RE: [squid-users] Is my squid server beening hacked??

> Hi
>
> Last night I found that our squid server was being used a lot
> more than normal. I found the following in the access log with lost
> of different IP addresses and wondered if this was the problem??
>
> 995592219.826 17 216.219.45.195 NONE/411 1607 GET
> http://www.worm.com/default.ida? - NONE/- -

Your squid server isn't.
The computer at address 216.219.45.195, on the other hand, already has been
by the worm named "red worm", which exploits Microsoft Indexing service
vulnerabilities. It migth comfort you that at least 200.000 other Windows
NT and 2000 servers have been infected along with that host.

Contact that host's system administrator to perform adequate disinfestation
operations.

-- 
	/kinkie