[unisog] Heads up! distributed scans and attacks targeting
Christine_Kronberg at genua.de
Mon Aug 11 10:40:27 GMT 2003
On Fri, 8 Aug 2003, Mike Iglesias wrote:
> We just started seeing this here, from 18.104.22.168 (Deutsche Telekom)
> and 22.214.171.124 (Hansol ISP Korea). They're just doing
> "GET /scripts/nsiislog.dll", unlike the POST methods you were seeing.
I observe this scans since 1st of July. All are GET requests coming
from different IPs, one or two each couple of days. As I don't run
an IIS I ignored them.
More information about the unisog