Monday, April 07, 2008

proxy servers 7: still two more underlying IPs

We have seen that in 2003 and 2004, was a Roger proxy server, that forwarded traffic for Rogers customers to a variety of site (see here and here and here). Indeed, we have been able to identify the forwarded IPs of some of these:
Here is another excerpt from a visitor log from June 2003:
    Mon Jun 30 20:11:12 2003||||35416:$|Mozilla/4.0 (compatible; MSIE 6.0; Windows 98;
    Mon Jun 30 20:11:14 2003||||9339:$|Mozilla/4.0 (compatible; MSIE 6.0; Windows 98;
In this case, is forwarding traffic for And in another log from July of 2003, traffic is forwarded for
    Thu Jul 10 23:52:54 2003||||46319:$|Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
The same IP's traffic was forwarded by the same proxy in August (here):
    Wed Aug 6 23:20:23 2003||||36325:$|Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
    Wed Aug 6 23:21:39 2003||||9722:$|Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)