Re: Frequent Strange Requests
that would be either code red or one of its varients, you should be able to
safely ignore it on anything but IIS servers. as far as what you can do about
it there isn't really much, maybe block it with a IDS but other than that just
sit back and watch the logs scroll past.
andrew
On Wed, 12 Sep 2001 13:22:06 Auke Rensen wrote:
> L.S.,
>
> While scanning my Apache Access logs I recently discovered that my webserver
> gets some strange requests. While just guessing I can say I get these
> requests about 10 to 25 times a day.
> My site is just a personal site, no commercial activities are done here.
>
> 212.1.145.112 - - [12/Sep/2001:15:37:33 +0200] "GET
> /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%
> u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
>
> Can anybody tell me what this is, whether to worry about it and what to do
> about it.
>
> Thanks in advance,
>
>
> Auke Rensen
> System Engineer
>
>
> --
> To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
Reply to: