Hi, I found some strange record in our ISA Server Web Proxy LOG, such as below:
126.96.36.199, anonymous, Mozilla/4.0 (compatible; MSIE 4.01; Windows 95), N, 3/15/2002, 0:11:50, W3ReverseProxy, PROXYSERVER, -, www.ebay.com, -, 0, 0, 149, 0, -, -, GET, http://www.ebay.com/, -, -, 12202, -, Default rule, -
The IP(202.38...) is not private IP of our LAN user! Does this mean that some hackers have attacked at our ISA Server and have controled it?
I am not clear about these records. Any help? Thanks.