0

Today I found plenty of malicious requests in Squid access log:

http://119.161.9.14/config/pwtoken_get?

I think it's safe for me and other users as websites use cookies to track visitors, so the "hacker" won't get anything, right?

2
  • 1
    1. Why does your Squid server accept connections from the Internet? 2. Why isn't your firewall blocking that port from the Internet? 3. Why don't you have any authentications whatsoever?! – Chris S Mar 5 '11 at 22:39
  • It was used as a HTTP proxy for somebody outside my Local Network so it accepts Internet connections. But you are right, I just added authentication. – Cheng Mar 6 '11 at 3:22
1

What this person is trying to do is get the log-in for Yahoo. More info: here. I don't think he will be able to get anything of your server because Squid doesn't store cookies by default.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.