Unknown requests from IE 5

From: David Ward (dward@maidencreek.com)
Date: 10/23/01


Message-ID: <3BD49BCA.8040405@maidencreek.com>
Date: Mon, 22 Oct 2001 15:20:58 -0700
From: David Ward <dward@maidencreek.com>
To: incidents@securityfocus.com
Subject: Unknown requests from IE 5

We seem to have been receiving a number of HTTP requests similar to the
following lately:

168.10.36.63 - - [22/Oct/2001:14:07:59 -0700] "GET
/_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 HTTP/1.0"
200 20677 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)"

168.10.36.63 - - [22/Oct/2001:14:08:00 -0700] "GET
/MSOffice/cltreq.asp?UL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 HTTP/1.0"
200 20677 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)"

Does anyone know what these requests are looking for? I am assuming
that they are harmless requests from IE 5 assuming that it is talking to
an IIS or exchange server, but I cannot find anything that mentions what
these files actually are.

Dave
dward@maidencreek.com

--

---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com



Relevant Pages

  • Re: Inkcessories.com: scum-sucking spammers from hell!
    ... and not simply a hoax by the resident troll of this group. ... been receiving their spam and none of my requests to be taken of their ... That printhead is still going strong. ...
    (comp.periphs.printers)
  • Re: Inkcessories.com: scum-sucking spammers from hell!
    ... A company this good doesn't need to send unsolicted email and ignore questions or requests for being removed from their mail outs, ... been receiving their spam and none of my requests to be taken of their ... describes inkcessories service. ... That printhead is still going strong. ...
    (comp.periphs.printers)
  • Re: Spamalot DVD-Freebies-CLOSED
    ... I ended up receiving 7 requests and all who ... > I obtained this great DVD in a recent trade and thought I'd share a few ... > doing a poor job of handling the war in Iraq. ...
    (rec.music.artists.springsteen)
  • Re: Updated Javascript Best Practices document
    ... There are plenty of ways to work with the async nature of ajax. ... I mean it is both vital that the requests are ... received in the right order by the server AND that the responses are ... becomes a matter of sending the next request as a reaction to receiving ...
    (comp.lang.javascript)
  • Re: Urgent
    ... What error message if any are you receiving. ... Please Reply to Newsgroup for the benefit of others ... Requests for assistance by email can not and will not be acknowledged. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)