Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Http Request in Security Logs (I am getting lots of http request from different ip's)
  •  
chipmunkxiz

Messages: 12
Karma: 0
Send a private message to this user
Hi can somebody help me how to fix this. I am getting lots of http request from unknown ip address in Security Logs.

[27/Mar/2015 10:38:23] HTTP request from 115.167.4.138 ( ) redirected to HTTPS because of security policy.
[27/Mar/2015 10:38:41] HTTP request from 121.54.44.95 ( ) redirected to HTTPS because of security policy.
[27/Mar/2015 10:40:13] HTTP request from 112.198.79.3 ( ) redirected to HTTPS because of security policy.
[27/Mar/2015 10:41:25] HTTP request from 112.198.90.197 ( ) redirected to HTTPS because of security policy.
[27/Mar/2015 10:42:23] HTTP request from 1.175.86.36 ( ) redirected to HTTPS because of security policy.
[27/Mar/2015 10:42:30] HTTP request from 1.175.86.36 ( ) redirected to HTTPS because of security policy.
[27/Mar/2015 10:43:09] HTTP request from 122.54.167.17 ( ) redirected to HTTPS because of security policy.
[27/Mar/2015 10:43:16] HTTP request from 122.54.167.17 ( ) redirected to HTTPS because of security policy.
[27/Mar/2015 10:45:38] HTTP request from 210.5.102.252 ( ) redirected to HTTPS because of security policy.
[27/Mar/2015 10:45:49] HTTP request from 124.6.181.172 ( ) redirected to HTTPS because of security policy.
[27/Mar/2015 10:45:56] HTTP request from 124.6.181.172 ( ) redirected to HTTPS because of security policy.
[27/Mar/2015 10:47:29] HTTP request from 101.108.14.115 ( ) redirected to HTTPS because of security policy.

[Updated on: Fri, 27 March 2015 10:17]

  •  
Grabsteinschubser

Messages: 64
Karma: 4
Send a private message to this user
What is the problem? Sure, you can block them by using e.g. iptables. But I do not see why these requests are a problem. It means only that there is someone going to your webmailer page via HTTP and gets redirectet to the HTTPS page.
  •  
Brian Carmichael (Kerio)

Messages: 582
Karma: 58
Send a private message to this user
The issue is that this log event is not necessary and fills up the log. This log event is moved to the debug log in the next major release.

Brian Carmichael
Senior Technical Marketing Engineer | Kerio
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
  •  
chipmunkxiz

Messages: 12
Karma: 0
Send a private message to this user
I never encounter that before. Am i being under attack? is there anything to do with the firewall? Thank you Grabsteinchubser and Brian!

I also encounter this;

[27/Mar/2015 20:44:42] HTTP request from 186.14.194.183 ( ) redirected to HTTPS because of security policy.
[27/Mar/2015 20:44:42] HTTP request from 186.14.194.183 (GET /phph/php/ph.php) redirected to HTTPS because of security policy.
[27/Mar/2015 20:44:43] HTTP request from 186.14.194.183 (GET /phpMyAdmin/scripts/setup.php) redirected to HTTPS because of security policy.
[27/Mar/2015 20:44:44] HTTP request from 186.14.194.183 (GET /pma/scripts/setup.php) redirected to HTTPS because of security policy.
[27/Mar/2015 20:44:45] HTTP request from 186.14.194.183 (GET /myadmin/scripts/setup.php) redirected to HTTPS because of security policy.

[Updated on: Sat, 28 March 2015 00:54]

  •  
Brian Carmichael (Kerio)

Messages: 582
Karma: 58
Send a private message to this user
You're not under attack. It's normal Internet chatter. You don't need to take any action.

Brian Carmichael
Senior Technical Marketing Engineer | Kerio
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
  •  
chipmunkxiz

Messages: 12
Karma: 0
Send a private message to this user
Previous Topic: Global Distribution lists
Next Topic: Move Outlook Files to SSD
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Tue Jan 24 14:11:24 CET 2017

Total time taken to generate the page: 0.00952 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.