URL Scan Log Samples

Samples genereated with firmware version: -
Date entry created: 2004-03-29

 

Download the Complete Logfile Sample as Zip-File


[11-28-2002 - 08:31:41] ---------------- Initializing UrlScan.log ----------------
[11-28-2002 - 08:31:41] -- Filter initialization time: [11-28-2002 - 08:31:41] --
[11-28-2002 - 08:31:41] ---------------- UrlScan.dll Initializing ----------------
[11-28-2002 - 08:31:41] UrlScan will return the following URL for rejected requests: "/"
[11-28-2002 - 08:31:41] URLs will be normalized before analysis.
[11-28-2002 - 08:31:41] URL normalization will be verified.
[11-28-2002 - 08:31:41] URLs must contain only ANSI characters.
[11-28-2002 - 08:31:41] Only the following verbs will be allowed (case sensitive):
[11-28-2002 - 08:31:41] 'GET'
[11-28-2002 - 08:31:41] 'HEAD'
[11-28-2002 - 08:31:41] 'POST'
[11-28-2002 - 08:31:41] 'PROPFIND'
[11-28-2002 - 08:31:41] 'LOCK'
[11-28-2002 - 08:31:41] 'OPTIONS'
[11-28-2002 - 08:31:41] Requests for following extensions will be rejected:
[11-28-2002 - 08:31:41] '.bat'
[11-28-2002 - 08:31:41] '.cmd'
[11-28-2002 - 08:31:41] '.com'
[11-28-2002 - 08:31:41] '.htw'
[11-28-2002 - 08:31:41] '.ida'
[11-28-2002 - 08:31:41] '.idq'
[11-28-2002 - 08:31:41] '.htr'
[11-28-2002 - 08:31:41] '.idc'
[11-28-2002 - 08:31:41] '.shtml'
[11-28-2002 - 08:31:41] '.stm'
[11-28-2002 - 08:31:41] '.printer'
[11-28-2002 - 08:31:41] '.log'
[11-28-2002 - 08:31:41] '.pol'
[11-28-2002 - 08:31:41] '.dat'
[11-28-2002 - 08:31:41] Requests containing the following character sequences will be rejected:
[11-28-2002 - 08:31:41] '..'
[11-28-2002 - 08:31:41] './'
[11-29-2002 - 15:22:37] Client at 24.69.73.3: URL contains high bit character. Request will be rejected. Site Instance='1', Raw URL='/scripts/mail.exe/2001.jpg'
[11-29-2002 - 15:22:47] Client at 24.69.73.3: URL contains high bit character. Request will be rejected. Site Instance='1', Raw URL='/scripts/mail.exe/2001.jpg'
[11-29-2002 - 21:15:17] Client at 24.67.253.204: URL contains extension '.com', which is disallowed. Request will be rejected. Site Instance='1', Raw URL='/scripts/www.the5yearjournal.com'
[12-02-2002 - 09:52:33] Client at 142.27.68.15: URL contains high bit character. Request will be rejected. Site Instance='1', Raw URL='/scripts/mail.exe/2001%C2%A4%C3%AB%C2%BE%C3%A4.jpg'
[12-02-2002 - 09:52:43] Client at 142.27.68.15: URL contains high bit character. Request will be rejected. Site Instance='1', Raw URL='/scripts/mail.exe/2001%C2%A4%C3%AB%C2%BE%C3%A4.jpg'
[12-02-2002 - 09:52:52] Client at 142.27.68.15: URL contains high bit character. Request will be rejected. Site Instance='1', Raw URL='/scripts/mail.exe/2001%C2%A4%C3%AB%C2%BE%C3%A4.jpg'
[12-02-2002 - 09:52:58] Client at 142.27.68.15: URL contains high bit character. Request will be rejected. Site Instance='1', Raw URL='/scripts/mail.exe/2001%C2%A4%C3%AB%C2%BE%C3%A4.jpg'
[12-02-2002 - 12:27:48] ---------------- UrlScan.dll Terminating -----------------
[12-02-2002 - 12:34:15] ---------------- Initializing UrlScan.log ----------------
[12-02-2002 - 12:34:15] -- Filter initialization time: [12-02-2002 - 12:34:15] --
[12-02-2002 - 12:34:15] ---------------- UrlScan.dll Initializing ----------------
[12-02-2002 - 12:34:15] UrlScan will return the following URL for rejected requests: "/"
[12-02-2002 - 12:34:15] URLs will be normalized before analysis.
[12-02-2002 - 12:34:15] URL normalization will be verified.
[12-02-2002 - 12:34:15] URLs must contain only ANSI characters.
[12-02-2002 - 12:34:15] Only the following verbs will be allowed (case sensitive):
[12-02-2002 - 12:34:15] 'GET'
[12-02-2002 - 12:34:15] 'HEAD'
[12-02-2002 - 12:34:15] 'POST'
[12-02-2002 - 12:34:15] 'PROPFIND'
[12-02-2002 - 12:34:15] 'LOCK'
[12-02-2002 - 12:34:15] 'OPTIONS'
[12-02-2002 - 12:34:15] Requests for following extensions will be rejected:
[12-02-2002 - 12:34:15] '.bat'
[12-02-2002 - 12:34:15] '.cmd'
[12-02-2002 - 12:34:15] '.com'
[12-02-2002 - 12:34:15] '.htw'
[12-02-2002 - 12:34:15] '.ida'
[12-02-2002 - 12:34:15] '.idq'
[12-02-2002 - 12:34:15] '.htr'
[12-02-2002 - 12:34:15] '.idc'
[12-02-2002 - 12:34:15] '.shtml'
[12-02-2002 - 12:34:15] '.stm'
[12-02-2002 - 12:34:15] '.printer'
[12-02-2002 - 12:34:15] '.log'
[12-02-2002 - 12:34:15] '.pol'
[12-02-2002 - 12:34:15] '.dat'
[12-02-2002 - 12:34:15] Requests containing the following character sequences will be rejected:
[12-02-2002 - 12:34:15] '..'
[12-02-2002 - 12:34:15] './'


Syslog messages generated by these products can be received by MonitorWare Agent and WinSyslog.

All information in this section is to the best of our knowledge but without warrenty of any kind. This is free information - use it at your sole risk.

[Back to Log Samples]


 

Back to Non-Printer Version