[Techtalk] help! security experts

[Jenn Vesperman]

On Mon, 2002-08-26 at 22:06, Linda wrote:
> I was checking the raw log files from one of my websites on a 
> webhost. I found the following entries.
> 
> What do they mean? I emailed my webhost's tech support and 
> they said they didn't know!!!
> 
> 65.102.23.169 - - [25/Aug/2002:16:23:55 -0700] "GET /?N=D HTTP/1.0" "-" 200 2568
> 65.102.23.161 - - [25/Aug/2002:16:24:01 -0700] "GET /?M=A HTTP/1.0" "-" 200 2568
> 65.102.12.225 - - [25/Aug/2002:16:24:07 -0700] "GET /?S=A HTTP/1.0" "-" 200 2568
> 65.102.12.225 - - [25/Aug/2002:16:24:18 -0700] "GET /?D=A HTTP/1.0" "-" 200 2568

They're GET requests using the HTTP 1.0 standard, for the document '/'
with the parameters 'N=D', 'M=A', etc. 

So basically, they're asking for the base directory of the website, with
certain parameters. I suspect the parameters mean something to some
webservers - it looks to me like it might be a probe of the webserver.



Jenn V.
-- 
    "Do you ever wonder if there's a whole section of geek culture 
        	you miss out on by being a geek?" - Dancer.

jenn at anthill.echidna.id.au     http://anthill.echidna.id.au/~jenn/