It could also be, depending on the content of the page, that someone has
set up a program to check for updates to that page?.... or at an
offchance that maybe there is a meta refresh [client pull] header on
that page, and that someone has left their browser pointing at it. Do
you have a record of the agent string, referer string, or any idea why
someone may want to grab content from that page on your site?
"Michael E. Cummins" wrote:
>
> This may be related, or it may be absurd - but there are several programs
> out there that help to test internet connectivity, measuring both speed and
> reliability. Many of these programs allow you to set up custom URL's at
> scheduled intervals, and the servers can get either pinged or have a page
> retrieved.
>
> Mayhaps you are a recipient.
>
> I would be curious to see what other people think, and hope people copy back
> to the list as well. I have noticed an abundance of questions asked with
> people replying directly to the person and not the list. Such has been the
> case in the few questions I have asked myself. I learn a lot by "lurking"
> here... Please! Post more replies back to the list!
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of Bryan Andersen
> > Sent: Thursday, February 10, 2000 1:46 PM
> > To: firewalls
> > Subject: Repeated WEB traffic
> >
> >
> > Hi,
> >
> > Looking through my firewall logs for yesterday and today I've noticed
> > that there was one site constantly retreiving one page from my web
> > server. It retreived it over 90 times in a 12 hour period. I've
> > blocked all traffic from that machine (209.204.137.249) yet the
> > requests continue. This leads me to belive somebody maybe planting
> > and running automated scripts to cause heavy legitimate looking traffic.
> >
> > What caused me to notice it was a string of 7 retreivals in a row. Then
> > I noticed all the previous retreivals searching through the logs on the
> > IP address. The accesses are comming in at 2 to 5 minute intervals.
--
Dorian Moore is property of Kleber Design Ltd. If found please contact Kleber
by phone on +44 207 581 1362 or visit http://www.kleber.net for further details.
You really shouldn't listen to anything he says... as it may just be an opinion
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
