Advice needed: Trawling logs - wierd entry found

Strange log file entry requires assitance

[dkintheuk]

Hi all,

I've just been looking through my access log files and found the following error link.

example.co.ukPUT /www.arplhmd.example2.net_@@RNDSTR@@

My own site is www.example.co.uk and the error appears to be someone trying to put a file into my webspace.

Am i correct? If so then i will investigate the IP that did it and complain about this.

Anyone seen this sort of thing before?

Thanks,

Rob.

[edited by: jatar_k at 9:23 pm (utc) on Sep. 6, 2005]
[edit reason] examplified [/edit]

[Dijkgraaf]

Yes every so often I see entries like that, see some examples below, and yes it is someone trying to see if they can publish a page to your site, probably a script kiddie.

85.99.48.### - - [26/May/2005:16:03:55 +1200] "PUT /ChatizSnc.htm HTTP/1.0" 405 300 "-" "Microsoft Data Access Internet Publishing Provider DAV 1.1"

85.98.16.###- - [29/May/2005:02:35:33 +1200] "PUT /index.htm HTTP/1.0" 405 300 "-" "Microsoft Data Access Internet Publishing Provider DAV 1.1"

81.214.172.### - - [14/Aug/2005:06:36:50 +1200] "PUT /isko.htm HTTP/1.0" 405 299 "-" "Microsoft Data Access Internet Publishing Provider DAV 1.1"