| View previous topic :: View next topic |
| Author |
Message |
ptulkens
-
Joined: 25 May 2006
Posts: 5
Location: Bornival (Nivelles), Belgium
|
 Posted: Wed May 31, 2006 9:55 pm Post subject: meaning of unanticipated http requests |
 |
|
Hello,
My question may seem naive but I am new in this forum.
I set up a (very) small new website (mainly for tetsing purposes), and I am amazed by what is see in the log... Besides what look like normal get request, I have other ones which I do not understand. Can anyone give me a hint or, best, a lead...
Here are some examples:
1. what looks to me like a legitimate request
---------------------------------------------------87.244.176.229 - - [31/May/2006:15:40:13 +0200] "GET / HTTP/1.1" 304 0 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1)"
87.244.176.229 - - [31/May/2006:15:40:13 +0200] "GET /bornival.jpg HTTP/1.1" 304 0 "http://www.bornival.be/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1)"
87.244.176.229 - - [31/May/2006:15:40:14 +0200] "GET /pwrabyss.gif HTTP/1.1" 304 0 "http://www.bornival.be/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1)"
2. What I do not undestand
-------------------------------
200.19.252.33 - - [25/May/2006:22:19:52 +0200] "GET //README HTTP/1.1" 404 403 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
200.19.252.33 - - [25/May/2006:22:19:52 +0200] "GET /horde//README HTTP/1.1" 404 403 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
200.19.252.33 - - [25/May/2006:22:19:53 +0200] "GET /horde2//README HTTP/1.1" 404 403 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
200.19.252.33 - - [25/May/2006:22:19:54 +0200] "GET /horde3//README HTTP/1.1" 404 403 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
200.19.252.33 - - [25/May/2006:22:19:55 +0200] "GET /horde-3.0.9//README HTTP/1.1" 404 403 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
200.19.252.33 - - [25/May/2006:22:19:56 +0200] "GET /Horde//README HTTP/1.1" 404 403 "" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
There is "horde..." on my website !
Kind regards, |
|
| Back to top |
   |
 |
TRUSTAbyss
-
Joined: 29 Oct 2003
Posts: 3752
Location: USA, GA
|
| Posted: Wed May 31, 2006 10:08 pm Post subject: |
|
|
This is your every day log file right here. You cannot prevent people/machines
from sending weird requests to the server, but to let you in on a little secret, I
haven't ever had any security breaches on my server.
I've been getting attacks like these since the earlier days of Abyss and all of it
is normal behavior. I wish I could make it stop but I can't.
Use Abyss's Anti-Hacking feature if you're worried about these requests.
Sincerely, TRUSTAbyss |
|
| Back to top |
|
|
aprelium
-
Joined: 22 Mar 2002
Posts: 6800
|
| Posted: Thu Jun 01, 2006 11:41 am Post subject: Re: meaning of unanticipated http requests |
|
|
ptulkens,
These requests are sent to your server to try to attack the scripts on it. They try to profit from well known security breaches in old versions of popular scripts by sending them URLs that could affect their normal behavior (that's why it is important to always have the most up-to-date versions of scripts you're hosting on your web site).
_________________
Support Team
Aprelium - http://www.aprelium.com |
|
| Back to top |
 |
|
ptulkens
-
Joined: 25 May 2006
Posts: 5
Location: Bornival (Nivelles), Belgium
|
| Posted: Sat Jun 03, 2006 1:55 pm Post subject: |
|
|
OK. Thnak you both of you.
I can now be reassured.
Kind regards,
Paul. |
|
| Back to top |
|
|
|
