Home page logo
/

basics logo Security Basics mailing list archives

Strange log entries
From: "Mike Heitz" <mikeheitz () upshotmail com>
Date: Fri, 20 Dec 2002 11:45:45 -0600

I've run across a couple log entries on my OWA server. I'm pretty new to
security (about a decade as a network admin, now taking on more and more
responsibility) and have Googled the Propfind command... only a handful
of results (including a MS Whitepaper I am currently reading).

Does anyone know what this is exactly? We do not have Instant Messaging
enabled on the server... my main concern is that the Username that was
listed was my own!!! I've used Visual Route to trace the IP addresses
back with marginal success (one got lost after a bunch of hops and the
other ended up in Pittsburgh, PA).

Any ideas or info would be greatly appreciated. Thanks!

2002-12-19 17:35:28 65.119.193.141 - 192.168.43.17 80 PROPFIND
/instmsg/aliases/<username> - 404 -

then a short time later

2002-12-19 20:54:13 141.189.251.1 - 192.168.43.17 80 PROPFIND
/instmsg/aliases/<username> - 404 -


mike heitz ** sr it manager ** UPSHOT
312-943-0900 x5190


  By Date           By Thread  

Current thread:
  • Strange log entries Mike Heitz (Dec 23)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault