Best practice for handling worm URLs

Question

We've been getting request (from worms?) of the form

http://www.example.com/MSOffice/cltreq.asp?...
http://www.example.com/_vti_bin/owssvr.dll?...

What is the best practice for dealing with these?

I've considered either returning a 404 or trying to terminate the connection while leaving it open on the other end.

Thoughts?

Answer 1

我只是对类似的东西返回GONE，这样它就不会出现在我的error_log中。