[ckknighting]

I have some errors in event log, and am trying to figure out if the web sites are being accessed from the BB server directly, or if the errors are because of some message being sent to the BB itself. Trend is running and detected violations for the server as well. I am wondering if someone tried to access these site from their BB, if this was some text or BB messenger sent to them with these links, or if there is now malware on the server and we need to run scans on the server itself. Thank you for your time in advance for looking at this and helping troubleshoot. I wanted to show that these web sites are not a normal thing the users would look at (i hope anyway)

Here are 3 logs :

Event Type: Information
Event Source: BlackBerry MDS Connection Service
Event Category: None
Event ID: 35000
Date: 7/31/2010
Time: 3:52:14 PM
User: N/A
Computer: 2K3BES
Description:
<2010-07-31 15:52:14.081 EDT>:[11198]:<MDS-CS_2K3BES_MDS-CS_1>:<EVENT>:<LAYER = IPPP, Image not able to transcode: (website that is of porn nature)favicon.ico>

Event Type: Information
Event Source: BlackBerry MDS Connection Service
Event Category: None
Event ID: 35000
Date: 7/31/2010
Time: 3:55:10 PM
User: N/A
Computer: 2K3BES
Description:
<2010-07-31 15:55:10.553 EDT>:[12355]:<MDS-CS_2K3BES_MDS-CS_1>:<EVENT>:<LAYER = IPPP, Image not able to transcode: (website that is porn nature)favicon.ico>


Event Type: Information
Event Source: BlackBerry MDS Connection Service
Event Category: None
Event ID: 35000
Date: 7/31/2010
Time: 3:55:44 PM
User: N/A
Computer: 2K3BES
Description:
<2010-07-31 15:55:44.819 EDT>:[13087]:<MDS-CS_2K3BES_MDS-CS_1>:<EVENT>:<LAYER = IPPP, Image not able to transcode: (Website that is porn nature)favicon.ico>

[freakinvibe]

Check the MDAT log for details on which user tries to access this page.

[knottyrope]

That entry is from the MDS CS, a user was browsing that website with the BlackBerry browser which uses BES and your internet connection to surf the web.

[ckknighting]

Thank you so much. i was able to discern the user accessing these sites by looking at this log.

Somebody is gettin in twubble! lol