Welcome to WebmasterWorld Guest from 23.22.19.253

Forum Moderators: DixonJones & mademetop

Message Too Old, No Replies

NonCategorizedHeadScratcher

   
11:50 pm on May 5, 2012 (gmt 0)

WebmasterWorld Senior Member lucy24 is a WebmasterWorld Top Contributor of All Time Top Contributors Of The Month



Awright, where's the Inexplicable Log Entries forum? Couldn't put it in SSID because there's nothing visibly "off" about the UA:

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; MS-RTC LM 8; InfoPath.1)

nor yet about the IP:

162.93.249.nnn (belongs to Charles Schwab, of all people)

I've got this perfectly normal-looking cluster of log entries which boil down to (last bit in each case is the referer):

{day-and-hour}:48:00 /normalpage.html {watch this space}
{day-and-hour}:48:00 /piwik/piwik.js ../normalpage.html
{day-and-hour}:48:00 /fun/miststyles.css ../normalpage.html
{day-and-hour}:48:00 /sharedstyles.css ../normalpage.html
{day-and-hour}:48:00 /piwik/piwik.php?action_name={Page Title}&idsite=1 {etc.} ../normalpage.html

Everyone got that "watch this space"? These five consecutive entries are preceded by

{day-and-hour}:47:57 /normalpage.html {normal google search}
{day-and-hour}:47:57 /notify... 404 {same google search}
{day-and-hour}:47:57 /favicon.ico -
{day-and-hour}:48:00 /accepted... 404/notify...
{day-and-hour}:48:00 /verify... 404/notify...

and followed as a sort of coda by a final

{day-and-hour}:53:07 /notify... 404 {same google search}

... where the nonexistent /notify, /accepted and /verify are short for

http://www.example.com/notify-NonCategorizedNotification?{string of 54 alphanumerics}==

and similar. (My domain name.) Same string of alphanumerics each time. The "watch this space" one is the /notify version.

Looked it up and the only relevant thing I could find was a posting from late 2008 in a different forum [labs.hoffmanlabs.com]. I'm especially struck by that post's comment
these arrived from a host within a financial firm. This IP address source block seemed almost as odd, of course.

This post in turn links to another page which is also interesting. But I can't see how it would apply to me-- especially since we are now time-traveling 4 years into the past and I don't even have AdThingie :)