[squid-users] Weird thing in access.log

From: TSIOLAS KOSTAS <ktsiolas@dont-contact.us>
Date: Tue, 28 Jan 2003 17:55:01 +0200

> In my proxy RH7.3 Squid2.5st1 i get this lines in access log.
>
> 1043761343.085 4 192.168.60.70 NONE/400 1503 GET
> http://GATE1:8080GATE1:8080 - NONE/- text/html
> 1043761343.205 38 192.168.60.70 NONE/400 1503 GET
> http://GATE1:8080GATE1:8080 - NONE/- text/html
> 1043761343.315 36 192.168.60.70 NONE/400 1625 GET
> /scripts/cms/CmsInit.ASP?ID=1&D2=ar?ACw????@??&AW=167&LV=2045&CU=3934076 -
> NONE/- text/html
>
> when i netstat my proxy no connection from that user is established.
>
> gate1 is the name of my proxy and 8080 is the listening port.
> I scanned the computer with antivirus no suspicious thing found.
> user OS is win98.
> any idea what this could be?
>
> sorry for my english.
>
>
> thanks in advance
Received on Tue Jan 28 2003 - 09:21:59 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:12:54 MST