Hallo, alexus, Du meintest am 08.09.11: > Is there a way to analyze somehow deeper what's going on with this? > tss# grep 'http://ecs.amazonaws.com/onca/xml?' access.log | tail -1 > 66.55.138.70 - - [08/Sep/2011:18:59:26 +0000] "GET > http://ecs.amazonaws.com/onca/xml? HTTP/1.1" 200 135861 "-" > "Mozilla/4.1" TCP_MISS:DIRECT That line shows that the machine 66.55.138.70 tries to get a document from http://ecs.amazonaws.com/onca/xml And it gets the document (with about 130 kByte). 66.55.138.70 belongs to Alexusbiz Corp - seems to be one of your IP addresses. Seems that this request is no squid problem. Viele Gruesse! Helmut