On Mon, 24 Jan 2005, Irfan DP wrote:
> dear Hendrik,
>
> This is just example the type of URL that have been ruled-out because URL is too big too handle by squid. But, I denied anyway.
> It might be a kind of worm or anything else.
>
> 1106552354.109 4685 202.xxx.xxx.123 TCP_DENIED/400 65598 SEARCH http://202.xxx.xxx.194:80/%90%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c
9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%
c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%!
c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%
c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9
%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9!
%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9
%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c
9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c!
9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%c9%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%9
0%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%
90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90%!
90%90%90%90%90%90%90%90%90%90%90%90%90
Looks like someone/something trying to exploit a buffer overflow in the
web server, trying to hack the web server.
So it's a good thing this gets trapped by Squid as it makes it impossible
for your users to attack others web server in this manner, protecting you
from being accused of being a security hazard.
Regards
Henrik
Received on Tue Jan 25 2005 - 04:08:12 MST
This archive was generated by hypermail pre-2.1.9 : Mon Mar 07 2005 - 12:59:36 MST