On 23/10/2015 10:43 a.m., Job wrote:
> Hello,
>
> sometimes, for about half an hour, tour Squid becomes unstable and, by typing
> "top -s", Squid is taking the 100% of the CPU.
>
> In Squid's access.log, i see lots of entry like this:
>
> "Thu";"Oct";"22";"11:45:17";"2015";"21328";"192.168.1.25
The simplest way is to use fail2ban.
What OS are you using?
it is possible an attack but it's not 100%.
What you can do is to also disable access using the proxy to this
destination IP and address.
100% CPU in many cases is not something odd but you can try fail2ban
with a special rule to block
Hello,
sometimes, for about half an hour, tour Squid becomes unstable and, by typing
"top -s", Squid is taking the 100% of the CPU.
In Squid's access.log, i see lots of entry like this:
"Thu";"Oct";"22";"11:45:17";"2015";"21328";"192.168.1.250";"TCP_MISS/000";"0";"GET";"http://192.168.1.254:808
