Security Incidents mailing list archives

Re: pao-s01.gw.epoch.net


From: "A. T. Guarnieri" <atg () STORMRIDER ORG>
Date: Fri, 10 Nov 2000 03:02:52 +0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

epoch has been caching web pages hosted by some of their downstream
customers (including customers of those customers) to serve up to
certain high-traffic requesters, mostly cable/dsl sites. We had to
complain to our upstream provider, Rhythms, to get them to take our
IP ranges off epoch's proxy servers. It took about 3 weeks of bitching
at both rhythms support and epoch directly to get this 'caching' to stop.
No one at epoch seemed very clueful that some people need the real
request info, and not just a bunch of requests from their caching server.


On Wed, 8 Nov 2000, Jay D. Dyson wrote:

On Tue, 7 Nov 2000, Sean Michael Whipkey wrote:

Does anyone have any clue what this IP address is?

pao-s01.gw.epoch.net

It has been slamming our web server with requests lately, but doesn't
seem to be actually using our site.  Right now it hits our site almost
as much as our NOCOL monitoring, which hits it every five minutes.

      Hmmm...looks like an http-proxy running Solaris 2.6 or 2.7.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.3 (GNU/Linux)
Comment: Public key at http://stormrider.org/~atg

iD8DBQE6C2VuOooTQ/bR01cRAssRAKCTOVdCKb/xvCuxnSETAgFZ/5EgrACeM0aR
JQRHu03z4wkjUVHOmwzP748=
=4A5m
-----END PGP SIGNATURE-----


Current thread: