36
HTTP Headers – Log Example
Request #4208 – non standard HTTP header – SEARCH. Likely to be an attack attempt. Note there isn’t a Referer, and a session is not maintained – scanner.
Request #4218 – non standard HTTP header – “Translate: f”. Indicates an attack attempt (reveal source code in Microsoft IIS/5.0). Note the backslash appended to  the script name. Note there isn’t a Referer and a session is not maintained, and the attack is site specific (relies on /search2.aspx) – hand crafted attack using a non-browser tool.