[unisog] Heads up! distributed scans and attacks targeting nsiss.dll

Christine Kronberg Christine_Kronberg at genua.de
Mon Aug 11 10:40:27 GMT 2003


On Fri, 8 Aug 2003, Mike Iglesias wrote:

>
> We just started seeing this here, from 80.135.31.233 (Deutsche Telekom)
> and 211.111.132.8 (Hansol ISP Korea).  They're just doing
> "GET /scripts/nsiislog.dll", unlike the POST methods you were seeing.

  I observe this scans since 1st of July. All are GET requests coming
  from different IPs,  one or two each couple of days. As I don't run
  an IIS I ignored them.

  Cheers,


                                                       Chris Kronberg.

-- 
GeNUA mbH




More information about the unisog mailing list