Greg, i will ki_ll you friendly .... You cant make that questions, if you want to become ccie you need a good background, access lists configuration is basic, and a post is not a chat.
The access lists uses a network or address part (22.214.171.124), and a wildcard part (255.255.254.255), dont use netmasks. What are wildcards, when there is a bit set to 1 in the wildcard, then the same bit in the network part will dont mind, it dont care what will be there in the ip packet address. But it the wildcard bit is set to 0, then the network part and ip packet address must match.
So if your wildcard have bit 24 set to 0 (x.x.254.x), and your network part bit is 0 (x.x.0.x), means than this access list will match ip address with that bit set to 0. So, will match on even third octets address as said welly. 2,4,6,8, etc.
I appreciate your opinion, By asking questions that's how I learn and become more effective in the process of becoming CCIE! While working with these devices, I was not able to see this concept neither was my counterparts. Now I was able to see that the acl is meant for even subnet at the 3rd octet access-list 1 deny 0.0.0.0 255.255.254.255
Thanks for you input.