[Dshield] help identify IIS log entry

John Hardin johnh at aproposretail.com
Tue Mar 25 17:47:14 GMT 2003


On Sun, 2003-03-23 at 16:08, Jeff Kell wrote:
> Mrcorp wrote:
> > Here is a new entry in my IIS logs.  Never seen this one before...
> > 
> > 2003-03-20 03:32:56 195.92.95.61 - 192.168.0.1 80 OPTIONS * - 200 407 108 0 www.mrcorp.net
> > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1)
> 
> Scanning for the latest WebDAV bug in IIS.

Johannes, do we (you, actually :) want to set up a RedAlert-style
repository for these log entries?

-- 
John Hardin  KA7OHZ                           <johnh at aproposretail.com>
Internal Systems Administrator                    voice: (425) 672-1304
Apropos Retail Management Systems, Inc.             fax: (425) 672-0192
-----------------------------------------------------------------------
 "To disable the Internet to save EMI and Disney is the moral
  equivalent of burning down the library of Alexandria to ensure the
  livelihood of monastic scribes."
                                    -- John Ippolito of the Guggenheim
-----------------------------------------------------------------------
 58 days until The Matrix Reloaded



More information about the list mailing list