[squid-users] Is it a virus or what ?

From: Abdur Rahmaan <techylist@dont-contact.us>
Date: Thu, 1 Jul 2004 09:49:21 +0800 (CST)

I have some clients which are TCP_DENIED to bizarres
URLs. I've tried to identify thos URLs without any
stisfying result. Could somebody tell me what it is ?
Here are some lines in my access.log this morning:

1088687101.235 3 10.1.1.1 TCP_DENIED/407 1731 GET
http://24.52.88.56:26076/2004/7/1/20/41/26/ - NONE/-
text/html
1088687101.250 4 10.1.1.1 TCP_DENIED/407 1731 GET
http://221.1.10.97:26222/2004/7/1/20/41/26/ - NONE/-
text/html
1088687101.263 4 10.1.1.2 TCP_DENIED/407 1731 GET
http://24.226.39.124:28250/2004/7/1/8/42/4/ - NONE/-
text/html
1088687101.271 4 10.1.1.1 TCP_DENIED/407 1740 GET
http://218.150.228.32:26368/2004/7/1/20/41/26/ -
NONE/- text/html
1088687101.311 4 10.1.1.1 TCP_DENIED/407 1734 GET
http://213.60.9.224:26273/2004/7/1/20/41/27/ - NONE/-
text/html
1088687101.347 6 10.1.1.1 TCP_DENIED/407 1737 GET
http://82.154.125.35:26236/2004/7/1/20/41/27/ - NONE/-
text/html
1088687101.360 6 10.1.1.2 TCP_DENIED/407 1728 GET
http://65.25.57.137:28090/2004/7/1/8/42/4/ - NONE/-
text/html
1088687101.378 6 10.1.1.1 TCP_DENIED/407 1743 GET
http://218.148.212.236:26366/2004/7/1/20/41/27/ -
NONE/- text/html
1088687101.405 6 10.1.1.2 TCP_DENIED/407 1728 GET
http://68.23.223.55:28091/2004/7/1/8/42/4/ - NONE/-
text/html
1088687101.411 4 10.1.1.1 TCP_DENIED/407 1743 GET
http://218.153.143.216:26371/2004/7/1/20/41/27/ -
NONE/- text/html

__________________________________________________
Do You Yahoo!?
Log on to Messenger with your mobile phone!
http://sg.messenger.yahoo.com
Received on Wed Jun 30 2004 - 19:49:22 MDT

This archive was generated by hypermail pre-2.1.9 : Thu Jul 01 2004 - 12:00:03 MDT