RE: [WEB400] error logs

["Andrew Borts" <Andrewb@xxxxxxxxxxxxxxxxxxx>]

mail.rooftile.com <-- Resolved address - does that make sense Jim?

Andrew Borts / Webmaster
Seta Corporation
6400 East Rogers Circle
Boca Raton, FL 33499

E-mail: Andrewb@setacorporation.com
Corporate web site http://www.setacorporation.com
E-Commerce web site http://www.palmbeachjewelry.com
                              http://www.myfreeitems.com
Voice: 561-994-2660 Ext. 2211 / Fax: 561-997-0774

-----Original Message-----
From: Jim Franz [mailto:franz400@triad.rr.com]
Sent: Monday, December 03, 2001 10:23 PM
To: WEB400@midrange.com
Subject: [WEB400] error logs

This is a multi-part message in MIME format.
--
[ Picked text/plain from multipart/alternative ]
In addition to the normal Red Worm or Nimda junk, I see this
from only this one address. What bothers me is the "input timer expired"
msg, like it actually tried to execute something.
The wwwaccess log has nothing for this address (thanks!).
This one address is banging on my system regularly since July. Is it a
web crawler?

[28/Nov/2001:10:01:23 +0000]FORBIDDEN BY RULE   199.227.45.130
/bnc
[28/Nov/2001:10:01:24 +0000]FORBIDDEN BY RULE   199.227.45.130
/_vti_inf.html
[28/Nov/2001:10:01:25 +0000]FORBIDDEN BY RULE   199.227.45.130
/_vti_bin/shtml.exe/_vti_rpc
[28/Nov/2001:10:05:55 +0000]Input timer expired 199.227.45.130

btw-the /bnc is part of a mapped dir
jim franz
--


_______________________________________________
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/web400
or email: WEB400-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.