[ale] page103.htm

[Randolph C. Karrh]

Sound like ip spoofing! Or AOL is using a round robin addessing again!

On Mon, 30 Apr 2001, Fulton Green wrote:

> Here's a wacky theory ... maybe your current IP addy belonged to another
> entity back in the day (however long that is)? So either
>
> 1) These are people/bots who saved the page reference by an IP addy (which
>    can happen when web servers redirect to another host ID'd only
>    numerically)
> 2) These same people/bots are referencing the page from a link that badly
>    needs to be updated
> 3) These people are in bad need of a DNS cache refresh (unlikely given the
>    AOL entries, unless that's their Webcrawler)
>
> HTH
>
> On Mon, Apr 30, 2001 at 06:49:21AM -0400, Glenn C. Lasher Jr. wrote:
> > On Sun, 29 Apr 2001, Brian J. Dowd wrote:
> >
> > > Are they coming from the same source IP? Or is the requesting IP
> > > dynamic? Are there any other requests by the same IP for existing *or*
> > > non-existing pages?
> >
> > IP's vary.  Several, but not all, are AOL.  Several also have the word
> > "cache" in the domain name.
> >
> > > (Is your IP address close to to the IPs of any of the 100+
> > > "page103.htm"s noted by Google?) :-)
> >
> > Yeah, that was my first instinct, too.  Google served up a boatload of
> > them.
> >
> > > Is the request coming at exactly the same time of day/ day of week?
> > > When the request fails is the access attempt repeated? If so how soon?
> >
> > Of the 18 entries in the log (this web server has only been up for three
> > weeks), three are repeats.  These repeats are 3 seconds, 5 seconds and 4
> > minutes after the instance they are repeating.  The ones that resolved
> > are:
> >
> > 195.188.163.152.IN-ADDR.ARPA domain name pointer cache-rg03.proxy.aol.com
> > 69.189.163.152.IN-ADDR.ARPA domain name pointer cache-rk05.proxy.aol.com
> > 71.22.133.198.IN-ADDR.ARPA domain name pointer ss06.ny.us.ibm.com
> > 131.207.193.208.IN-ADDR.ARPA domain name pointer gwa.bosch-brakes.com
> > 33.146.231.208.IN-ADDR.ARPA domain name pointer
> > 208-231-146-33.pop1.bellevue.oh.nwonline.net
> > 38.148.202.209.IN-ADDR.ARPA is a nickname for
> > 38.0/24.148.202.209.in-addr.arpa
> > 54.103.35.216.IN-ADDR.ARPA domain name pointer j4014.inktomisearch.com
> > 223.199.23.63.IN-ADDR.ARPA domain name pointer
> > 1Cust223.tnt2.redmond.wa.da.uu.net
> > 135.96.12.64.IN-ADDR.ARPA domain name pointer cache-mtc-ag02.proxy.aol.com
> > 218.223.27.64.IN-ADDR.ARPA domain name pointer cache1.pontiac.wwnet.net
> > 242.134.4.65.IN-ADDR.ARPA domain name pointer
> > c1402487-a.bllvu1.wa.home.com
> >
> >
> > > -Brian
> > >
> > > > I'm running an Apache web server.  Does anyone know why I would be getting
> > > > frequent requests (which fail, of course) for a file called /page103.htm?
> > > >
> > > > Frequent=they're not killing me, but I see it enought to know it's
> > > > happening maybe once a week.... I have my log tail-f'ed to my webserver
> > > > screen.
> > > >
> > > > --
> > > > glasher at nycap.rr.com
> > > > After 163 days, Verizon still couln't deliver Telocity DSL.
> > > >
> > > > --
> > > > To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.
> > >
> >
> > --
> > glasher at nycap.rr.com
> > After 163 days, Verizon still couln't deliver Telocity DSL.
> >
> > --
> > To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.
> --
> To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.
>

-- 
Randolph C. Karrh Jr.   "May the world work for you and not against you!"

Concepts2020.com
P.O. Box 2124                   office   843.684.3874
Savannah Ga. 31402              fax      843.784.6232

--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.