What does this request uri mean?

Forum Moderators: open

Message Too Old, No Replies

What does this request uri mean?

Appears to be related to Atom /RSS

zollerwagner

5:23 am on Apr 3, 2008 (gmt 0)

When a 404, page not found error is thrown, a script sends me a report. The site is created with TextPattern, a CMS. We have Atom and RSS set up for the site.

I don't understand some of the error reports I'm receiving.

Here's one which shows what they look like.

The following error occurred on: MySiteName
Error message: The requested page was not found.
Domain (SERVER_NAME): http:// MyDomain.com
Page (REQUEST_URI): /atom/?section=http%3A%2F%2Fwww.A-domain-I-do-not-know.com%2Fthat-domain-has-a-casino%2Fenosucu%2Fijani%2F
Time (REQUEST_TIME): April 02 2008 11:18:49 PM
IP (REMOTE_ADDR): 85.89.44.250

If we convert the slashes, that URI is: /atom/?section=http://www.A-domain-I-do-not-know.com/that-domain-has-a-casino/enosucu/ijani/

This has nothing to do with our site. What does it mean?

zollerwagner

6:04 pm on Apr 3, 2008 (gmt 0)

I should add that I programmed the error report. I understand what the data returned is.

What I don't understand is the content of the REQUEST_URI data.

Why is that data related to our site?

bill

11:50 am on Apr 4, 2008 (gmt 0)

My best guess would be good old-fashioned log spamming.

vincevincevince

12:42 pm on Apr 4, 2008 (gmt 0)

Attempt at XSS-style injection into your feeds?

zollerwagner

7:40 pm on Apr 4, 2008 (gmt 0)

Thanks for the ideas. There sure are a lot of different exploits to be aware of.

The specific pages referred to in the REQUEST_URIs don't exist, but the websites do.

The other odd detail is that there is no folder named "atom" ( /atom/?section= ) on our site.

Does anyone know of a good introduction to RSS and ATOM? Evidently I need to learn about this!