Questionable URL being sent to our server

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: "users@xxxxxxxxxxxxxxxx" <users@xxxxxxxxxxxxxxxx>
Subject: Questionable URL being sent to our server
From: Darryl Philip Baker <darryl.baker@xxxxxxxxxxxxxxxx>
Date: Tue, 1 Nov 2022 14:26:23 +0000
Accept-language: en-US
Reply-to: users@xxxxxxxxxxxxxxxx
Thread-index: AQHY7f3qZyFXaDjv402ZQNG8Lj86kA==
Thread-topic: Questionable URL being sent to our server
User-agent: Microsoft-MacOutlook/16.66.22101101

We are getting a poorly formed URL being requested from our servers. Apache is returning a 400 error but I am wondering if someone is try to exploit an issue with some version of some web server out there. Maybe a Dos attack or worse. Anyone have a clue what is being attempted?

Sketchy URL: https://www.northwestern.edu/accounting-scrvices/Annual%252ORepothtm

Darryl Baker, GSEC, GCLD (he/him/his)

Sr. System Administrator

Distributed Application Platform Services

Northwestern University

4^th Floor

2020 Ridge Avenue

Evanston, IL 60208-0801

darryl.baker@xxxxxxxxxxxxxxxx

(847) 467-6674

Follow-Ups:
- Re: Questionable URL being sent to our server
  - From: Eric Covener
- Re: Questionable URL being sent to our server
  - From: Frank Gingras

Prev by Date: Re: Is Apache 2.4.7 newer than 2.4.54
Next by Date: Re: Questionable URL being sent to our server
Previous by thread: SSO Active Directory Kerberos Apache Ubuntu
Next by thread: Re: Questionable URL being sent to our server
Index(es):
- Date
- Thread

[Index of Archives] [Open SSH Users] [Linux ACPI] [Linux Kernel] [Linux Laptop] [Kernel Newbies] [Security] [Netfilter] [Bugtraq] [Squid] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Samba] [Video 4 Linux] [Device Mapper]