Solved

IIS \ W3SVC1 Log Explanation

Posted on 2011-02-28
1
1,394 Views
Last Modified: 2012-05-11
I need help in understanding an IIS (W3SVC1) log file.

The log file below references directories that used to be hosted on this server over a year ago.  The logs are from today though.  And these were simple directories that are now hosted on a different server that is not running IIS.  In fact, I have no idea on why these directories would even be mentioned in an IIS log.

Can anyone help explain what would make the generatorrepairdb, g5135 and specs directories appear as they do in an IIS log?


#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2011-02-28 00:08:57
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2011-02-28 00:08:57 xx.xx.62.14 OPTIONS / - 80 - xx.xx.39.204 Microsoft-WebDAV-MiniRedir/5.1.2600 200 0 0
2011-02-28 00:08:57 xx.xx.62.14 PROPFIND /generator%20repair%20db - 80 - xx.xx.39.204 Microsoft-WebDAV-MiniRedir/5.1.2600 501 0 0
2011-02-28 00:08:57 xx.xx.62.14 OPTIONS / - 80 - xx.xx.39.204 Microsoft-WebDAV-MiniRedir/5.1.2600 200 0 0
2011-02-28 00:08:57 xx.xx.62.14 PROPFIND /generator%20repair%20db - 80 - xx.xx.39.204 Microsoft-WebDAV-MiniRedir/5.1.2600 501 0 0

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2011-02-28 00:27:14
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2011-02-28 00:27:14 xx.xx.62.14 OPTIONS / - 80 - xx.xx.66.81 Microsoft-WebDAV-MiniRedir/5.1.2600 200 0 0
2011-02-28 00:27:14 xx.xx.62.14 PROPFIND /g5135 - 80 - xx.xx.66.81 Microsoft-WebDAV-MiniRedir/5.1.2600 501 0 0
2011-02-28 00:27:14 xx.xx.62.14 PROPFIND /specs - 80 - xx.xx.66.81 Microsoft-WebDAV-MiniRedir/5.1.2600 501 0 0
0
Comment
Question by:fraunkd
1 Comment
 
LVL 29

Accepted Solution

by:
Paul Jackson earned 500 total points
ID: 35000829
These are webdav requests, it would seem something somewhere on your network is requesting them. Could be a file sharing program, sharepoint something like that still has a reference to them.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What is an ISAPI filter?   •      It's an assembly (.dll file) that can add or change the way IIS works.   •      They can be enabled globally for your web server or on a site-by-site basis.   When the IIS server receives a request, enabling the ISAPI fi…
When it comes to showing a 404 error page to your visitors, you do not want that generic page to show, and you especially do not want your hosting provider’s ad error page to show either. In this article, I will show you how to enable the custom 40…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question