Security Incidents mailing list archives

Re: IIS & CGI Attacks from AOL cache sites


From: Shoten <shoten () starpower net>
Date: Fri, 23 Feb 2001 13:53:15 -0500

Might they be attacks being bounced (rather suicidally, as I am sure AOL
logs) off of these servers?  They aren't just cache servers but proxies as
well, judging by the FQDNs.


Was curious if anyone else has noticed IIS Unicode or Web-CGI attacks
originating from AOL in the last week.  We have logged attempts from:
152.163.188.162
205.188.208.199
205.188.209.5

These all resolve to cache-????.proxy.aol.com hosts.


Current thread: