It could also be some localised ads that are trying to get some resources off a server requiring authentication. I have had this on some other sites before.