Re: LogFile Help..Newbie

From: s17 (hacked.root@verizon.net)
Date: 02/15/02 

From: "s17" <hacked.root@verizon.net>
To: "<Mark Sargent>" <hatanodai@hotmail.com>, <security-basics@securityfocus.com>
Date: Fri, 15 Feb 2002 00:09:04 -0600

obtain a list of http message codes, 200 = OK, 404 = not found, 403 =
forbidden, ...
the ip 61.184.200.42 at the bottom... that was someone trying to access your
server

s17 hacked.root@verizon.net

----- Original Message -----
From: "<Mark Sargent>" <hatanodai@hotmail.com>
To: <security-basics@securityfocus.com>
Sent: Wednesday, February 13, 2002 03:44
Subject: LogFile Help..Newbie

> Hello All,
>
> I'm rather new to PC's and was wondering what these entries are in my log
> files. I'm running IIS5.0 on Win2kPro, but only locally, I never allow it
to
> run as a server. I use it for some site developing. I also use ZoneAlrmPro
> which seems to block a lot of things. My PC is a home PC, using an ISDN64
> connection. Any help/advice will be greatly appreciated. TIA. Cheers all.
>
> powderkeg...
>
> #Software: Microsoft Internet Information Services 5.0
> #Version: 1.0
> #Date: 2001-12-11 06:22:20
> #Fields: time c-ip cs-method cs-uri-stem sc-status
> 06:22:20 211.97.196.91 [1]USER anonymous@ftp.microsoft.com 331
> 06:22:20 211.97.196.91 [1]PASS - 530
>
> #Software: Microsoft Internet Information Services 5.0
> #Version: 1.0
> #Date: 2002-02-08 17:21:04
> #Fields: time c-ip cs-method cs-uri-stem sc-status
> 17:21:04 200.62.9.2 GET /default.ida 404
>
> #Software: Microsoft Internet Information Services 5.0
> #Version: 1.0
> #Date: 2002-02-11 14:48:42
> #Fields: time c-ip cs-method cs-uri-stem sc-status
> 14:48:42 127.0.0.1 GET /easyboarders/index.htm 200
> 14:48:42 127.0.0.1 GET /easyboarders/Header.htm 200
> 14:48:47 127.0.0.1 GET /easyboarders/Welcome.asp 200
> 14:48:47 127.0.0.1 GET /easyboarders/Footer.asp 200
> 14:48:47 127.0.0.1 GET
/easyboarders/SiteGraphics/ShonanPromoGirl_Thumb.gif
> 200
> 14:48:47 127.0.0.1 GET /easyboarders/SiteGraphics/Header.gif 200
> 14:48:47 127.0.0.1 GET /easyboarders/SiteGraphics/NamiPromo_Thumb.gif 200
> 14:48:47 127.0.0.1 GET
> /easyboarders/SiteGraphics/ReubenRidingBulkleyThumb.gif 200
> 14:48:47 127.0.0.1 GET
> /easyboarders/WebCams/Japan/Shonan/ShonanBeachSurfer_1_Thumb.jpg 200
> 14:48:50 127.0.0.1 GET /easyboarders/SiteGraphics/Footer.gif 200
> 14:48:57 127.0.0.1 GET /easyboarder/ 302
> 14:48:57 127.0.0.1 GET /easyboarder/index.htm 200
> 14:48:57 127.0.0.1 GET /easyboarder/Logos/easyboardermainlogo1.gif 200
> 14:48:57 127.0.0.1 GET /easyboarder/Logos/MenuLogo.gif 200
> 14:48:57 127.0.0.1 GET /easyboarder/Thumbs/JakeJBayPro.jpg 200
> 14:48:57 127.0.0.1 GET /easyboarder/Thumbs/KellyBaldThumb.gif 200
> 14:48:57 127.0.0.1 GET /easyboarder/Logos/BottomMenuLogo.gif 200
> 14:48:57 127.0.0.1 GET /easyboarder/Logos/BottomRightMenuLogo.gif 200
> 15:17:20 127.0.0.1 GET /easyboarder/Rego/SignIn.asp 200
> 15:17:20 127.0.0.1 GET /easyboarder/Logos/MenuLogo.gif 304
> 15:17:20 127.0.0.1 GET /easyboarder/Logos/easyboardermainlogo1.gif 304
> 15:17:20 127.0.0.1 GET /easyboarder/Thumbs/JakeJBayPro.jpg 304
> 15:17:20 127.0.0.1 GET /easyboarder/Logos/BottomMenuLogo.gif 304
> 15:17:20 127.0.0.1 GET /easyboarder/Thumbs/KellyBaldThumb.gif 304
> 15:17:20 127.0.0.1 GET /easyboarder/Logos/BottomRightMenuLogo.gif 304
> 15:17:22 127.0.0.1 GET /easyboarder/Rego/Registration.asp 200
> 15:17:22 127.0.0.1 GET /easyboarder/Logos/easyboardermainlogo1.gif 304
> 15:17:22 127.0.0.1 GET /easyboarder/Logos/MenuLogo.gif 304
> 15:17:22 127.0.0.1 GET /easyboarder/Thumbs/JakeJBayPro.jpg 304
> 15:17:22 127.0.0.1 GET /easyboarder/Thumbs/KellyBaldThumb.gif 304
> 15:17:22 127.0.0.1 GET /easyboarder/Logos/BottomMenuLogo.gif 304
> 15:17:22 127.0.0.1 GET /easyboarder/Logos/BottomRightMenuLogo.gif 304
> 15:17:23 127.0.0.1 GET /easyboarder/Rego/SupplierSignUp.asp 200
> 15:17:23 127.0.0.1 GET /easyboarder/Logos/RegoMainLogo.gif 200
> 15:17:28 127.0.0.1 GET /easyboarder/Rego/MembersSignUp.asp 200
> 15:17:28 127.0.0.1 GET /easyboarder/Logos/RegoMainLogo.gif 304
> 15:17:39 127.0.0.1 GET /easyboarder/Rego/ResellerSignUp.asp 200
> 15:17:39 127.0.0.1 GET /easyboarder/Logos/RegoMainLogo.gif 304
> 15:17:45 127.0.0.1 GET /easyboarder/Rego/RetailerSignUp.asp 200
> 15:17:45 127.0.0.1 GET /easyboarder/Logos/RegoMainLogo.gif 304
> 15:17:56 127.0.0.1 GET /easyboarder/index.htm 200
> 15:17:56 127.0.0.1 GET /easyboarder/Logos/easyboardermainlogo1.gif 304
> 15:17:56 127.0.0.1 GET /easyboarder/Logos/MenuLogo.gif 304
> 15:17:56 127.0.0.1 GET /easyboarder/Thumbs/JakeJBayPro.jpg 304
> 15:17:56 127.0.0.1 GET /easyboarder/Thumbs/KellyBaldThumb.gif 304
> 15:17:56 127.0.0.1 GET /easyboarder/Logos/BottomMenuLogo.gif 304
> 15:17:56 127.0.0.1 GET /easyboarder/Logos/BottomRightMenuLogo.gif 304
> 15:29:22 127.0.0.1 GET /easyboarder/Rego/SignIn.asp 200
> 15:29:22 127.0.0.1 GET /easyboarder/Logos/MenuLogo.gif 304
> 15:29:22 127.0.0.1 GET /easyboarder/Logos/easyboardermainlogo1.gif 304
> 15:29:22 127.0.0.1 GET /easyboarder/Thumbs/KellyBaldThumb.gif 304
> 15:29:22 127.0.0.1 GET /easyboarder/Thumbs/JakeJBayPro.jpg 304
> 15:29:22 127.0.0.1 GET /easyboarder/Logos/BottomMenuLogo.gif 304
> 15:29:22 127.0.0.1 GET /easyboarder/Logos/BottomRightMenuLogo.gif 304
> 15:29:24 127.0.0.1 GET /easyboarder/Rego/Registration.asp 200
> 15:29:24 127.0.0.1 GET /easyboarder/Logos/easyboardermainlogo1.gif 304
> 15:29:24 127.0.0.1 GET /easyboarder/Logos/MenuLogo.gif 304
> 15:29:24 127.0.0.1 GET /easyboarder/Thumbs/JakeJBayPro.jpg 304
> 15:29:24 127.0.0.1 GET /easyboarder/Thumbs/KellyBaldThumb.gif 304
> 15:29:24 127.0.0.1 GET /easyboarder/Logos/BottomMenuLogo.gif 304
> 15:29:24 127.0.0.1 GET /easyboarder/Logos/BottomRightMenuLogo.gif 304
> 15:37:21 61.184.200.42 GET /default.ida 404
>
>

Relevant Pages