Welcome to WebmasterWorld Guest from

Forum Moderators: DixonJones & mademetop

Message Too Old, No Replies


11:50 pm on May 5, 2012 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member lucy24 is a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month

joined:Apr 9, 2011
votes: 541

Awright, where's the Inexplicable Log Entries forum? Couldn't put it in SSID because there's nothing visibly "off" about the UA:

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E; MS-RTC LM 8; InfoPath.1)

nor yet about the IP:

162.93.249.nnn (belongs to Charles Schwab, of all people)

I've got this perfectly normal-looking cluster of log entries which boil down to (last bit in each case is the referer):

{day-and-hour}:48:00 /normalpage.html {watch this space}
{day-and-hour}:48:00 /piwik/piwik.js ../normalpage.html
{day-and-hour}:48:00 /fun/miststyles.css ../normalpage.html
{day-and-hour}:48:00 /sharedstyles.css ../normalpage.html
{day-and-hour}:48:00 /piwik/piwik.php?action_name={Page Title}&idsite=1 {etc.} ../normalpage.html

Everyone got that "watch this space"? These five consecutive entries are preceded by

{day-and-hour}:47:57 /normalpage.html {normal google search}
{day-and-hour}:47:57 /notify... 404 {same google search}
{day-and-hour}:47:57 /favicon.ico -
{day-and-hour}:48:00 /accepted... 404/notify...
{day-and-hour}:48:00 /verify... 404/notify...

and followed as a sort of coda by a final

{day-and-hour}:53:07 /notify... 404 {same google search}

... where the nonexistent /notify, /accepted and /verify are short for

http://www.example.com/notify-NonCategorizedNotification?{string of 54 alphanumerics}==

and similar. (My domain name.) Same string of alphanumerics each time. The "watch this space" one is the /notify version.

Looked it up and the only relevant thing I could find was a posting from late 2008 in a different forum [labs.hoffmanlabs.com]. I'm especially struck by that post's comment
these arrived from a host within a financial firm. This IP address source block seemed almost as odd, of course.

This post in turn links to another page which is also interesting. But I can't see how it would apply to me-- especially since we are now time-traveling 4 years into the past and I don't even have AdThingie :)

Join The Conversation

Moderators and Top Contributors

Hot Threads This Week

Featured Threads

Free SEO Tools

Hire Expert Members