-----BEGIN PGP SIGNED MESSAGE-----
There is a setting in MSIE that allows you to check if a particular
page has been
updated. So it may be set to check at constant intervals in order to
notify the user.
I don't recall the specifics but I'm sure you can find it if you poke
around.
My .02 cents
Cheers
> Hi,
>
> Looking through my firewall logs for yesterday and today I've
> noticed that there was one site constantly retrieving one page from
> my web server. It retreived it over 90 times in a 12 hour period.
> I've blocked all traffic from that machine (209.204.137.249) yet
> the requests continue. This leads me to belive somebody maybe
> planting and running automated scripts to cause heavy legitimate
> looking traffic.
>
> What caused me to notice it was a string of 7 retreivals in a row.
> Then I noticed all the previous retreivals searching through the
> logs on the IP address. The accesses are comming in at 2 to 5
> minute intervals.
>
>
> --
> | Bryan Andersen | [EMAIL PROTECTED] |
> | http://softail.visi.com | Buzzwords are like annoying little
> | flies that deserve to be swatted. |
> | -Bryan Andersen
> | |
- -
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.1 for non-commercial use <http://www.pgp.com>
iQEVAwUBOK2txYixNlK2edm3AQGMEgf6AqDPq4Mb/faDbz6I/E3q8K5qs46PfGB/
IUGk7mklwY/y1aIm/fhDS6PqYIhqAOEgoA8BFLfwCb5gRyL1jr9qsYKS++pqukb2
NcqPwWQArUYyTds6xZql6agYbTc6la0vmsgrtzQ7jmyhbrMpao6fH1crpn24DQU+
pTE/trNwnmBx9RyfFp89oZwl9ZBgOKBXprcPSusfWWX0C8pMg5EgomOlc3Bv+dap
jjblbq2vmj7EfxFIDtUDLMQZfRa3zInIWU+pDqu69Db8q3paZFt0jJxPZ68iTG7Z
6p8IN9rZgOq/BlhNXAv9cdoPSCwa9/82fCYuVDLtwux/2lUym09yPg==
=yvYk
-----END PGP SIGNATURE-----
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
