[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: repeated requests for a file favicon.ico

Hash: SHA1


the requests you see are no reason to panic. Modern browsers request this 
file to display the little icon in the address bar. If you don't have any 
such icon, the default icon of the browser is used instead.

A little googling will get you alot of hits on how to create such an icon 
if you want to have one of your own.
Otherwise, just ignore these requests. :-)

HTH, Harry

- --On Wednesday, October 06, 2004 11:37:24 +0300 Emil Perhinschi 
<emilper@emilper.ro> wrote:

> Sorry to bother, but is this an attack? I get repeated requests for a
> file "favicon.ico" that should have been, or so the client connecting
> believes, in the root of my htdocs. The conections come from different
> hosts, and at least in some it seems to be running Konqueror, so it is
> not a Windows worm:  "GET / HTTP/1.1" 200 1004 "-" "Mozilla/5.0
> (compatible; Konqueror/2.2.2; Linux)".
> I run Debian Sarge, with Apache 1.3.31. There never existed a
> "favicon.ico" on my server since I am online, I never registered to
> search engines, kept a low profile, used a very restrictive robots.txt
> etc. and used the site only to have online a development version of the
> site I am doing for a customer. This comes after some weeks of  attacks
> and failed buffer overflow attempts, so I might be getting to nervous.
> it's a little bit offtopic, but I found nothing about it on cert.org ...

- --

1024D/40F14012 18F3 736A 4080 303C E61E  2E72 7E05 1F6E 40F1 4012

Version: 3.12
GIT/S dx s: a C++ ULS++++$ P+++ L+++$ !E W++ N+ o? K? !w !O !M
V PS+ PE Y? PGP+++ t+ 5-- X+ R+ !tv b++ DI++ D+ G e* h r++ y++
- ------END GEEK CODE BLOCK------
Version: GnuPG v1.2.5 (GNU/Linux)


Reply to: