Subj : security To : All From : DieselMan Date : Sun Jun 26 2005 09:20 pm here's my http log for the last few minutes before the bbs was shut down and the console looked just like it was when i posted a snap shot of it from my H-D account from vert. I didn't have http logging on earlier when it happened. Rune Master wanted to see the log. so here it is. 69.243.255.224 - dieselman [26/Jun/2005:18:46:32 -0500] "GET /msgs/index.ssjs HTTP/1.1" 200 - "http://thesolution.homelinux.org/members/userlist.ssjs" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 69.243.255.224 - dieselman [26/Jun/2005:18:46:37 -0500] "GET /msgs/subs.ssjs?msg_grp=Recovery HTTP/1.1" 200 - "http://thesolution.homelinux.org/msgs/index.ssjs" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 207.200.116.136 - - [26/Jun/2005:19:31:55 -0500] "GET / HTTP/1.0" 200 - "-" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; YPC 3.0.1; SV1)" 207.200.116.133 - - [26/Jun/2005:19:31:56 -0500] "GET /synchronet.css HTTP/1.0" 200 13690 "http://thesolution.homelinux.org/" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; YPC 3.0.1; SV1)" 207.200.116.201 - - [26/Jun/2005:19:31:57 -0500] "GET /graphics/tnav_bg.gif HTTP/1.0" 200 309 "http://thesolution.homelinux.org/" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; YPC 3.0.1; SV1)" 207.200.116.9 - - [26/Jun/2005:19:31:57 -0500] "GET /graphics/tnav_right.gif HTTP/1.0" 200 578 "http://thesolution.homelinux.org/" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; YPC 3.0.1; SV1)" 207.200.116.67 - - [26/Jun/2005:19:31:57 -0500] "GET /graphics/tl_curve_grey.gif HTTP/1.0" 200 59 "http://thesolution.homelinux.org/" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; YPC 3.0.1; SV1)" 207.200.116.68 - - [26/Jun/2005:19:31:58 -0500] "GET /graphics/tr_curve_grey.gif HTTP/1.0" 200 58 "http://thesolution.homelinux.org/" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; YPC 3.0.1; SV1)" 207.200.116.200 - - [26/Jun/2005:19:31:58 -0500] "GET /graphics/bg_grad.jpg HTTP/1.0" 200 1907 "http://thesolution.homelinux.org/" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; YPC 3.0.1; SV1)" 207.200.116.6 - - [26/Jun/2005:19:31:58 -0500] "GET /graphics/tnav_left.gif HTTP/1.0" 200 580 "http://thesolution.homelinux.org/" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; YPC 3.0.1; SV1)" 207.200.116.198 - - [26/Jun/2005:19:31:58 -0500] "GET /graphics/bg_nav.jpg HTTP/1.0" 200 380 "http://thesolution.homelinux.org/" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; YPC 3.0.1; SV1)" 207.200.116.133 - - [26/Jun/2005:19:31:58 -0500] "GET /graphics/sync_pbgj1_grey_bg.gif HTTP/1.0" 200 6920 "http://thesolution.homelinux.org/" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; YPC 3.0.1; SV1)" 207.200.116.73 - - [26/Jun/2005:19:32:05 -0500] "GET /newuser.ssjs HTTP/1.0" 200 - "http://thesolution.homelinux.org/" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; YPC 3.0.1; SV1)" 207.200.116.72 - - [26/Jun/2005:19:32:06 -0500] "GET /graphics/join.gif HTTP/1.0" 200 3337 "http://thesolution.homelinux.org/newuser.ssjs" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; YPC 3.0.1; SV1)" 207.200.116.73 - - [26/Jun/2005:19:35:05 -0500] "POST /newuser.ssjs HTTP/1.0" 200 - "http://thesolution.homelinux.org/newuser.ssjs" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; YPC 3.0.1; SV1)" 207.200.116.67 - - [26/Jun/2005:19:35:23 -0500] "GET /login.ssjs HTTP/1.0" 401 93 "http://thesolution.homelinux.org/newuser.ssjs" "Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; YPC 3.0.1; SV1)" 69.243.102.184 - - [26/Jun/2005:20:02:10 -0500] "GET / HTTP/1.0" 401 175 "-" "-" and at this point the console commands where given to terminate all servers...etc look at the post from h-d with the console snap shot. just like that any answer's to this one? :) thanks Have a great day, DieselMan --- þ Synchronet þ There Is A Solutionhttp://thesolution.homelinux.org .