Search squid archive

Squid Reverse Proxy. Attempted connections to domains we do not host?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



We are seeing entries like this in our squid access log:

1376290358.781    151 198.2.208.203 TCP_MISS/200 916 GET
http://toolbarqueries.google.com.hk/tbr? - HIER_DIRECT/74.125.237.18
text/html
1376290358.813    150 198.2.208.203 TCP_MISS/200 916 GET
http://toolbarqueries.google.com.hk/tbr? - HIER_DIRECT/74.125.237.18
text/html
1376290362.235    151 198.2.208.203 TCP_MISS/200 914 GET
http://toolbarqueries.google.com.hk/tbr? - HIER_DIRECT/74.125.237.18
text/html
1376290369.401    276 46.102.93.254 TCP_MISS/200 4850 GET
http://www.baidu.com/ - HIER_DIRECT/180.76.3.151 text/html
1376290370.041    663 199.180.100.170 TCP_MISS/200 9183 GET
http://www.google.tm/ - HIER_DIRECT/74.125.237.120 text/html
1376290370.455   1128 216.244.78.163 TCP_MISS/200 12491 GET
http://www.google.com.uy/ - HIER_DIRECT/74.125.237.119 text/html
1376290375.713   3449 198.52.120.152 TCP_MISS/302 840 POST
http://shelivedinashoe.com/wp-comments-post.php - HIER_DIRECT/97.74.26.128
text/html

It looks like someone else's traffic is somehow being routed through our
proxy??

How can this one even happen:
1376291144.757    879 216.244.78.166 TCP_MISS/302 1057 GET
http://203.208.46.128/search? - HIER_DIRECT/203.208.46.128 text/html ?

No idea what this means.  I know I could add entries like this by creating a
hosts file entry to point fake.domain.com to our server but surely it's not
people doing this?



--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Reverse-Proxy-Attempted-connections-to-domains-we-do-not-host-tp4661522.html
Sent from the Squid - Users mailing list archive at Nabble.com.




[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux