Kerio logs the connection as blocked. Most home users that use it rely on Kerio to tell them what's happening. How would anyone know they were exploited, or that Kerio was at fault? You would need other software, like a packet sniffer, to see what's happening.
HiS