Re: repeated requests for a file favicon.ico
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi,
the requests you see are no reason to panic. Modern browsers request this
file to display the little icon in the address bar. If you don't have any
such icon, the default icon of the browser is used instead.
A little googling will get you alot of hits on how to create such an icon
if you want to have one of your own.
Otherwise, just ignore these requests. :-)
HTH, Harry
- --On Wednesday, October 06, 2004 11:37:24 +0300 Emil Perhinschi
<emilper@emilper.ro> wrote:
> Sorry to bother, but is this an attack? I get repeated requests for a
> file "favicon.ico" that should have been, or so the client connecting
> believes, in the root of my htdocs. The conections come from different
> hosts, and at least in some it seems to be running Konqueror, so it is
> not a Windows worm: "GET / HTTP/1.1" 200 1004 "-" "Mozilla/5.0
> (compatible; Konqueror/2.2.2; Linux)".
>
> I run Debian Sarge, with Apache 1.3.31. There never existed a
> "favicon.ico" on my server since I am online, I never registered to
> search engines, kept a low profile, used a very restrictive robots.txt
> etc. and used the site only to have online a development version of the
> site I am doing for a customer. This comes after some weeks of attacks
> and failed buffer overflow attempts, so I might be getting to nervous.
>
> it's a little bit offtopic, but I found nothing about it on cert.org ...
- --
1024D/40F14012 18F3 736A 4080 303C E61E 2E72 7E05 1F6E 40F1 4012
- -----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GIT/S dx s: a C++ ULS++++$ P+++ L+++$ !E W++ N+ o? K? !w !O !M
V PS+ PE Y? PGP+++ t+ 5-- X+ R+ !tv b++ DI++ D+ G e* h r++ y++
- ------END GEEK CODE BLOCK------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
iD8DBQFBY7fCfgUfbkDxQBIRAk+pAJ9z6rpBMQoQhxcOvSaz9Fe1C7OTKQCfXh62
YkGt+1BaWaXIC/Zup2hLnaI=
=elhR
-----END PGP SIGNATURE-----
Reply to: