a weird query string error?
hi, everybody
recently, I found that a particular user always has the request in the query string "Get \Servlet\com.ec.ercbroker.servlets.PingServlet". The user send the request almost every day. In each day, it sends the request very few minutes.
the status code of the ‘GET’ is 302 Which means the uri has been removed. the error message in our log file is:
“404;[url]http://66.151.158.177:80/servlet/co...Servlet”however[/url], "66.151.158.177" is NOT our ip address. the question is: why the GET errors for another web site (66.151.158.177) are sent to us? are they trying to hack our system? how to prevent this?
thank you! looking forward to your answer.
louis
Busy posted this at 20:57 — 1st March 2006.
He has: 6,151 posts
Joined: May 2001
Some info can be found here http://www.datastronghold.com/archive/t12712.html seemslike you should block the IP if your not using a 3rd party blog, banner, poll or similar, if so check first
Want to join the discussion? Create an account or log in if you already have one. Joining is fast, free and painless! We’ll even whisk you back here when you’ve finished.