I have a website, let's call it www.good.com.
I've been getting a lot of requests to www.good.com under completely different URLs than www.good.com. I suspect this traffic is also causing some site performance issues. I'm running a .NET solution on IIS for reference.
I have a logger that is constantly picking up 404 errors for external hosts. Below are examples of some of the log data:
Original URL: http://open.tracker.thepiratebay.org/announce?info_hash=%9D%E7%E6%10%911%1Eh%8D%BAX%02%27%C3x5%F0%18%DF%E8&peer_id=%2DSD0100%2D%E6%B2%15Ql%C0%14%5D%3Dx%20%8C&ip=192.168.2.23&port=8956&uploaded=1019809319&downloaded=1019809319&left=192985&numwant=200&key=9135&compact=1 Request URL: http://open.tracker.thepiratebay.org/announce?info_hash=%9D%E7%E6 %911 h%8D%BAX '%C3x5%F0 %DF%E8&peer_id=-SD0100-%E6%B2 Ql%C0 ]=x %8C&ip=192.168.2.23&port=8956&uploaded=1019809319&downloaded=1019809319&left=192985&numwant=200&key=9135&compact=1 Request Path: /announce Referrer URL: None User host address: 18.104.22.168 Server: WWW-GOOD-COM-SERVER User: IsAuthenticated: False Authentication Type: Thread account name: NT AUTHORITY\NETWORK SERVICE User Agent: Bittorrent
I also see other weird requests from all kinds of other domains, like
Almost always the IP involved is from outside the US.
What I don't understand, is why my server is trying to fulfill requests for any of these urls when it is obviously not the host.
I need to know:
- Why could this be happening?
- Is this dangerous?
- How can I prevent it, if possible?