Security Incidents mailing list archives

IIS & CGI Attacks from AOL cache sites


From: Starbuck Newton <starbuck () MIAMIHEARTRESEARCH ORG>
Date: Fri, 23 Feb 2001 12:07:53 -0500

Hello all,

Was curious if anyone else has noticed IIS Unicode or Web-CGI attacks
originating from AOL in the last week.  We have logged attempts from:
152.163.188.162
205.188.208.199
205.188.209.5

These all resolve to cache-????.proxy.aol.com hosts.

Could these perhaps be false positives caused by bots crawling our web
site???  (We're using Snort v1.7)

Thanks in advance for any commentary.

Starbuck Newton
Miami Heart Research Institute


Current thread: