How will i block this kind of request

From: Sundaram Ramasamy (sundaram_at_percipia.com)
Date: 09/05/03

  • Next message: Hans: "Re: How will i block this kind of request" 
    Date: 5 Sep 2003 06:34:48 -0700

    Hi,

    I am getting this kind of log message on my web server log. How will i
    block this kind of request.

    Thanks

    64.140.34.130 - - [04/Sep/2003:16:51:28 -0400] "GET
    /default.ida?XXXXXXXXXXXXXXX
    XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
    XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
    XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%
    u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u5
    31b%u53ff%u0078%u0000%u00=a HTTP/1.0" 404 284
    64.140.34.130 - - [04/Sep/2003:18:41:50 -0400] "GET
    /default.ida?XXXXXXXXXXXXXXX
    XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
    XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
    XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%
    u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u5
    31b%u53ff%u0078%u0000%u00=a HTTP/1.0" 404 284
    62.49.40.122 - - [04/Sep/2003:18:47:20 -0400] "GET
    /scripts/..%255c%255c../winnt
    /system32/cmd.exe?/c+dir" 404 314
    162.40.122.24 - - [05/Sep/2003:00:35:19 -0400] "GET
    /scripts/nsiislog.dll" 404 2
    93

  • Next message: Hans: "Re: How will i block this kind of request"