RE: Frequent Strange Requests
This is the code red virus trying to harm the webserver thinking you have
NT IIS webserver i believe , i get 10,000 - 25,000 a day on our busy
webserver. As i heard there is a way to block requests to your webserver by
"the request it self" which is default.ida am not sure how to do it but i
heard this somewhere.
====================================
QualityNet - Kuwait
Bashar A. AlAbdulhadi
I.S. Department
UNIX Systems Administrator
TEL: 808888 Ext. 637
FAX: 965-213790
www.qualitynet.net
====================================
-----Original Message-----
From: Auke Rensen [mailto:auke@rensen.dyndns.org]
Sent: Wednesday, September 12, 2001 8:22 PM
To: debian-isp@lists.debian.org
Subject: Frequent Strange Requests
L.S.,
While scanning my Apache Access logs I recently discovered that my webserver
gets some strange requests. While just guessing I can say I get these
requests about 10 to 25 times a day.
My site is just a personal site, no commercial activities are done here.
212.1.145.112 - - [12/Sep/2001:15:37:33 +0200] "GET
/default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%
u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
Can anybody tell me what this is, whether to worry about it and what to do
about it.
Thanks in advance,
Auke Rensen
System Engineer
--
To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
Reply to: