Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

We've been logging GET requests on our domain to the following:

XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGHGFHBGCHEGPFHHGG

Is this a known kind of attack? What might it be targeting?

share|improve this question
add comment

2 Answers 2

up vote 1 down vote accepted

This type of "attacks" can be used to generate a 404 message. Hackers do this in order to find out what kind of web server you have. Or to find out what kind of framework you use. (Based on the structure of the 404 HTML code.)

If they find out what server you have and what CMS/framework (and version) then they can use this information to hack into your website.

I recommend you to keep everything up to date. There is not a lot more you can do against those requests.

share|improve this answer
add comment

Try asking on http://security.stackexchange.com/

It doesn't look like a hacking attempt, unless Your CMS/framework has some functionality on XX/YY/ZZ/CI/ path.

share|improve this answer
    
Thank you. security.stackexchange.com/questions/20364/… –  JNF Sep 19 '12 at 6:16
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.