Trademe, any idea what they are upto

Discussion in 'NZ Computing' started by Collector»NZ, Aug 15, 2006.

  1. Date: 08/15 08:50:06 Name: (http_inspect) IIS UNICODE CODEPOINT ENCODING
    Priority: n/a Type: n/a
    IP info: 10.50.0.4:1280 -> 202.21.128.2:80
    References: none found SID: n/a
    Date: 08/15 08:50:06 Name: (http_inspect) IIS UNICODE CODEPOINT ENCODING
    Priority: n/a Type: n/a
    IP info: 192.168.1.20:33033 -> 202.21.128.2:80
    References: none found SID: n/a

    From my IDS logs
    --
    >>Follow ups may be set to a single group when appropriate!

    ======================================================================
    | Local 38.2330S, 175.8670E |
    ======================================================================
     
    Collector»NZ, Aug 15, 2006
    #1
    1. Advertising

  2. In message <44e1a28c$>, Collector»NZ wrote:

    > Date: 08/15 08:50:06 Name: (http_inspect) IIS UNICODE CODEPOINT ENCODING
    > Priority: n/a Type: n/a
    > IP info: 10.50.0.4:1280 -> 202.21.128.2:80
    > References: none found SID: n/a
    > Date: 08/15 08:50:06 Name: (http_inspect) IIS UNICODE CODEPOINT ENCODING
    > Priority: n/a Type: n/a
    > IP info: 192.168.1.20:33033 -> 202.21.128.2:80
    > References: none found SID: n/a
    >
    > From my IDS logs


    But if the /source/ address is one of your internal IP addresses (as in both
    the examples above), then how is that Trademe's fault?
     
    Lawrence D'Oliveiro, Aug 20, 2006
    #2
    1. Advertising

  3. Lawrence D'Oliveiro wrote:
    > In message <44e1a28c$>, Collector»NZ wrote:
    >
    >> Date: 08/15 08:50:06 Name: (http_inspect) IIS UNICODE CODEPOINT ENCODING
    >> Priority: n/a Type: n/a
    >> IP info: 10.50.0.4:1280 -> 202.21.128.2:80
    >> References: none found SID: n/a
    >> Date: 08/15 08:50:06 Name: (http_inspect) IIS UNICODE CODEPOINT ENCODING
    >> Priority: n/a Type: n/a
    >> IP info: 192.168.1.20:33033 -> 202.21.128.2:80
    >> References: none found SID: n/a
    >>
    >> From my IDS logs

    >
    > But if the /source/ address is one of your internal IP addresses (as in both
    > the examples above), then how is that Trademe's fault?

    Yes but whats in that page that is sending something to them that my IDS (SNORT
    Rules) thinks is bad?

    --
    >>Follow ups may be set to a single group when appropriate!

    ======================================================================
    | Local 38.2330S, 175.8670E |
    ======================================================================
     
    Collector»NZ, Aug 20, 2006
    #3
  4. In message <>, Collector»NZ wrote:

    > Lawrence D'Oliveiro wrote:
    >> In message <44e1a28c$>, Collector»NZ wrote:
    >>
    >>> Date: 08/15 08:50:06 Name: (http_inspect) IIS UNICODE CODEPOINT
    >>> ENCODING
    >>> Priority: n/a Type: n/a
    >>> IP info: 10.50.0.4:1280 -> 202.21.128.2:80
    >>> References: none found SID: n/a
    >>> Date: 08/15 08:50:06 Name: (http_inspect) IIS UNICODE CODEPOINT
    >>> ENCODING
    >>> Priority: n/a Type: n/a
    >>> IP info: 192.168.1.20:33033 -> 202.21.128.2:80
    >>> References: none found SID: n/a
    >>>
    >>> From my IDS logs

    >>
    >> But if the /source/ address is one of your internal IP addresses (as in
    >> both the examples above), then how is that Trademe's fault?

    > Yes but whats in that page that is sending something to them that my IDS
    > (SNORT Rules) thinks is bad?


    Doing a Google search for "IIS UNICODE CODEPOINT" turned up this
    <http://www.securityfocus.com/infocus/1232> and this
    <http://security.raffy.ch/projects/Raffael_Marty_GCIA/node18.html>, which
    might offer a clue.
     
    Lawrence D'Oliveiro, Aug 22, 2006
    #4
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Networking Student
    Replies:
    4
    Views:
    1,435
    vreyesii
    Nov 16, 2006
  2. leo
    Replies:
    2
    Views:
    304
    Larry
    Nov 4, 2004
  3. Replies:
    24
    Views:
    1,416
    Kennedy McEwen
    Mar 21, 2006
  4. Robert

    Trademe.co.nz - they spy on you.

    Robert, Dec 19, 2004, in forum: NZ Computing
    Replies:
    48
    Views:
    1,456
    Bruce Sinclair
    Dec 20, 2004
  5. yan
    Replies:
    0
    Views:
    504
Loading...

Share This Page