This is typical of a web proxy server. The IP is the IP of the proxy,
not the client workstation where the query is generated.
Michael Mohr
UNIX Systems Administrator
Auckland University of Technology
Private Bag 92006
Auckland, NZ
Tel: (649) 917-9999, ext 8133
Fax: (649) 917-9901
>>> [EMAIL PROTECTED] 02/13/01 03:25am >>>
Hi;
sorry if this is off-topic, but I found a couple of strange requests
in one of my logfiles. It looks like a browser changing its own ID
according to the file requested. Like this:
207.241.180.157 - - [11/Feb/2001:10:08:53 -0500] "GET
/cover/fieldserv.gif HTTP/1.0" 200 698 "-" "Mozilla/3.01
(compatible;)"
207.241.180.157 - - [11/Feb/2001:10:10:35 -0500] "GET /home.css
HTTP/1.0" 200 636 "http://www.remosa-valves.com/" "Mozilla/4.0
(compatible; MSIE 5.01; Windows 95)"
and again later
198.23.26.253 - - [11/Feb/2001:11:09:05 -0500] "GET /solutions.html
HTTP/1.0" 200 9390 "-" "Mozilla/3.01 (compatible;)"
198.23.26.253 - - [11/Feb/2001:11:09:06 -0500] "GET /valves.css
HTTP/1.0" 200 2832 "-" "Mozilla/4.0 (compatible; MSIE 5.0; MSN 2.6;
Windows 98; DigExt)"
Does anybody have an explanation?
Also: is there any chance to resolve IPs like
apnc208.216.216.211.in-addr.arpa?
I'm finding them more and more often.
thanks in advance
Massimo Mezzini
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at
http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
