Hi Adam, You are right that it is a request for the root doc, and is normal to see this type of request.
However, what I am seeing is continuous stream of these kind of requests, to consecutive dest IPs, at about 10 req/s. I believe there is some kind of scanning going on... Rgds, Wei Keong On Thu, 13 Nov 2003, Adam Aube wrote: > > We notice there is a surge in port 80 scanning through proxy > > servers in the past few days. > > > Below is a sample of the scan request > > That is just a request for the root of the document tree on the server > itself - it does not appear to be a request for a document on another > server. I see nothing to be concerned about. > > Adam >
