Unknown requests from IE 5
From: David Ward (dward@maidencreek.com)Date: 10/23/01
- Previous message: Valdis.Kletnieks@vt.edu: "Re: Scans for SSHd via RIPE netblocks, anyone?"
- Next in thread: Tom Gallagher: "RE: Unknown requests from IE 5"
- Reply: Tom Gallagher: "RE: Unknown requests from IE 5"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Message-ID: <3BD49BCA.8040405@maidencreek.com> Date: Mon, 22 Oct 2001 15:20:58 -0700 From: David Ward <dward@maidencreek.com> To: incidents@securityfocus.com Subject: Unknown requests from IE 5
We seem to have been receiving a number of HTTP requests similar to the
following lately:
168.10.36.63 - - [22/Oct/2001:14:07:59 -0700] "GET
/_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 HTTP/1.0"
200 20677 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)"
168.10.36.63 - - [22/Oct/2001:14:08:00 -0700] "GET
/MSOffice/cltreq.asp?UL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 HTTP/1.0"
200 20677 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)"
Does anyone know what these requests are looking for? I am assuming
that they are harmless requests from IE 5 assuming that it is talking to
an IIS or exchange server, but I cannot find anything that mentions what
these files actually are.
------------------------------------------------------------------------------ This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
- Previous message: Valdis.Kletnieks@vt.edu: "Re: Scans for SSHd via RIPE netblocks, anyone?"
- Next in thread: Tom Gallagher: "RE: Unknown requests from IE 5"
- Reply: Tom Gallagher: "RE: Unknown requests from IE 5"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|