homepage Welcome to WebmasterWorld Guest from 54.167.173.250
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member
Home / Forums Index / WebmasterWorld / Website Analytics - Tracking and Logging
Forum Library, Charter, Moderators: Receptional & mademetop

Website Analytics - Tracking and Logging Forum

    
NonCategorizedHeadScratcher
lucy24




msg:4449938
 11:50 pm on May 5, 2012 (gmt 0)

Awright, where's the Inexplicable Log Entries forum? Couldn't put it in SSID because there's nothing visibly "off" about the UA:

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; MS-RTC LM 8; InfoPath.1)

nor yet about the IP:

162.93.249.nnn (belongs to Charles Schwab, of all people)

I've got this perfectly normal-looking cluster of log entries which boil down to (last bit in each case is the referer):

{day-and-hour}:48:00 /normalpage.html {watch this space}
{day-and-hour}:48:00 /piwik/piwik.js ../normalpage.html
{day-and-hour}:48:00 /fun/miststyles.css ../normalpage.html
{day-and-hour}:48:00 /sharedstyles.css ../normalpage.html
{day-and-hour}:48:00 /piwik/piwik.php?action_name={Page Title}&idsite=1 {etc.} ../normalpage.html

Everyone got that "watch this space"? These five consecutive entries are preceded by

{day-and-hour}:47:57 /normalpage.html {normal google search}
{day-and-hour}:47:57 /notify... 404 {same google search}
{day-and-hour}:47:57 /favicon.ico -
{day-and-hour}:48:00 /accepted... 404/notify...
{day-and-hour}:48:00 /verify... 404/notify...

and followed as a sort of coda by a final

{day-and-hour}:53:07 /notify... 404 {same google search}

... where the nonexistent /notify, /accepted and /verify are short for

http://www.example.com/notify-NonCategorizedNotification?{string of 54 alphanumerics}==

and similar. (My domain name.) Same string of alphanumerics each time. The "watch this space" one is the /notify version.

Looked it up and the only relevant thing I could find was a posting from late 2008 in a different forum [labs.hoffmanlabs.com]. I'm especially struck by that post's comment
these arrived from a host within a financial firm. This IP address source block seemed almost as odd, of course.

This post in turn links to another page which is also interesting. But I can't see how it would apply to me-- especially since we are now time-traveling 4 years into the past and I don't even have AdThingie :)

 

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / WebmasterWorld / Website Analytics - Tracking and Logging
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved