFOIL\Administrator 192.168.0.200
>Mozilla/2.0+(compatible;+MS+FrontPage+4.0) 404 0 2
>2004-07-22 11:20:13 192.168.0.200 POST
>/WebApp/_vti_bin/shtml.exe/_vti_rpc - 80 - 192.168.0.200 MSFrontPage/4.0
>401 1 0
>2004-07-22 11:20:13 192.168.0.200 POST
>/WebApp/_vti_bin/shtml.exe/_vti_rpc - 80 AQUAFOIL\Administrator
>192.168.0.200 MSFrontPage/4.0 404 0 3
>2004-07-22 11:20:13 192.168.0.200 GET /_vti_inf.html - 80
>AQUAFOIL\Administrator 192.168.0.200
>Mozilla/2.0+(compatible;+MS+FrontPage+4.0) 404 0 2
>2004-07-22 11:20:13 192.168.0.200 POST /_vti_bin/shtml.exe/_vti_rpc - 80
>AQUAFOIL\Administrator 192.168.0.200 MSFrontPage/4.0 404 0 3
>2004-07-22 11:20:15 192.168.0.200 GET /WebApp/get_aspx_ver.aspx - 80
>AQUAFOIL\Administrator 192.168.0.200
>Microsoft-Visual-Studio.NET/7.10.3077 404 0 0
>2004-07-22 11:23:12 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:23:12 192.168.0.200 GET /WebApp - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:23:12 192.168.0.200 GET /WebApp - 80
>AQUAFOIL\Administrator 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>301 0 0
>2004-07-22 11:23:12 192.168.0.200 GET /WebApp/WebForm1.aspx - 80
>AQUAFOIL\Administrator 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>200 0 0
>2004-07-22 11:23:35 192.168.0.200 GET /WebApp/ - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:23:51 192.168.0.200 GET /WebApp/ - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:23:51 192.168.0.200 GET /WebApp/WebForm1.aspx - 80
>AQUAFOIL\Guest 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 3 0
>2004-07-22 11:24:13 192.168.0.200 GET /WebApp/ - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:24:13 192.168.0.200 GET /WebApp/WebForm1.aspx - 80
>AQUAFOIL\Guest 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 3 0
>2004-07-22 11:24:18 192.168.0.200 GET /WebApp/ - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:24:18 192.168.0.200 GET /WebApp/WebForm1.aspx - 80
>AQUAFOIL\Guest 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 3 0
>2004-07-22 11:24:54 192.168.0.200 GET /WebApp - 80 - 192.168.0.20
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:24:54 192.168.0.200 GET /WebApp - 80 - 192.168.0.20
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:24:54 192.168.0.200 GET /WebApp - 80
>AQUAFOIL\Administrator 192.168.0.20
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CL R+1.1.4322)
>301 0 0
>2004-07-22 11:24:54 192.168.0.200 GET /WebApp/WebForm1.aspx - 80
>AQUAFOIL\Administrator 192.168.0.20
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CL R+1.1.4322)
>200 0 0
>2004-07-22 11:32:30 192.168.0.200 GET /Acters - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:32:30 192.168.0.200 GET /Acters - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:32:30 192.168.0.200 GET /Acters - 80
>AQUAFOIL\Administrator 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>404 0 2
>2004-07-22 11:32:50 192.168.0.200 GET /WebApp - 80
>AQUAFOIL\Administrator 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>301 0 0
>2004-07-22 11:32:50 192.168.0.200 GET /WebApp/WebForm1.aspx - 80
>AQUAFOIL\Administrator 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>200 0 0
>2004-07-22 11:32:56 192.168.0.200 GET /WebDeploy - 80
>AQUAFOIL\Administrator 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>404 0 2
>2004-07-22 11:33:20 192.168.0.200 GET /Acters - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:33:27 192.168.0.200 GET /Acters - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:33:27 192.168.0.200 GET /Acters - 80 AQUAFOIL\Guest
>192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>404 0 2
>2004-07-22 11:36:06 192.168.0.200 GET /Acters - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:36:20 192.168.0.200 GET /Acters - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:36:20 192.168.0.200 GET /Acters - 80 AQUAFOIL\Guest
>192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>404 0 2
>2004-07-22 11:41:42 192.168.0.200 GET /Acters - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:41:42 192.168.0.200 GET /Acters - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:41:42 192.168.0.200 GET /Acters - 80
>AQUAFOIL\Administrator 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>404 0 2
>2004-07-22 11:45:04 192.168.0.200 GET /Acters - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:45:11 192.168.0.200 GET /Acters - 80 - 192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>401 1 0
>2004-07-22 11:45:11 192.168.0.200 GET /Acters - 80 AQUAFOIL\Guest
>192.168.0.200
>Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CL R+1.1.4322)
>404 0 2
>#Software: Microsoft Internet Information Services 6.0
>#Version: 1.0
>#Date: 2004-07-22 14:48:15
>#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
>cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
>2004-07-22 14:48:15 192.168.0.200 GET /scripts/root.exe /c+dir 80 -
>68.175.181.239 - 401 1 64
>2004-07-22 14:48:15 192.168.0.200 GET /MSADC/root.exe /c+dir 80 -
>68.175.181.239 - 401 1 64
>2004-07-22 14:48:15 192.168.0.200 GET /c/winnt/system32/cmd.exe /c+dir
>80 - 68.175.181.239 - 401 1 64
>2004-07-22 14:48:15 192.168.0.200 GET /d/winnt/system32/cmd.exe /c+dir
>80 - 68.175.181.239 - 401 1 64
>2004-07-22 14:48:15 192.168.0.200 GET
>/scripts/..%5c../winnt/system32/cmd.exe /c+dir 80 - 68.175.181.239 - 401
>1 64
>2004-07-22 14:48:15 192.168.0.200 GET
>/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 80 -
>68.175.181.239 - 401 1 64
>2004-07-22 14:48:15 192.168.0.200 GET
>/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 80 -
>68.175.181.239 - 401 1 64
>2004-07-22 14:48:15 192.168.0.200 GET /scripts/winnt/system32/cmd.exe
>/c+dir 80 - 68.175.181.239 - 401 1 64
>2004-07-22 14:48:16 192.168.0.200 GET
>/scripts/..../winnt/system32/cmd.exe /c+dir 80 - 68.175.181.239 - 401 1
>64
>2004-07-22 14:48:16 192.168.0.200 GET
>/scripts/..../winnt/system32/cmd.exe /c+dir 80 - 68.175.181.239 - 401 1
>64
>2004-07-22 14:48:19 192.168.0.200 GET
>/scripts/..%5c../winnt/system32/cmd.exe /c+dir 80 - 68.175.181.239 - 401
>1 64
>2004-07-22 14:48:19 192.168.0.200 GET
>/scripts/..%2f../winnt/system32/cmd.exe /c+dir 80 - 68.175.181.239 - 401
>1 64
>#Software: Microsoft Internet Information Services 6.0
>#Version: 1.0
>#Date: 2004-07-22 18:54:36
>#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
>cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
>2004-07-22 18:54:36 192.168.0.200 GET /default.ida
>XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXX
>XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXX
>XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXX
>XXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd 3%u7801%u9090%u6858%ucb
>d3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531 b%u53ff%u0078%u0000%u00
>=a 80 - 68.40.13.10 - 401 1 64
>#Software: Microsoft Internet Information Services 6.0
>#Version: 1.0
>#Date: 2004-07-22 22:31:30
>#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
>cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
>2004-07-22 22:31:30 192.168.0.200 GET /default.ida
>XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXX
>XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXX
>XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXX
>XXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd 3%u7801%u9090%u6858%ucb
>d3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531 b%u53ff%u0078%u0000%u00
>=a 80 - 68.81.30.123 - 401 1 64
>
>
>
>*** Sent via Developersdex [url]http://www.developersdex.com[/url] ***
>Don't just participate in USENET...get rewarded for it!
>Jim Cheshire [MSFT] Guest
Reply With QuoteSimilar Questions and Discussions
Posting Permissions
- You may not post new threads
- You may post replies
- You may not post attachments
- You may not edit your posts
