Re: [squid-users] Squid attack?

From: Henrik Nordstrom <henrik@dont-contact.us>
Date: Sat, 24 Feb 2007 19:14:25 +0100

lör 2007-02-24 klockan 15:27 +0000 skrev Paul:
> Well, its not that then - nothing in the access_log from apache.
> I think I might need to wait until it happens again and do some
> forensics then.
> I'm a little concerned that there's something on my box that shouldn't
> be there, but I've got good commercial AV software running, and very
> good strong passwords, I'm the only account on there too. It would seem
> unlikely, but I can't see how anything's getting though the firewall
> right now....

I could make a quick external audit if you give me the IP. The probes
will come from 12.160.37.9 and 81.233.163.21.

Regards
Henrik

Received on Sat Feb 24 2007 - 11:14:34 MST

This archive was generated by hypermail pre-2.1.9 : Thu Mar 01 2007 - 12:00:01 MST