On Thu, Mar 22, 2012 at 2:38 PM, Momen, Mazdak <MMomen@xxxxxxxxx> wrote: > Hi, we have recently noticed unusual denied requests on our Squid servers. > Thu Mar 22 03:00:24 2012 3 ***.***.***.*** TCP_DENIED/403 3437 CONNECT https:443 - NONE/- text/html > > We're not sure what "https:443" exactly is or how it is produced. This was not caused by a user, the servers behind our Squid servers are hosting a web application. Any idea what exactly this is? Probably a bad client or someone probing your setup for vulnerabilities. -- /kinkie
