Forum Moderators: phranque
Request URL http://example.com/webpage.aspx?CID=1%0D%0A%09%09&MID=12
The URL that works is http://example.com/webpage.aspx?CID=1&MID=12
I know why I get this error and how to fix it my it seems that the person making the request is adding %0D%0A%09%09 for some reason. No where on my site to I add this string to the url. Also the request keeps coming from the same IP address: 93.158.150.20
Some days I can get hundreds of request like this all for different query parameters. Should I ban this ip? When I do a reverse DNS look up it comes up as spider14.yandex.ru which is located in russia.
Any suggestions welcome
[edited by: phranque at 9:59 am (utc) on Nov. 20, 2009]
[edit reason] exemplified domains [/edit]
that looks like "white space" that was encoded in the url.
those values are the ascii codes for a carriage return and a line feed followed by two horizontal tabs.
have you checked your server access logs?
i'm guessing you will find that the referer information will give you a clue about the source/cause of such a request.
Yandex [company.yandex.com] is probably the largest search engine in russia.
[example.com:443...]
As far as I can see my site it throwing an error with a url like this but any suggestions how I should handle this? the ip addresses are all different.
