[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] misterious logitems

At 01:08 AM 6/20/2002, you wrote:

hello,

in on of my site log files the following logentry appears many many times.


www.domain.de 218.29.70.241 - - [20/Jun/2002:08:18:39 +0200] "GET
http://www.domain.de/cobalt_error/forbidden.html HTTP/1.0" 200 653
"http://www.18xm.com"; "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"


Is there a security problem with my box?

Why is the complete url "http://www.domain.de...."; listed in the get field?
Normal requests just list the relative path of the url?

How can i stop responding to such requests?



Turn off your server.
We can't do much about all the nimda and code red virus' either. They just make log entries.