Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Black on June 14, 2005, 09:25:38 PM

Title: Interesting Logs..
Post by: Black on June 14, 2005, 09:25:38 PM

62.37.217.135:36523 -> 67.17.162.194:80 (http_inspect) OVERSIZE REQUEST-URI DIRECTORY

62.37.217.135:36952 -> 64.236.40.69:80 [cve/2000-0382] [icat/2000-0382] [WEB-CGI redirect access

62.37.217.135:37594 -> 204.0.99.206:80  (http_inspect) DOUBLE DECODING ATTACK

62.37.217.139:37754 -> 63.216.25.144:80 [cve/1999-0253] [icat/1999-0253] WEB-IIS %2E-asp access


First Ip's are Source (My Server) and the 2nd Is destination..

I'm wondering if one of the kids in the house are trying to do something with this??

Title: Interesting Logs..
Post by: genzil on June 14, 2005, 11:51:27 PM

Or some one else controling their machine...

Title: Interesting Logs..
Post by: Black on June 15, 2005, 01:17:57 AM

Any more information?