Attack alert from snort

Fri, 06 Jul 2001 10:06:46 -0500 

I got the following from snort :

Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
Jul  6 07:48:19 canopus snort[3884]: spp_http_decode: IIS Unicode
attack detected: 128.95.75.153:1647 -> 208.52.11.121:80

Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
Jul  6 05:36:39 canopus snort[526]: spp_http_decode: IIS Unicode
attack detected: 204.253.198.48:61383 -> 216.136.172.167:80

The bottom one particularly worries me as that seems to come from my
system. Should I worry? If so how do I go about getting out of
trouble?

Thanks


Best regards,
Philippe Clérié (philippe[at]gcal.net)

Reply via email to