Reading Error Logs

They have: 13 posts

Joined: Feb 2003

Does anyone know what this means when it appears in my error logs? I see it quite often. Nearly every day. My server is Unix. Is it something on the visitor's computer system that is checking for something or are they typing it in to see if the directories/files exist? If the latter is the case, ahhh ... why?

File does not exist: /www/mydomain/_vti_bin/shtml.exe/_vti_rpc
File does not exist: /www/mydomain/_vti_pvt" and webroot's _vti_pvt directory in FrontPageAlias()
File does not exist: /www/mydomain/_vti_bin/owssvr.dll
File does not exist: /www/mydomain/MSOffice/cltreq.asp

Suzanne's picture

She has: 5,507 posts

Joined: Feb 2000

_vti_bin et cetera is for Front Page extensions. My guess is that someone is seeking a way into your server.

Suzanne's picture

She has: 5,507 posts

Joined: Feb 2000

Someone being a spider, not an actual person.

They have: 13 posts

Joined: Feb 2003

Well, actually today I noticed that the IP checks back to a customer who placed an order today. Odd.

They have: 13 posts

Joined: Feb 2003

Could it be that they are running a personal MS server on their computer system and it does this automatically? Just a wild guess.

Suzanne's picture

She has: 5,507 posts

Joined: Feb 2000

MS is notorious for sneaky checking. Wink

Busy's picture

He has: 6,151 posts

Joined: May 2001

I had found a site about this a while back as it was happening to me, but can't find it now, it bascialy said if its just the standard calls, its just someone using IE, but if the call has add ons (like page.ext?hello=open&pw=please&why=cause etc) it's a hack attempt.

If you don't have FP entensions enabled you have nothing to worry about.

Want to join the discussion? Create an account or log in if you already have one. Joining is fast, free and painless! We’ll even whisk you back here when you’ve finished.