Re: Increase in squid scanning...

From: David Jacoby (djat_private)
Date: Mon Mar 11 2002 - 02:00:36 PST

  • Next message: Keith T. Morgan: "HTTPS scans"

    Yes. If you didnt know there is a squid vulnerability recently discovered.
    
    For further information please check the following URL:
    http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=4148
    
    switched wrote:
    
    >Has anyone seen a large increase in squid/proxy scans lately?  I'm getting
    >these two IPs more than 3 or 4 times daily scanning me for squid/proxy at
    >the same exact time.  217.81.20.130 seems to be home.spykid.de (so says the
    >webpage on port 80) and I don't have any addtional information on
    >80.116.181.170 but both appear to be scanning the same networks everyday.
    >
    >
    >
    >
    >----------------------------------------------------------------------------
    >This list is provided by the SecurityFocus ARIS analyzer service.
    >For more information on this free incident handling, management 
    >and tracking system please see: http://aris.securityfocus.com
    >
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Mon Mar 11 2002 - 09:50:20 PST