AOL and revolving IP Numbers....

..don't the ALL have that?

[pendanticist]

This visitor tripped my trap overnight:

172.186.175.171 - - [19/Sep/2003:21:22:41 -0700] "GET / HTTP/1.1" 200 20690 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"

Then went on to try each of 175 files two+ more times. The abuse message to AOL was 100k.

Started - 2003:21:35:18
Ended - 2003:21:22:41
Duration - 13:XX minutes of 403s requesting a total of over 700 denials.

Guess he/she got, uh, confused as to the true meaning of 403!

Anyway, this individual's IP Number remained the same throughout the, uh, event. Past AOL'ers seemed to all have revolving IP Numbers.

Is this not always the case?

Pendanticist.

[jeremy goodrich]

Usually, AOL users will have a few IP's that come through for each user session. Eg, one IP addy will get the HTML, another the Images, etc.

But, I can't recall seeing only one IP used for the whole site, did this user try to grab images or only the HTML files?

[pendanticist]

Every file that leads to and contain images, but not the images themselves.

Pendanticist.

[cyberkat]

I noticed AOL IP numbers changing also in access logs. I have investigated with a few of my AOL buddies. And found that the AOL Broadband User's IP numbers stay consistant with the first three blocks, where as AOL dialup users are more rogue in all blocks.

[pendanticist]

Thanks cyberkat. :)

Pendanticist.