Hi Adam,
You are right that it is a request for the root doc, and is normal to see
this type of request.
However, what I am seeing is continuous stream of these kind of requests,
to consecutive dest IPs, at about 10 req/s. I believe there is some kind
of scanning going on...
Rgds,
Wei Keong
On Thu, 13 Nov 2003, Adam Aube wrote:
> > We notice there is a surge in port 80 scanning through proxy
> > servers in the past few days.
>
> > Below is a sample of the scan request
>
> That is just a request for the root of the document tree on the server
> itself - it does not appear to be a request for a document on another
> server. I see nothing to be concerned about.
>
> Adam
>
Received on Thu Nov 13 2003 - 08:36:32 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:21:17 MST