Unknown IIS log file entries

[Robbo19]

The following is from our IIS 5.0 log file. This is from a Citrix XP server running W2KTS. Most of the file contains the usual port 80 GET entries. Most of our users can be identified by their IP addresses, because there are so few and I've just remembered them. Anyway, here are the entries I don't get:


2004-03-07 04:41:00 xx.xx.xx.xxx - yyy.yyy.y.yyy 80 SEARCH /AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA?????????????????????????????????????####??????????rmomddddddisjhnegdddddddlohddplokdepnqlojldlloskjndiimrlimddddddrfsmlgrpehggpdidjlfrjikljijljljskgkhjlipkgkjjgloqpidjndjjndfididjlddddddhdigssejlgslsskhfmlosljnddlopjlgpdelidloilspiglgpddhidikssijdhidikssijdlillipdkhdmloqpggpdidigssijdpssijedieijlohigploihflkldgqiiflokffddgsiggpmhmhenqdgpiggqodsoredgnqjkhdlpepodqdgqnhdrosegoeskirkinloinfhdgqqjjlodpholoinepdgqqlodhlodgpinoirimpgrlhfssssssniekddkpeskmdnrlsomksqdsmlsrlndrrsprrdjdddgfddddddddddddhqinmddddgdddddddhddddddssssddddolddddddddddddddhdddddddddddddddddddddddddddddddddddddddddddd - 404 -

I cut some of it out for the sake of brevity. There are several of these in the log, coming every few seconds. Thanks in advance for any help.

- Rob

 

[Harlequin007]

I get the same on mine Robbo.

I've traced some of the IPs and they generally turn out to be search engines.


-----------------
Cogito Ergo Sum
-----------------