Monday, April 07, 2008

proxy servers 7: still two more underlying IPs

We have seen that in 2003 and 2004, 66.185.84.204 was a Roger proxy server, that forwarded traffic for Rogers customers to a variety of site (see here and here and here). Indeed, we have been able to identify the forwarded IPs of some of these:
Here is another excerpt from a visitor log from June 2003:
    Mon Jun 30 20:11:12 2003|wc09.mtnk.rnc.net.cable.rogers.com|66.185.84.204| http://www.cs.ualberta.ca/~mburo/|35416:24.192.3.174$|Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; eisa.com)
    Mon Jun 30 20:11:14 2003|wc09.mtnk.rnc.net.cable.rogers.com|66.185.84.204| http://www.cs.ualberta.ca/~mburo/publications.html|9339:24.192.3.174$|Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; eisa.com)
In this case, 66.185.84.204 is forwarding traffic for 24.192.3.164. And in another log from July of 2003, traffic is forwarded for 24.112.104.245:
    Thu Jul 10 23:52:54 2003|wc09.mtnk.rnc.net.cable.rogers.com|66.185.84.204| http://www.cs.ualberta.ca/~mburo/log.html|46319:24.112.104.245$|Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
The same IP's traffic was forwarded by the same proxy in August (here):
    Wed Aug 6 23:20:23 2003|wc09.mtnk.rnc.net.cable.rogers.com|66.185.84.204| http://www.cs.ualberta.ca/~mburo/|36325:24.112.104.245$|Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
    Wed Aug 6 23:21:39 2003|wc09.mtnk.rnc.net.cable.rogers.com|66.185.84.204| http://www.cs.ualberta.ca/~mburo/publications.html|9722:24.112.104.245$|Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)