Forum Moderators: DixonJones

Message Too Old, No Replies

Scanning Webserver With No Default

Advice Re Having No Default at a Website

         

RobBert

4:08 pm on Sep 18, 2005 (gmt 0)



I am a novice at hosting a website. I do it for personal friends use only, but it is not password portected. I do not have a "default" file or an "index" file that serves as the gateway; just a specifically named file that one must know in order to reach that page, and then reach the rest of the website. In my log each day, I get 5 or 6 entries that indicate that someone has scanned the site with a "GET" and then the log shows a "400" level error; meaning, I take it, that the GET method was not permitted, and they did not gain entry to my computer. Am I likely correct in that; or should I be concerned that strangers are gaining entry to my machine. I see nothing else in the log, except this from time to time: "POST /_vti_bin/_vti_aut/fp30reg.dll". I take it that is some sort of attempt at "exploit" if I run FrontPage (or have "FronPage") which I do not. The time taken with the "GET's" as shown by the low is usually 0 or 10, but sometimes it will be a number like 39846 or some such as that. I take it I can divide the number, whatever it is, by 100 to see how many seconds they were "at" my site? Would I be better off to just post a "default" file that is simply a dummy file that says: "Under Construction"? Did I mention that I am a complete novice at this? Thank you for any help or advice you may give.

jatar_k

3:22 pm on Sep 20, 2005 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



Welcome to WebmasterWorld RobBert,

>> I do not have a "default" file or an "index"

you don't really need one, though it may just be easier as you say. I highly doubt it will stop the scanning. I can't remember ever having a site that didn't have common exploit attempts in the logs.

>> "400" level error

Bad request, a malformed header or some such. Here's a list of status codes
[w3.org...]

>> fp30reg.dll

a search [google.com] for this gives quite a bit of info, you are correct though it seems to be an overflow for frontpage extensions. If you don't have them then don't worry about it.