Apache crashes frequently. Log posted

cecilian · September 6, 2008

I am running a Joomla instance using Uniform Server 3.5 on Win xp sp2. Things were very good until last week when Apache started hanging often and I had to frequently stop the server and restart it again.. This the error.log post

[Fri Sep 05 15:03:36 2008] [notice] Apache/2.0.59 (Win32) DAV/2 PHP/5.2.3 configured -- resuming normal operations

[Fri Sep 05 15:03:36 2008] [notice] Server built: Jul 27 2006 15:55:03

[Fri Sep 05 15:03:36 2008] [notice] Parent: Created child process 4008

[Fri Sep 05 15:03:36 2008] [notice] Disabled use of AcceptEx() WinSock2 API

[Fri Sep 05 15:03:37 2008] [notice] Child 4008: Child process is running

[Fri Sep 05 15:03:37 2008] [notice] Child 4008: Acquired the start mutex.

[Fri Sep 05 15:03:37 2008] [notice] Child 4008: Starting 250 worker threads.

[Fri Sep 05 15:03:37 2008] [notice] Child 4008: Listening on port 80.

[Fri Sep 05 15:03:37 2008] [error] [client 127.0.0.1] client denied by server configuration: W:/home/admin/www/

[Fri Sep 05 15:03:41 2008] [error] [client 10.10.74.247] PHP Fatal error: Cannot redeclare birthdays_main() in W:\\www\\portal\\modules\\mod_birthdays.php on line 54

Error in my_thread_global_end(): 253 threads didn't exit

[Fri Sep 05 17:24:48 2008] [error] Parent: child process exited with status 3 -- Aborting.

[Fri Sep 05 17:24:48 2008] [notice] Apache/2.0.59 (Win32) DAV/2 PHP/5.2.3 configured -- resuming normal operations

[Fri Sep 05 17:24:48 2008] [notice] Server built: Jul 27 2006 15:55:03

[Fri Sep 05 17:24:48 2008] [notice] Parent: Created child process 2340

[Fri Sep 05 17:24:48 2008] [notice] Disabled use of AcceptEx() WinSock2 API

[Fri Sep 05 17:24:48 2008] [notice] Child 2340: Child process is running

[Fri Sep 05 17:24:48 2008] [notice] Child 2340: Acquired the start mutex.

[Fri Sep 05 17:24:48 2008] [notice] Child 2340: Starting 250 worker threads.

[Fri Sep 05 18:18:26 2008] [notice] Apache/2.0.59 (Win32) DAV/2 PHP/5.2.3 configured -- resuming normal operations

[Fri Sep 05 18:18:26 2008] [notice] Server built: Jul 27 2006 15:55:03

[Fri Sep 05 18:18:26 2008] [notice] Parent: Created child process 2600

[Fri Sep 05 18:18:26 2008] [notice] Disabled use of AcceptEx() WinSock2 API

[Fri Sep 05 18:18:26 2008] [notice] Child 2600: Child process is running

[Fri Sep 05 18:18:26 2008] [notice] Child 2600: Acquired the start mutex.

[Fri Sep 05 18:18:26 2008] [notice] Child 2600: Starting 250 worker threads.

[Fri Sep 05 18:18:26 2008] [notice] Child 2600: Listening on port 80.

[Fri Sep 05 18:18:26 2008] [error] [client 127.0.0.1] client denied by server configuration: W:/home/admin/www/

[Fri Sep 05 18:18:29 2008] [error] [client 10.10.78.87] PHP Fatal error: Cannot redeclare birthdays_main() in W:\\www\\portal\\modules\\mod_birthdays.php on line 54

[sat Sep 06 09:41:08 2008] [error] [client 10.10.74.247] File does not exist: W:/www/training/images, referer: http://10.1.5.236/training/empmain.php?act...;staffid=185817

[sat Sep 06 10:19:27 2008] [error] [client 10.10.74.247] File does not exist: W:/www/training/prev.gif, referer: http://10.1.5.236/training/empsub.php?staf...n=record_insert

[sat Sep 06 10:19:28 2008] [error] [client 10.10.74.247] File does not exist: W:/www/training/next.gif, referer: http://10.1.5.236/training/empsub.php?staf...n=record_insert

[sat Sep 06 10:24:04 2008] [error] [client 10.10.74.247] File does not exist: W:/www/training/images, referer: http://10.1.5.236/training/empmain.php?act...;staffid=192961

[sat Sep 06 10:55:18 2008] [error] [client 10.10.74.247] File does not exist: W:/www/training/images, referer: http://10.1.5.236/training/empmain.php?act...;staffid=123234

[sat Sep 06 10:55:36 2008] [error] [client 10.10.74.247] File does not exist: W:/www/training/images, referer: http://10.1.5.236/training/empmain.php?act...;staffid=102555

[sat Sep 06 10:55:47 2008] [error] [client 10.10.74.247] File does not exist: W:/www/training/images, referer: http://10.1.5.236/training/empmain.php?act...;staffid=188352

[sat Sep 06 10:55:57 2008] [error] [client 10.10.74.247] File does not exist: W:/www/training/images, referer: http://10.1.5.236/training/empmain.php?act...;staffid=190276

[sat Sep 06 10:56:10 2008] [error] [client 10.10.74.247] File does not exist: W:/www/training/images, referer: http://10.1.5.236/training/empmain.php?act...;staffid=106780

[sat Sep 06 11:28:35 2008] [error] [client 10.10.74.247] File does not exist: W:/www/training/images, referer: http://10.1.5.236/training/empmain.php?act...;staffid=190276

[sat Sep 06 11:28:41 2008] [error] [client 10.10.74.247] File does not exist: W:/www/training/images, referer: http://10.1.5.236/training/empmain.php?act...;staffid=109401

Error in my_thread_global_end(): 253 threads didn't exit

[sat Sep 06 12:04:59 2008] [error] Parent: child process exited with status 3 -- Aborting.

[sat Sep 06 12:04:59 2008] [notice] Apache/2.0.59 (Win32) DAV/2 PHP/5.2.3 configured -- resuming normal operations

[sat Sep 06 12:04:59 2008] [notice] Server built: Jul 27 2006 15:55:03

[sat Sep 06 12:04:59 2008] [notice] Parent: Created child process 4016

[sat Sep 06 12:04:59 2008] [notice] Disabled use of AcceptEx() WinSock2 API

[sat Sep 06 12:04:59 2008] [notice] Child 4016: Child process is running

[sat Sep 06 12:04:59 2008] [notice] Child 4016: Acquired the start mutex.

[sat Sep 06 12:04:59 2008] [notice] Child 4016: Starting 250 worker threads.

[sat Sep 06 12:38:27 2008] [notice] Apache/2.0.59 (Win32) DAV/2 PHP/5.2.3 configured -- resuming normal operations

[sat Sep 06 12:38:27 2008] [notice] Server built: Jul 27 2006 15:55:03

[sat Sep 06 12:38:27 2008] [notice] Parent: Created child process 3456

[sat Sep 06 12:38:27 2008] [notice] Disabled use of AcceptEx() WinSock2 API

[sat Sep 06 12:38:27 2008] [notice] Child 3456: Child process is running

[sat Sep 06 12:38:27 2008] [notice] Child 3456: Acquired the start mutex.

[sat Sep 06 12:38:27 2008] [notice] Child 3456: Starting 250 worker threads.

[sat Sep 06 12:38:27 2008] [notice] Child 3456: Listening on port 80.

[sat Sep 06 12:38:27 2008] [error] [client 127.0.0.1] client denied by server configuration: W:/home/admin/www/

[sat Sep 06 12:38:28 2008] [error] [client 10.10.80.142] PHP Fatal error: Cannot redeclare birthdays_main() in W:\\www\\portal\\modules\\mod_birthdays.php on line 54

[sat Sep 06 13:42:18 2008] [error] [client 10.10.88.156] PHP Warning: XML error: SYSTEM or PUBLIC, the URI is missing at line 2, column 60 in W:\\www\\portal\\modules\\mod_slick_rss\\simplepie.inc on line 628

Error in my_thread_global_end(): 253 threads didn't exit

[sat Sep 06 14:11:53 2008] [error] Parent: child process exited with status 3 -- Aborting.

[sat Sep 06 14:11:53 2008] [notice] Apache/2.0.59 (Win32) DAV/2 PHP/5.2.3 configured -- resuming normal operations

[sat Sep 06 14:11:53 2008] [notice] Server built: Jul 27 2006 15:55:03

[sat Sep 06 14:11:53 2008] [notice] Parent: Created child process 2516

[sat Sep 06 14:11:53 2008] [notice] Disabled use of AcceptEx() WinSock2 API

[sat Sep 06 14:11:53 2008] [notice] Child 2516: Child process is running

[sat Sep 06 14:11:53 2008] [notice] Child 2516: Acquired the start mutex.

[sat Sep 06 14:11:53 2008] [notice] Child 2516: Starting 250 worker threads.

[sat Sep 06 14:13:06 2008] [notice] Apache/2.0.59 (Win32) DAV/2 PHP/5.2.3 configured -- resuming normal operations

[sat Sep 06 14:13:06 2008] [notice] Server built: Jul 27 2006 15:55:03

[sat Sep 06 14:13:06 2008] [notice] Parent: Created child process 1964

[sat Sep 06 14:13:06 2008] [notice] Disabled use of AcceptEx() WinSock2 API

[sat Sep 06 14:13:07 2008] [notice] Child 1964: Child process is running

[sat Sep 06 14:13:07 2008] [notice] Child 1964: Acquired the start mutex.

[sat Sep 06 14:13:07 2008] [notice] Child 1964: Starting 250 worker threads.

[sat Sep 06 14:13:07 2008] [notice] Child 1964: Listening on port 80.

[sat Sep 06 14:13:07 2008] [error] [client 127.0.0.1] client denied by server configuration: W:/home/admin/www/

[sat Sep 06 14:13:31 2008] [error] [client 10.10.80.142] PHP Fatal error: Cannot redeclare birthdays_main() in W:\\www\\portal\\modules\\mod_birthdays.php on line 54, referer: http://10.1.5.236/portal/index.php?option=...&Itemid=116

[sat Sep 06 16:02:56 2008] [error] [client 10.1.13.50] File does not exist: W:/www/images/logo_sm.gif, referer: http://10.1.5.236/portal/index.php?option=...&q=wmiprvse

[sat Sep 06 16:02:56 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_first.gif, referer: http://10.1.5.236/portal/index.php?option=...&q=wmiprvse

[sat Sep 06 16:02:56 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_current.gif, referer: http://10.1.5.236/portal/index.php?option=...&q=wmiprvse

[sat Sep 06 16:02:56 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_page.gif, referer: http://10.1.5.236/portal/index.php?option=...&q=wmiprvse

[sat Sep 06 16:02:56 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_next.gif, referer: http://10.1.5.236/portal/index.php?option=...&q=wmiprvse

[sat Sep 06 16:03:32 2008] [error] [client 10.1.13.50] File does not exist: W:/www/images/logo_sm.gif, referer: http://10.1.5.236/portal/index.php?option=...s=&q=ctfmon

[sat Sep 06 16:03:32 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_first.gif, referer: http://10.1.5.236/portal/index.php?option=...s=&q=ctfmon

[sat Sep 06 16:03:32 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_current.gif, referer: http://10.1.5.236/portal/index.php?option=...s=&q=ctfmon

[sat Sep 06 16:03:32 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_page.gif, referer: http://10.1.5.236/portal/index.php?option=...s=&q=ctfmon

[sat Sep 06 16:03:32 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_next.gif, referer: http://10.1.5.236/portal/index.php?option=...s=&q=ctfmon

[sat Sep 06 16:15:52 2008] [error] [client 10.1.13.50] File does not exist: W:/www/search, referer: http://10.1.5.236/portal/index.php?option=...s=&q=ctfmon

[sat Sep 06 16:15:55 2008] [error] [client 10.1.13.50] File does not exist: W:/www/search

[sat Sep 06 16:15:56 2008] [error] [client 10.1.13.50] File does not exist: W:/www/search

[sat Sep 06 16:17:09 2008] [notice] Apache/2.0.59 (Win32) DAV/2 PHP/5.2.3 configured -- resuming normal operations

[sat Sep 06 16:17:09 2008] [notice] Server built: Jul 27 2006 15:55:03

[sat Sep 06 16:17:09 2008] [notice] Parent: Created child process 2776

[sat Sep 06 16:17:09 2008] [notice] Disabled use of AcceptEx() WinSock2 API

[sat Sep 06 16:17:09 2008] [notice] Child 2776: Child process is running

[sat Sep 06 16:17:09 2008] [notice] Child 2776: Acquired the start mutex.

[sat Sep 06 16:17:09 2008] [notice] Child 2776: Starting 250 worker threads.

[sat Sep 06 16:17:09 2008] [notice] Child 2776: Listening on port 80.

[sat Sep 06 16:17:10 2008] [error] [client 127.0.0.1] client denied by server configuration: W:/home/admin/www/

[sat Sep 06 16:18:06 2008] [notice] Apache/2.0.59 (Win32) DAV/2 PHP/5.2.3 configured -- resuming normal operations

[sat Sep 06 16:18:06 2008] [notice] Server built: Jul 27 2006 15:55:03

[sat Sep 06 16:18:06 2008] [notice] Parent: Created child process 3128

[sat Sep 06 16:18:06 2008] [notice] Disabled use of AcceptEx() WinSock2 API

[sat Sep 06 16:18:07 2008] [notice] Child 3128: Child process is running

[sat Sep 06 16:18:07 2008] [notice] Child 3128: Acquired the start mutex.

[sat Sep 06 16:18:07 2008] [notice] Child 3128: Starting 250 worker threads.

[sat Sep 06 16:18:07 2008] [notice] Child 3128: Listening on port 80.

[sat Sep 06 16:18:07 2008] [error] [client 127.0.0.1] client denied by server configuration: W:/home/admin/www/

[sat Sep 06 16:18:20 2008] [error] [client 10.1.13.50] PHP Fatal error: Cannot redeclare birthdays_main() in W:\\www\\portal\\modules\\mod_birthdays.php on line 54

[sat Sep 06 16:24:11 2008] [error] [client 10.1.13.50] File does not exist: W:/www/images/logo_sm.gif, referer: http://10.1.5.236/portal/index.php?option=...s=&q=NMSSvc

[sat Sep 06 16:24:11 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_current.gif, referer: http://10.1.5.236/portal/index.php?option=...s=&q=NMSSvc

[sat Sep 06 16:24:11 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_first.gif, referer: http://10.1.5.236/portal/index.php?option=...s=&q=NMSSvc

[sat Sep 06 16:24:11 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_page.gif, referer: http://10.1.5.236/portal/index.php?option=...s=&q=NMSSvc

[sat Sep 06 16:24:11 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_next.gif, referer: http://10.1.5.236/portal/index.php?option=...s=&q=NMSSvc

[sat Sep 06 16:24:50 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_first.gif, referer: http://10.1.5.236/portal/index.php?option=...s=&q=shstat

[sat Sep 06 16:24:50 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_current.gif, referer: http://10.1.5.236/portal/index.php?option=...s=&q=shstat

[sat Sep 06 16:24:50 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_page.gif, referer: http://10.1.5.236/portal/index.php?option=...s=&q=shstat

[sat Sep 06 16:24:50 2008] [error] [client 10.1.13.50] File does not exist: W:/www/images/logo_sm.gif, referer: http://10.1.5.236/portal/index.php?option=...s=&q=shstat

[sat Sep 06 16:24:50 2008] [error] [client 10.1.13.50] File does not exist: W:/www/portal/nav_next.gif, referer: http://10.1.5.236/portal/index.php?option=...s=&q=shstat

Error in my_thread_global_end(): 253 threads didn't exit

[sat Sep 06 16:25:53 2008] [error] Parent: child process exited with status 3 -- Aborting.

[sat Sep 06 16:25:54 2008] [notice] Apache/2.0.59 (Win32) DAV/2 PHP/5.2.3 configured -- resuming normal operations

[sat Sep 06 16:25:54 2008] [notice] Server built: Jul 27 2006 15:55:03

[sat Sep 06 16:25:54 2008] [notice] Parent: Created child process 3960

[sat Sep 06 16:25:54 2008] [notice] Disabled use of AcceptEx() WinSock2 API

[sat Sep 06 16:25:54 2008] [notice] Child 3960: Child process is running

[sat Sep 06 16:25:54 2008] [notice] Child 3960: Acquired the start mutex.

[sat Sep 06 16:25:54 2008] [notice] Child 3960: Starting 250 worker threads.

[sat Sep 06 16:27:10 2008] [notice] Apache/2.0.59 (Win32) DAV/2 PHP/5.2.3 configured -- resuming normal operations

[sat Sep 06 16:27:10 2008] [notice] Server built: Jul 27 2006 15:55:03

[sat Sep 06 16:27:10 2008] [notice] Parent: Created child process 3484

[sat Sep 06 16:27:10 2008] [notice] Disabled use of AcceptEx() WinSock2 API

[sat Sep 06 16:27:10 2008] [notice] Child 3484: Child process is running

[sat Sep 06 16:27:10 2008] [notice] Child 3484: Acquired the start mutex.

[sat Sep 06 16:27:10 2008] [notice] Child 3484: Starting 250 worker threads.

[sat Sep 06 16:27:10 2008] [notice] Child 3484: Listening on port 80.

[sat Sep 06 16:27:11 2008] [error] [client 127.0.0.1] client denied by server configuration: W:/home/admin/www/

Below is the access.log file. I am not posting the full log here as it is very big. But I would like to bring to your attention to the PROPFIND command which is generated from the IP 10.10.88.156. Is this causing the crash?

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058105_448_sm.jpg HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058108_79_sm.jpg HTTP/1.1" 200 9189 "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/components/com_expose/expose/img/alb_8/img_1219992843_424_sm.jpg HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058112_121_sm.jpg HTTP/1.1" 200 9404 "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058960_695_sm.jpg HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058951_703_sm.jpg HTTP/1.1" 200 9491 "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/templates/rt_firenzie/images/rating_star_blank.png HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058931_838_sm.jpg HTTP/1.1" 200 8895 "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/images/stories/rpt_front.jpg HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/images/M_images/blank.gif HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/images/M_images/indent1.png HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/modules/liveuserspro/themes/default.css HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/modules/liveuserspro/js/liveUsersPro.js HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/templates/rt_firenzie/images/left-shadow.png HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/components/com_smo_ajax_shoutbox/smilies/icon_smile.gif HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/components/com_smo_ajax_shoutbox/smilies/icon_biggrin.gif HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/templates/rt_firenzie/images/style9/footer-bg.png HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/templates/rt_firenzie/images/style9/footer-edge.png HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/templates/rt_firenzie/images/style9/footer-edge2.png HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/templates/rt_firenzie/images/style9/bullet-header-hilite2.png HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/templates/rt_firenzie/images/style9/bullets-mainmenu.png HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/mambots/content/pcajaxcomment/templates/default/images/page_go.gif HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/mambots/content/pcajaxcomment/templates/default/images/comments.gif HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/modules/liveuserspro/icons/user_green.png HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/templates/rt_firenzie/images/style9/footer-shadow-bg.png HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/templates/rt_firenzie/images/style9/footer-shadow-r.png HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:41 +0530] "GET /portal/templates/rt_firenzie/images/style9/footer-shadow-l.png HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:48 +0530] "POST /portal/index.php?option=com_comprofiler&task=login HTTP/1.1" 301 20 "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:49 +0530] "GET /portal/ HTTP/1.1" 200 10772 "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:51 +0530] "GET /portal/includes/js/joomla.javascript.js HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:52 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058114_812_sm.jpg HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:52 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058938_844_sm.jpg HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:52 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058949_459_sm.jpg HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:52 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058947_985_sm.jpg HTTP/1.1" 200 9899 "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:52 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058119_224_sm.jpg HTTP/1.1" 200 8448 "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:52 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058111_309_sm.jpg HTTP/1.1" 200 9882 "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:52 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058952_51_sm.jpg HTTP/1.1" 200 9834 "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:52 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058942_387_sm.jpg HTTP/1.1" 200 8291 "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:52 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058946_149_sm.jpg HTTP/1.1" 200 10078 "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:52 +0530] "GET /portal/components/com_mypms/images/smallarrowinbox.png HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:52 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058113_601_sm.jpg HTTP/1.1" 200 8840 "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:52 +0530] "GET /portal/components/com_mypms/images/loading_inactive.gif HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:52 +0530] "GET /portal/components/com_mypms/images/loading.gif HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:52 +0530] "GET /portal/components/com_mypms/images/icons/new_alert.png HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:58:52 +0530] "GET /portal/components/com_mypms/images/subject_grey_bg.jpg HTTP/1.1" 304 - "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.88.156 - - [06/Sep/2008:16:58:56 +0530] "OPTIONS / HTTP/1.1" 302 - "-" "Microsoft-WebDAV-MiniRedir/5.1.2600"

10.10.88.156 - - [06/Sep/2008:16:58:56 +0530] "OPTIONS /portal/ HTTP/1.1" 200 49216 "-" "Microsoft-WebDAV-MiniRedir/5.1.2600"

10.10.88.156 - - [06/Sep/2008:16:58:59 +0530] "PROPFIND /c%24 HTTP/1.1" 405 318 "-" "Microsoft-WebDAV-MiniRedir/5.1.2600"

10.10.72.89 - - [06/Sep/2008:16:58:59 +0530] "GET /portal/index.php?option=com_expose&Itemid=143&album=7 HTTP/1.1" 200 8767 "http://10.1.5.236/portal/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:00 +0530] "GET /portal/components/com_expose/expose/swf/AC_RunActiveContent.js HTTP/1.1" 200 1055 "http://10.1.5.236/portal/index.php?option=com_expose&Itemid=143&album=7" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:00 +0530] "GET /portal/components/com_expose/expose/shadowbox/build/css/shadowbox.css HTTP/1.1" 200 655 "http://10.1.5.236/portal/index.php?option=com_expose&Itemid=143&album=7" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:01 +0530] "GET /portal/templates/rt_firenzie/images/arrow.png HTTP/1.1" 304 - "http://10.1.5.236/portal/index.php?option=com_expose&Itemid=143&album=7" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:01 +0530] "GET /portal/components/com_expose/expose/shadowbox/build/js/lib/yui-utilities.js HTTP/1.1" 200 13506 "http://10.1.5.236/portal/index.php?option=com_expose&Itemid=143&album=7" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:01 +0530] "GET /portal/templates/rt_firenzie/images/style9/bullet-pathway.png HTTP/1.1" 304 - "http://10.1.5.236/portal/index.php?option=com_expose&Itemid=143&album=7" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:01 +0530] "GET /portal/components/com_expose/expose/shadowbox/build/js/adapter/shadowbox-yui.js HTTP/1.1" 200 455 "http://10.1.5.236/portal/index.php?option=com_expose&Itemid=143&album=7" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:01 +0530] "GET /portal/components/com_expose/expose/shadowbox/build/js/shadowbox.js HTTP/1.1" 200 8796 "http://10.1.5.236/portal/index.php?option=com_expose&Itemid=143&album=7" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:02 +0530] "GET /portal/components/com_expose/expose/swf/expose.swf HTTP/1.1" 200 44490 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:02 +0530] "GET /portal/components/com_expose/expose/swf/fonts.swf HTTP/1.1" 200 24304 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:02 +0530] "GET /portal/components/com_expose/expose/swf/artwork.swf HTTP/1.1" 200 34332 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:02 +0530] "GET /portal/components/com_expose/expose/config/formats.xml?279285 HTTP/1.1" 200 529 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:02 +0530] "GET /portal/components/com_expose/expose/config/config.xml?279285 HTTP/1.1" 200 2499 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:02 +0530] "GET /portal/components/com_expose/expose/config/strings.xml?279285 HTTP/1.1" 200 5441 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:02 +0530] "GET /portal/components/com_expose/expose/xml/albums.xml?279285 HTTP/1.1" 200 322 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:02 +0530] "GET /portal/components/com_expose/expose/xml/alb_7.xml?279285 HTTP/1.1" 200 1453 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:02 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058092_391_sm.jpg?279285 HTTP/1.1" 200 7830 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:02 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058092_180_sm.jpg?279285 HTTP/1.1" 200 5822 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:03 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058093_423_sm.jpg?279285 HTTP/1.1" 200 8057 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:03 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058094_962_sm.jpg?279285 HTTP/1.1" 200 8771 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:03 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058095_572_sm.jpg?279285 HTTP/1.1" 200 8716 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:03 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058096_366_sm.jpg?279285 HTTP/1.1" 200 8839 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:03 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058097_905_sm.jpg?279285 HTTP/1.1" 200 8634 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:03 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058098_412_sm.jpg?279285 HTTP/1.1" 200 8414 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:03 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058098_955_sm.jpg?279285 HTTP/1.1" 200 9225 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:03 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058099_964_sm.jpg?279285 HTTP/1.1" 200 8461 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:03 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058100_978_sm.jpg?279285 HTTP/1.1" 200 8948 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:03 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058101_978_sm.jpg?279285 HTTP/1.1" 200 8710 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:03 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058102_194_sm.jpg?279285 HTTP/1.1" 200 9444 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:03 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058103_755_sm.jpg?279285 HTTP/1.1" 200 9450 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:03 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058104_48_sm.jpg?279285 HTTP/1.1" 200 9473 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:03 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058104_189_sm.jpg?279285 HTTP/1.1" 200 9476 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:03 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058105_448_sm.jpg?279285 HTTP/1.1" 200 9130 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:04 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058106_20_sm.jpg?279285 HTTP/1.1" 200 8766 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:04 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058107_23_sm.jpg?279285 HTTP/1.1" 200 10215 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:05 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058108_79_sm.jpg?279285 HTTP/1.1" 200 9189 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:05 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058109_371_sm.jpg?279285 HTTP/1.1" 200 8989 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:05 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058110_542_sm.jpg?279285 HTTP/1.1" 200 8891 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:05 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058111_309_sm.jpg?279285 HTTP/1.1" 200 9882 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:05 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058111_178_sm.jpg?279285 HTTP/1.1" 200 10095 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:05 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058112_121_sm.jpg?279285 HTTP/1.1" 200 9404 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:05 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058113_601_sm.jpg?279285 HTTP/1.1" 200 8840 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:05 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058114_812_sm.jpg?279285 HTTP/1.1" 200 8878 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:05 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058115_517_sm.jpg?279285 HTTP/1.1" 200 9114 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:05 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058116_353_sm.jpg?279285 HTTP/1.1" 200 8558 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:05 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058117_978_sm.jpg?279285 HTTP/1.1" 200 8710 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:05 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058118_938_sm.jpg?279285 HTTP/1.1" 200 9129 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:05 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058118_628_sm.jpg?279285 HTTP/1.1" 200 7182 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:05 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058119_224_sm.jpg?279285 HTTP/1.1" 200 8448 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:06 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058926_362_sm.jpg?279285 HTTP/1.1" 200 10412 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:06 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058926_941_sm.jpg?279285 HTTP/1.1" 200 11381 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:06 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058927_312_sm.jpg?279285 HTTP/1.1" 200 9560 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:06 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058928_79_sm.jpg?279285 HTTP/1.1" 200 9641 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:06 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058929_537_sm.jpg?279285 HTTP/1.1" 200 9876 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:06 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058930_477_sm.jpg?279285 HTTP/1.1" 200 10496 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:06 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058931_838_sm.jpg?279285 HTTP/1.1" 200 8895 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:06 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058932_72_sm.jpg?279285 HTTP/1.1" 200 9917 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:06 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058933_609_sm.jpg?279285 HTTP/1.1" 200 9346 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:06 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058934_277_sm.jpg?279285 HTTP/1.1" 200 10780 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:07 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058934_87_sm.jpg?279285 HTTP/1.1" 200 11103 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:07 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058935_219_sm.jpg?279285 HTTP/1.1" 200 10356 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:07 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058936_608_sm.jpg?279285 HTTP/1.1" 200 10782 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058937_998_sm.jpg?279285 HTTP/1.1" 200 8609 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058938_844_sm.jpg?279285 HTTP/1.1" 200 9933 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058939_928_sm.jpg?279285 HTTP/1.1" 200 10225 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058940_65_sm.jpg?279285 HTTP/1.1" 200 10051 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058941_794_sm.jpg?279285 HTTP/1.1" 200 9825 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058942_387_sm.jpg?279285 HTTP/1.1" 200 8291 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058942_101_sm.jpg?279285 HTTP/1.1" 200 7424 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058943_14_sm.jpg?279285 HTTP/1.1" 200 7794 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058944_323_sm.jpg?279285 HTTP/1.1" 200 5957 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058945_498_sm.jpg?279285 HTTP/1.1" 200 7419 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058946_149_sm.jpg?279285 HTTP/1.1" 200 10078 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058947_985_sm.jpg?279285 HTTP/1.1" 200 9899 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058948_741_sm.jpg?279285 HTTP/1.1" 200 9982 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058949_459_sm.jpg?279285 HTTP/1.1" 200 10084 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058949_977_sm.jpg?279285 HTTP/1.1" 200 10027 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058950_6_sm.jpg?279285 HTTP/1.1" 200 10269 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:08 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058951_703_sm.jpg?279285 HTTP/1.1" 200 9491 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:09 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058952_51_sm.jpg?279285 HTTP/1.1" 200 9834 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:09 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058953_989_sm.jpg?279285 HTTP/1.1" 200 9327 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:09 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058954_613_sm.jpg?279285 HTTP/1.1" 200 8183 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:09 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058955_367_sm.jpg?279285 HTTP/1.1" 200 8107 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:09 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058956_555_sm.jpg?279285 HTTP/1.1" 200 8503 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:09 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058957_92_sm.jpg?279285 HTTP/1.1" 200 9791 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:09 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058957_835_sm.jpg?279285 HTTP/1.1" 200 9463 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:10 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058958_388_sm.jpg?279285 HTTP/1.1" 200 9651 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:10 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058959_753_sm.jpg?279285 HTTP/1.1" 200 9750 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:10 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058960_695_sm.jpg?279285 HTTP/1.1" 200 7387 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:10 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058961_203_sm.jpg?279285 HTTP/1.1" 200 10426 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:10 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058962_923_sm.jpg?279285 HTTP/1.1" 200 10703 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:10 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058963_925_sm.jpg?279285 HTTP/1.1" 200 9894 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:10 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058964_701_sm.jpg?279285 HTTP/1.1" 200 10230 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:11 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058965_750_sm.jpg?279285 HTTP/1.1" 200 6871 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:11 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058966_628_sm.jpg?279285 HTTP/1.1" 200 7294 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:11 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058966_853_sm.jpg?279285 HTTP/1.1" 200 7353 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:11 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058967_518_sm.jpg?279285 HTTP/1.1" 200 8136 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:11 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058968_4_sm.jpg?279285 HTTP/1.1" 200 4777 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:11 +0530] "GET /portal/components/com_expose/expose/img/alb_7/img_1219058969_659_sm.jpg?279285 HTTP/1.1" 200 7519 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.72.89 - - [06/Sep/2008:16:59:37 +0530] "GET /portal/modules/mod_smo_ajax_shoutbox.php?jalGetChat=yes&jal_lastID=451 HTTP/1.1" 200 21 "http://10.1.5.236/portal/index.php?option=com_expose&Itemid=143&album=7" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.88.156 - - [06/Sep/2008:16:59:39 +0530] "PROPFIND /c%24 HTTP/1.1" 405 318 "-" "Microsoft-WebDAV-MiniRedir/5.1.2600"

10.10.72.89 - - [06/Sep/2008:16:59:41 +0530] "GET /portal/modules/mod_smo_ajax_shoutbox.php?jalGetChat=yes&jal_lastID=451 HTTP/1.1" 200 21 "http://10.1.5.236/portal/index.php?option=com_expose&Itemid=143&album=7" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"

10.10.88.156 - - [06/Sep/2008:16:59:44 +0530] "PROPFIND /c%24 HTTP/1.1" 405 318 "-" "Microsoft-WebDAV-MiniRedir/5.1.2600"

10.10.88.156 - - [06/Sep/2008:16:59:45 +0530] "PROPFIND /c%24 HTTP/1.1" 405 318 "-" "Microsoft-WebDAV-MiniRedir/5.1.2600"

10.10.88.156 - - [06/Sep/2008:16:59:45 +0530] "PRO

olajideolaolorun · September 11, 2008

Are you the one initiating the command? PROPFIND?

cecilian · September 11, 2008

No. I am not initiating PROPFIND. But I have physical access to the machine initiating it since it is on our local network. I checked the machine and found svchost.exe opens a random port between 3000 and 4000 to the server and gives the command PROPFIND. This happens even when a browser is not opened on the machine. Can it be that a malware is doing it?

olajideolaolorun · September 11, 2008

Its possible. Seems like an attack to me. Try changing the port of your server.

Sign In

Apache crashes frequently. Log posted

Recommended Posts

cecilian

Link to comment

Share on other sites

olajideolaolorun

Link to comment

Share on other sites

cecilian

Link to comment

Share on other sites

olajideolaolorun

Link to comment

Share on other sites

Join the conversation

Community