Preventing HTTP 1.1 SEARCH request

External Since: Feb 19, 2004 Posts: 1

I have an IIS 5 server running on Win2k SP4 and the logs
are showing a suspicious request that looks like the
following line:
2004-02-19 01:08:42 68.145.79.164 - SERVERNAME 10.10.10.10
SEARCH /AAAAAAA(thousands of letter)ngnk - 500 431 33073
170 HTTP/1.1 - - -

I am unalbe to figure out what is going on so in the
meantime I want to just disable that HTTP 1.1 SEARCH
request. How can I do that?

External Since: Oct 14, 2003 Posts: 468

I figured it out. The IISLockDown tool as a DenyVerbs
section that will do just what I need.
>-----Original Message-----
>I have an IIS 5 server running on Win2k SP4 and the logs
>are showing a suspicious request that looks like the
>following line:
>2004-02-19 01:08:42 68.145.79.164 - SERVERNAME
10.10.10.10
>SEARCH /AAAAAAA(thousands of letter)ngnk - 500 431 33073
>170 HTTP/1.1 - - -
>
>I am unalbe to figure out what is going on so in the
>meantime I want to just disable that HTTP 1.1 SEARCH
>request. How can I do that?
>.
>