Security Incidents mailing list archives

Re: http activity


From: Hugo van der Kooij <hvdkooij () VANDERKOOIJ ORG>
Date: Wed, 21 Mar 2001 19:27:37 +0100

On Wed, 21 Mar 2001, Burak DAYIOGLU wrote:

X.X.X.X - - [19/Mar/2001:23:17:39 +0200] "GET
/adserver/phpads.php3?what=140x60&n=tr HTTP/1.1" 404 226
X.X.X.X - - [20/Mar/2001:01:52:03 +0200] "GET /"http:/some-domain.com",
HTTP/1.0" 404 217
X.X.X.X - - [20/Mar/2001:03:54:36 +0200] "GET /"http:/some-domain.com",
HTTP/1.0" 404 217
X.X.X.X - - [20/Mar/2001:03:43:14 +0200] "GET /"http:/some-domain.com",
HTTP/1.0" 404 217

Start by checking if you have a page with a typo.

If you have just 1 / instead of 2 the URL is not recognized as an absolute
URL.

The date/time info however is not linear in this log and may point to
another server problem.

Hugo.

--
Hugo van der Kooij; Oranje Nassaustraat 16; 3155 VJ  Maasland
hvdkooij () vanderkooij org             http://hvdkooij.xs4all.nl/

        Don't meddle in the affairs of sysadmins,
        for they are subtle and quick to anger.


Current thread: