This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM Logging---WebServer----Virtual Hosts

Hi there,

Question: In the UTM, if I go into Logging & reporting----Webserver Protection----then Details. I see my web servers, however I also see some random websites. As an example:

www.fmfm11.com

www.zpzp11.com

and a few other random sites. Each has 0.x KB of transfer

These sites concern me. Any reason why they would show up under Webserver Protection as I'm not hosting them?

Thanks in advance for any detail on how this reporting section works.

This thread was automatically locked due to age.

0 sachingurung over 8 years ago

Hi Steve,

Can you please post a highlighted screenshot of the details tab? I want to take a look of the page.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 SteveParsons over 8 years ago in reply to sachingurung

Here you go. The past 7 days....
Cancel
Vote Up 0 Vote Down

Cancel
0 RadekBelsky over 8 years ago in reply to SteveParsons

Stay calm.

Some "script kiddie" or bot is trying to get to your public IP address with changed domain (not corresponding with DNS record) in the request.

WAF is safely blocking it with the 403 Forbidden status.

Radek
Cancel
Vote Up 0 Vote Down

Cancel