Forum Discussion
Dazzer
May 18, 2021Copper Contributor
IIS 8.5 and invalid hostnames
I've witnessed someone scanning the internet, using CURL to look for Darkweb proxies: curl -H "host<bad domain>" http://<ip of my IIS server> Obviously, my IIS server (8.5) is not hosting <ba...
MattHamrick
Microsoft
Jun 08, 2021Hi Dazzer,
This does not occur on my IIS setup. How did you determine that w3wp.exe was the one sending the DNS request? IIS itself doesn't make DNS requests that I'm aware of, so my first thought is if it actually is coming from w3wp.exe, then it's most likely the application being hosted that is making the call.
This does not occur on my IIS setup. How did you determine that w3wp.exe was the one sending the DNS request? IIS itself doesn't make DNS requests that I'm aware of, so my first thought is if it actually is coming from w3wp.exe, then it's most likely the application being hosted that is making the call.