Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

floods through our proxy

From: Jon Zobrist <jzobrist(at)contentwatch.com>
Date: Tue Jul 29 2003 - 16:47:45 EDT


We have an old software proxy that clients surfed through. It's discontinued and normally we have 50 clients or less still trying to use it. In the last hour it's climbed to over 3000 so I did some investigating.
It seems the same clients over and over are making massive amounts of http queries. Since we don't proxy, we just forward to a page that says product discontinued, and since that page is on a thttpd server, it hasn't affected us.

However, it seems to be a DoS...I've got 8 IPs that were sending a combined 40 requests/second listed in my firewall now.

Anyone else noticing any bursts in http traffic or known attacks?

-- 
Jon Zobrist 
CISSP


Received on Wed Jul 30 10:59:59 2003

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:02:14 EDT


Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library