I'm getting logged error messages about hits to /EWS/Exchange.asmx (does not exist) in the root of one of our web sites on our own server (IIS6 on Windows 2003)
The server does not run exchange at all.
Is this related to any attack that people know of?
From the questions below, this domain does not have any exchange email at all so it looks like a probe from a script. I'll filter it out so our error reporting logger ignores it.