Forum Moderators: open

Message Too Old, No Replies

Rejected by URL Scan

Hacker attempts

         

Kubano

6:14 pm on Dec 10, 2003 (gmt 0)

10+ Year Member



Hello Everybody!
This is my first time here and i hope we can share a lot of experience! Thank you in advance for the support!

I am having following problem with some sites: when analyzing the logs with Websuxess, more than 40% of the visits are unknow. Of course at leaste 20% are robots, but it seems that the rest are hacking attemps (maybe for spam) which automatically are then rejected by URLscan.

My questions:
1. It is common for you guys to get so many visits rejected by URLscan?

2. I have a site with 3400 visits, but only 200 from SE or other pages. Almost 78% of the unknowed visits come with configuration Win98.IE 5.5. Really strange, isnt?

Thank you for your time and help!
Kubano

DrDoc

7:31 pm on Dec 10, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Welcome to Webmaster World!

Let's talk about the "hacking attempts"... How do you know they are hacking attempts? What is it that sets a hacking attempt apart from a regular visit?

Krapulator

11:43 pm on Dec 10, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



>>It is common for you guys to get so many visits rejected by URLscan?

Hundreds every day...welcome to this world!

Kubano

12:36 pm on Dec 11, 2003 (gmt 0)

10+ Year Member


HI:

About the hacking attemps, we believe that because looking into the log files of UrlScan there're a lot of "supposed visits" trying to execute "search" or to run programms .exe when they visit us. Due to we believe there're hacking attemps, but for us it's really strange that this kind of visits are always with the configuration IE 5.5 and Win98.
If you have any idea, please help us to find a clue.
Thanks in advance.

Krapulator

9:58 pm on Dec 11, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Post a couple of the rejected strings.