Look At this !
- From: "Danny" <uesse@xxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 29 Oct 2001 10:52:18 +0100
This is what my ISA log file registered.
There is 8 records.
I don't understand what this user tried to do:
151.20.72.81 anonymous MSFrontPage/4.0 2001-10-25 10:12:37 MYSERVER -
www.mydomain.com 10.1.2.3 80 - 366 245 http POST
http://10.1.2.3/_vti_bin/shtml.dll/_vti_rpc Inet 404
======================================
POST ? What did he POST on my server ?
======================================
151.20.72.81 anonymous Mozilla/2.0 (compatible; MS FrontPage 4.0) 2001-10-25
10:12:38 MYSERVER - www.mydomain.com - 80 - 307 700 http GET
http://10.1.2.3/myDefaultNoFlash.htm Cache 0
151.20.72.81 anonymous Mozilla/2.0 (compatible; MS FrontPage 4.0) 2001-10-25
10:12:41 MYSERVER - www.mydomain.com - 80 - 297 1986 http GET
http://10.1.2.3/_vti_inf.html Cache 0
151.20.72.81 anonymous MSFrontPage/4.0 2001-10-25 10:12:42 MYSERVER -
www.mydomain.com 10.1.2.3 80 10 366 245 http POST
http://10.1.2.3/_vti_bin/shtml.dll/_vti_rpc Inet 404
151.20.72.81 anonymous Mozilla/2.0 (compatible; MS FrontPage 4.0) 2001-10-25
10:12:43 MYSERVER - www.mydomain.com - 80 10 298 1055 http GET
http://10.1.2.3/mynavigation.htm Cache 0
151.20.72.81 anonymous Mozilla/2.0 (compatible; MS FrontPage 4.0) 2001-10-25
10:12:43 MYSERVER - www.mydomain.com - 80 - 297 1986 http GET
http://10.1.2.3/_vti_inf.html Cache 0
151.20.72.81 anonymous MSFrontPage/4.0 2001-10-25 10:12:44 MYSERVER -
www.mydomain.com 10.1.2.3 80 10 366 245 http POST
http://10.1.2.3/_vti_bin/shtml.dll/_vti_rpc Inet 404
151.20.72.81 anonymous Mozilla/2.0 (compatible; MS FrontPage 4.0) 2001-10-25
10:12:44 MYSERVER - www.mydomain.com - 80 - 304 3530 http GET
http://10.1.2.3/mysiteNoFlash.htm Cache 0
Please help me to understand all this !
Danny
Other related posts:
