Feb 4 00:05:00 firewall snort[13826]: ERROR /opt/ids/snort/snort.conf:41 => Port value missing in rule!
Feb 4 02:16:03 firewall snort[13865]: High False Rule - IDS177 NETBIOS-SMB-Name-Query: 216.249.212.29:137 -> 172.16.1.105:137
Feb 4 04:27:25 firewall snort[13865]: High False Rule - IDS177 NETBIOS-SMB-Name-Query: 216.103.237.46:137 -> 172.16.1.105:137
Feb 4 06:25:23 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:1765 -> 172.16.1.106:80
Feb 4 06:25:23 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:1765 -> 172.16.1.106:80
Feb 4 06:26:35 firewall snort[13865]: WEB-MISC - 403 Forbidden: 172.16.1.106:80 -> 213.116.251.162:1769
Feb 4 06:26:49 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1770 -> 172.16.1.106:80
Feb 4 06:27:08 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1771 -> 172.16.1.106:80
Feb 4 06:27:15 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:1772 -> 172.16.1.106:80
Feb 4 06:27:15 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:1772 -> 172.16.1.106:80
Feb 4 06:32:50 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1777 -> 172.16.1.106:80
Feb 4 06:32:52 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1778 -> 172.16.1.106:80
Feb 4 06:32:58 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1779 -> 172.16.1.106:80
Feb 4 06:32:59 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1780 -> 172.16.1.106:80
Feb 4 06:33:05 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1781 -> 172.16.1.106:80
Feb 4 06:33:06 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1782 -> 172.16.1.106:80
Feb 4 06:33:12 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1783 -> 172.16.1.106:80
Feb 4 06:33:13 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1784 -> 172.16.1.106:80
Feb 4 06:33:19 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1785 -> 172.16.1.106:80
Feb 4 06:33:19 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1786 -> 172.16.1.106:80
Feb 4 06:33:26 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1787 -> 172.16.1.106:80
Feb 4 06:33:27 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1789 -> 172.16.1.106:80
Feb 4 06:33:33 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1790 -> 172.16.1.106:80
Feb 4 06:33:34 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1791 -> 172.16.1.106:80
Feb 4 06:33:50 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1792 -> 172.16.1.106:80
Feb 4 06:33:51 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1793 -> 172.16.1.106:80
Feb 4 06:34:00 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1794 -> 172.16.1.106:80
Feb 4 06:34:01 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1795 -> 172.16.1.106:80
Feb 4 06:34:07 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1796 -> 172.16.1.106:80
Feb 4 06:34:08 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1797 -> 172.16.1.106:80
Feb 4 06:34:14 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1798 -> 172.16.1.106:80
Feb 4 06:34:15 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1799 -> 172.16.1.106:80
Feb 4 06:34:21 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1800 -> 172.16.1.106:80
Feb 4 06:34:22 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1801 -> 172.16.1.106:80
Feb 4 06:34:28 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1802 -> 172.16.1.106:80
Feb 4 06:34:29 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1803 -> 172.16.1.106:80
Feb 4 06:34:45 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1807 -> 172.16.1.106:80
Feb 4 06:34:47 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1808 -> 172.16.1.106:80
Feb 4 06:36:29 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1811 -> 172.16.1.106:80
Feb 4 06:36:30 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1812 -> 172.16.1.106:80
Feb 4 06:36:36 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1813 -> 172.16.1.106:80
Feb 4 06:36:37 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1814 -> 172.16.1.106:80
Feb 4 06:36:43 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1815 -> 172.16.1.106:80
Feb 4 06:36:44 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1816 -> 172.16.1.106:80
Feb 4 06:36:51 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1819 -> 172.16.1.106:80
Feb 4 06:36:53 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1821 -> 172.16.1.106:80
Feb 4 06:37:00 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1824 -> 172.16.1.106:80
Feb 4 06:37:01 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1825 -> 172.16.1.106:80
Feb 4 06:37:07 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1826 -> 172.16.1.106:80
Feb 4 06:37:08 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1827 -> 172.16.1.106:80
Feb 4 06:37:14 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1828 -> 172.16.1.106:80
Feb 4 06:37:15 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1829 -> 172.16.1.106:80
Feb 4 06:37:21 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1831 -> 172.16.1.106:80
Feb 4 06:37:23 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1832 -> 172.16.1.106:80
Feb 4 06:38:26 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1839 -> 172.16.1.106:80
Feb 4 06:38:27 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1840 -> 172.16.1.106:80
Feb 4 06:38:29 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1841 -> 172.16.1.106:80
Feb 4 06:38:30 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1842 -> 172.16.1.106:80
Feb 4 06:38:31 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1843 -> 172.16.1.106:80
Feb 4 06:38:32 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1844 -> 172.16.1.106:80
Feb 4 06:38:33 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1845 -> 172.16.1.106:80
Feb 4 06:38:34 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1846 -> 172.16.1.106:80
Feb 4 06:38:35 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1847 -> 172.16.1.106:80
Feb 4 06:38:36 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1848 -> 172.16.1.106:80
Feb 4 06:38:37 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1849 -> 172.16.1.106:80
Feb 4 06:38:38 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1850 -> 172.16.1.106:80
Feb 4 06:38:40 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1851 -> 172.16.1.106:80
Feb 4 06:38:40 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1852 -> 172.16.1.106:80
Feb 4 06:38:42 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1853 -> 172.16.1.106:80
Feb 4 06:38:42 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1854 -> 172.16.1.106:80
Feb 4 06:40:10 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1856 -> 172.16.1.106:80
Feb 4 06:40:11 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1857 -> 172.16.1.106:80
Feb 4 06:40:13 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1858 -> 172.16.1.106:80
Feb 4 06:40:13 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1859 -> 172.16.1.106:80
Feb 4 06:40:14 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1860 -> 172.16.1.106:80
Feb 4 06:40:15 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1861 -> 172.16.1.106:80
Feb 4 06:40:16 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1862 -> 172.16.1.106:80
Feb 4 06:40:17 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1863 -> 172.16.1.106:80
Feb 4 06:40:19 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1864 -> 172.16.1.106:80
Feb 4 06:40:19 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1865 -> 172.16.1.106:80
Feb 4 06:40:21 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1866 -> 172.16.1.106:80
Feb 4 06:40:21 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1867 -> 172.16.1.106:80
Feb 4 06:40:23 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1868 -> 172.16.1.106:80
Feb 4 06:40:23 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1869 -> 172.16.1.106:80
Feb 4 06:40:25 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1870 -> 172.16.1.106:80
Feb 4 06:40:25 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1871 -> 172.16.1.106:80
Feb 4 06:41:03 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:1874 -> 172.16.1.106:80
Feb 4 06:41:03 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:1874 -> 172.16.1.106:80
Feb 4 06:41:09 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:1875 -> 172.16.1.106:80
Feb 4 06:41:09 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:1875 -> 172.16.1.106:80
Feb 4 06:41:19 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:1876 -> 172.16.1.106:80
Feb 4 06:41:19 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:1876 -> 172.16.1.106:80
Feb 4 06:41:29 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:1877 -> 172.16.1.106:80
Feb 4 06:41:29 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:1877 -> 172.16.1.106:80
Feb 4 06:41:40 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:1879 -> 172.16.1.106:80
Feb 4 06:41:40 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:1879 -> 172.16.1.106:80
Feb 4 06:41:50 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:1880 -> 172.16.1.106:80
Feb 4 06:41:50 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:1880 -> 172.16.1.106:80
Feb 4 06:42:00 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:1881 -> 172.16.1.106:80
Feb 4 06:42:00 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:1881 -> 172.16.1.106:80
Feb 4 06:42:10 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:1882 -> 172.16.1.106:80
Feb 4 06:42:10 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:1882 -> 172.16.1.106:80
Feb 4 06:42:21 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:1885 -> 172.16.1.106:80
Feb 4 06:42:21 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:1885 -> 172.16.1.106:80
Feb 4 06:42:43 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:1887 -> 172.16.1.106:80
Feb 4 06:42:43 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:1887 -> 172.16.1.106:80
Feb 4 06:43:40 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1890 -> 172.16.1.106:80
Feb 4 06:43:53 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1891 -> 172.16.1.106:80
Feb 4 06:44:25 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1892 -> 172.16.1.106:80
Feb 4 06:44:37 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1893 -> 172.16.1.106:80
Feb 4 06:45:47 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1900 -> 172.16.1.106:80
Feb 4 06:45:55 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1901 -> 172.16.1.106:80
Feb 4 06:47:38 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1920 -> 172.16.1.106:80
Feb 4 06:47:48 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1922 -> 172.16.1.106:80
Feb 4 06:47:51 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1923 -> 172.16.1.106:80
Feb 4 06:47:55 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1924 -> 172.16.1.106:80
Feb 4 06:49:49 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1929 -> 172.16.1.106:80
Feb 4 06:49:54 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1930 -> 172.16.1.106:80
Feb 4 06:49:57 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1931 -> 172.16.1.106:80
Feb 4 06:50:00 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1932 -> 172.16.1.106:80
Feb 4 06:53:39 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1939 -> 172.16.1.106:80
Feb 4 06:53:41 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1940 -> 172.16.1.106:80
Feb 4 06:54:00 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1942 -> 172.16.1.106:80
Feb 4 06:54:03 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1943 -> 172.16.1.106:80
Feb 4 06:54:20 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1944 -> 172.16.1.106:80
Feb 4 06:56:05 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1946 -> 172.16.1.106:80
Feb 4 06:56:09 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1947 -> 172.16.1.106:80
Feb 4 06:56:17 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1948 -> 172.16.1.106:80
Feb 4 06:58:59 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1955 -> 172.16.1.106:80
Feb 4 06:59:03 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1956 -> 172.16.1.106:80
Feb 4 06:59:16 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1957 -> 172.16.1.106:80
Feb 4 06:59:18 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1958 -> 172.16.1.106:80
Feb 4 06:59:36 firewall snort[13865]: IDS159 - PING Microsoft Windows: 213.116.251.162 -> 172.16.1.106
Feb 4 07:06:27 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1963 -> 172.16.1.106:80
Feb 4 07:06:32 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1964 -> 172.16.1.106:80
Feb 4 07:06:34 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1965 -> 172.16.1.106:80
Feb 4 07:06:38 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1966 -> 172.16.1.106:80
Feb 4 07:06:40 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1967 -> 172.16.1.106:80
Feb 4 07:06:42 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1968 -> 172.16.1.106:80
Feb 4 07:07:00 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1969 -> 172.16.1.106:80
Feb 4 07:07:04 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1970 -> 172.16.1.106:80
Feb 4 07:07:07 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1971 -> 172.16.1.106:80
Feb 4 07:07:10 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1972 -> 172.16.1.106:80
Feb 4 07:07:18 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1973 -> 172.16.1.106:80
Feb 4 07:07:33 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1974 -> 172.16.1.106:80
Feb 4 07:07:49 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1975 -> 172.16.1.106:80
Feb 4 07:07:51 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1976 -> 172.16.1.106:80
Feb 4 07:08:04 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1978 -> 172.16.1.106:80
Feb 4 07:08:33 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1979 -> 172.16.1.106:80
Feb 4 07:08:35 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1980 -> 172.16.1.106:80
Feb 4 07:08:36 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1981 -> 172.16.1.106:80
Feb 4 07:10:42 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:1987 -> 172.16.1.106:80
Feb 4 07:10:42 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:1987 -> 172.16.1.106:80
Feb 4 07:11:20 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:1992 -> 172.16.1.106:80
Feb 4 07:11:20 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:1992 -> 172.16.1.106:80
Feb 4 07:15:15 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1997 -> 172.16.1.106:80
Feb 4 07:15:24 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1998 -> 172.16.1.106:80
Feb 4 07:15:31 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:1999 -> 172.16.1.106:80
Feb 4 07:15:35 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:2000 -> 172.16.1.106:80
Feb 4 07:17:38 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:2002 -> 172.16.1.106:80
Feb 4 07:17:38 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:2002 -> 172.16.1.106:80
Feb 4 07:19:06 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:2007 -> 172.16.1.106:80
Feb 4 07:19:06 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:2007 -> 172.16.1.106:80
Feb 4 07:25:50 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:2022 -> 172.16.1.106:80
Feb 4 07:25:50 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:2022 -> 172.16.1.106:80
Feb 4 07:26:01 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:2022 -> 172.16.1.106:80
Feb 4 07:26:01 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:2022 -> 172.16.1.106:80
Feb 4 07:26:06 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:2023 -> 172.16.1.106:80
Feb 4 07:26:06 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:2023 -> 172.16.1.106:80
Feb 4 07:29:24 firewall snort[13865]: BETA - Possible IRC Access: 172.16.1.106:6868 -> 202.85.60.156:1345
Feb 4 07:33:48 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:2080 -> 172.16.1.106:80
Feb 4 07:34:12 firewall snort[13865]: BUGTRAQ ID 529 IIS-msadc/msadcs.dll: 213.116.251.162:2082 -> 172.16.1.106:80
Feb 4 07:34:56 firewall snort[13865]: IDS311 - SCAN - L3retriever Ping: 213.116.251.162 -> 172.16.1.106
Feb 4 07:35:13 firewall snort[13865]: IDS159 - PING Microsoft Windows: 213.116.251.162 -> 172.16.1.106
Feb 4 07:50:27 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:2150 -> 172.16.1.106:80
Feb 4 07:50:27 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:2150 -> 172.16.1.106:80
Feb 4 07:50:37 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:2151 -> 172.16.1.106:80
Feb 4 07:50:37 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:2151 -> 172.16.1.106:80
Feb 4 07:50:47 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:2154 -> 172.16.1.106:80
Feb 4 07:50:47 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:2154 -> 172.16.1.106:80
Feb 4 07:51:01 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:2161 -> 172.16.1.106:80
Feb 4 07:51:01 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:2161 -> 172.16.1.106:80
Feb 4 07:51:12 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:2172 -> 172.16.1.106:80
Feb 4 07:51:12 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:2172 -> 172.16.1.106:80
Feb 4 07:51:18 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:2175 -> 172.16.1.106:80
Feb 4 07:51:18 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:2175 -> 172.16.1.106:80
Feb 4 07:51:29 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:2177 -> 172.16.1.106:80
Feb 4 07:51:29 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:2177 -> 172.16.1.106:80
Feb 4 07:51:53 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:2178 -> 172.16.1.106:80
Feb 4 07:51:53 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:2178 -> 172.16.1.106:80
Feb 4 07:54:13 firewall snort[13865]: spp_http_decode: IIS Unicode attack detected: 213.116.251.162:2187 -> 172.16.1.106:80
Feb 4 07:54:13 firewall snort[13865]: IDS297 - WEB MISC - http-directory-traversal 1: 213.116.251.162:2187 -> 172.16.1.106:80