<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<p>Hi guys,</p>
<p>Everyday I get tons of these GETs, a lot from the same IP, then a
lot from other IPs of our local intranet (we have some APs plugged
on our intranet). This is happening since forever, but I'm trying
to understand/get rid of it.</p>
<p>Any ideas?<br>
</p>
<p>1513079234.177 1 10.20.5.2 TCP_HIT/301 619 GET
<a class="moz-txt-link-freetext" href="http://172.217.28.132/">http://172.217.28.132/</a> - HIER_NONE/- text/html<br>
1513079234.280 1 10.20.5.2 TCP_HIT/301 619 GET
<a class="moz-txt-link-freetext" href="http://172.217.28.132/">http://172.217.28.132/</a> - HIER_NONE/- text/html<br>
1513079234.379 1 10.20.5.2 TCP_HIT/301 619 GET
<a class="moz-txt-link-freetext" href="http://172.217.28.132/">http://172.217.28.132/</a> - HIER_NONE/- text/html<br>
1513079234.485 1 10.20.5.2 TCP_HIT/301 619 GET
<a class="moz-txt-link-freetext" href="http://172.217.28.132/">http://172.217.28.132/</a> - HIER_NONE/- text/html<br>
1513079234.587 1 10.20.5.2 TCP_HIT/301 619 GET
<a class="moz-txt-link-freetext" href="http://172.217.28.132/">http://172.217.28.132/</a> - HIER_NONE/- text/html<br>
1513079234.695 1 10.20.5.2 TCP_HIT/301 619 GET
<a class="moz-txt-link-freetext" href="http://172.217.28.132/">http://172.217.28.132/</a> - HIER_NONE/- text/html<br>
1513079234.802 1 10.20.5.2 TCP_HIT/301 619 GET
<a class="moz-txt-link-freetext" href="http://172.217.28.132/">http://172.217.28.132/</a> - HIER_NONE/- text/html<br>
1513079235.187 1 10.20.5.2 TCP_HIT/301 619 GET
<a class="moz-txt-link-freetext" href="http://172.217.28.132/">http://172.217.28.132/</a> - HIER_NONE/- text/html<br>
1513079235.291 2 10.20.5.2 TCP_HIT/301 619 GET
<a class="moz-txt-link-freetext" href="http://172.217.28.132/">http://172.217.28.132/</a> - HIER_NONE/- text/html</p>
<p>tcpdumped, client request:<br>
</p>
<blockquote>
<p>GET <a class="moz-txt-link-freetext" href="http://172.217.28.132/">http://172.217.28.132/</a> HTTP/1.1<br>
User-Agent: Dalvik/1.6.0 (Linux; U; Android 4.3; GT-I9505
Build/JSS15J)<br>
Host: <a class="moz-txt-link-abbreviated" href="http://www.google.com">www.google.com</a><br>
Connection: close</p>
</blockquote>
<p>proxy response:</p>
<blockquote>
<p>HTTP/1.1 301 Moved Permanently<br>
Location: <a class="moz-txt-link-freetext" href="http://www.google.com/">http://www.google.com/</a><br>
Content-Type: text/html; charset=UTF-8<br>
Date: Tue, 12 Dec 2017 10:34:02 GMT<br>
Expires: Thu, 11 Jan 2018 10:34:02 GMT<br>
Cache-Control: public, max-age=2592000<br>
Server: gws<br>
Content-Length: 219<br>
X-XSS-Protection: 1; mode=block<br>
X-Frame-Options: SAMEORIGIN<br>
Age: 14658<br>
X-Cache: HIT from proxy<br>
Via: 1.1 proxy (squid)<br>
Connection: close<br>
<br>
<HTML><HEAD><meta http-equiv="content-type"
content="text/html;charset=utf-8"><br>
<TITLE>301 Moved</TITLE></HEAD><BODY><br>
<H1>301 Moved</H1><br>
The document has moved<br>
<A HREF=<a class="moz-txt-link-rfc2396E" href="http://www.google.com/">"http://www.google.com/"</a>>here</A>.<br>
</BODY></HTML><br>
</p>
</blockquote>
<pre class="moz-signature" cols="72">--
Atenciosamente / Best Regards,
Heiler Bemerguy
Network Manager - CINBESA
55 91 98151-4894/3184-1751</pre>
</body>
</html>