.net Clr 1.1.4322

Is this ok or not?

[JadedJane]

I found this in my logs tonight.. I do not understand what they were looking for.. Should I ban this IP or it this something that is ok? Can someone tell me what this "GET" means?

63-162-133-193-dsl.etv.net - - [26/Aug/2003:21:39:24 -0500] "GET /_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=4219&STRMVER=4&CAPREQ=0 HTTP/1.1" 401 226 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"

Thanks
Jane

[wkitty42]

most all _vti_whatever stuff is where someone tried to use some sort of frontpage extensions... they may simply have viewed the page and then selected to edit it as a way of viewing the sourcecode to the page... i don't recall exactly what the owssvr.dll call does...

this thread [webmasterworld.com] appears to suggest that this may be something related to the IE Discussion toolbar button... this search [searchengineworld.com] may also offer additional information...

[JadedJane]

Thanks WKitty42,

Normaly I don't mess with my logs, but since I am banning all Grub-client IPs right now, I have been looking at them quite a bit...It seems I have a lot to learn about logs.

Thanks again for the reply!

[wkitty42]

banning all grub-client IPs? whoa... that's going to be quite a list... according to their stats, there are over 21000 members with over 2000 active this month... see [grub.org ] for more information...

logs are very interesting... especially after they are parsed and analyzed... otherwise, they are too much information overload... i've been watching logs for over 15years and speak from experiance ;)

the biggest thing is that with today's world, if we find something, google or another search engine can usually turn up a reference to it somewhere... it only takes one reference to make all the difference :)