Help with an IP

[carfac]

Hi:

Just noticed 62.23.44.3 hitting my site hard. I ran a "Ripe" on it, but cannot tell too much from that. Seems to act like a human, but 1200 hits so far today seems like a lot for a person. Thought it might be an IP a lot of users run through or something... or a proxy.

Any ideas?

dave

[littleman]

Looks like the IP is curently unreachable on any port.
host.3.44.23.62.rev.coltfrance.com

Whois coltfrance.com
Administrative Contact, Technical Contact:
COLT TELECOM (IH87-ORG) [e-mail]
COLT TELECOM
25 RUE DE CHAZELLES
Paris, FR 75017
FR
[phone]
Fax- [phone]

If you want to complain I would start by getting the contact info from their www site -> [colt.net....]

[carfac]

littleman:

Thanks- do you think it is a person, or does that IP represent a port for a lot of users? (I am probably not using the right words... I hope you know what I mean...)

dave

[littleman]

Dave, I really can't tell from this vantage point. Your logs will reveal a lot. Things to look for are:
Did the UA changes look like normal traffic? Did the UA click around a few times before fading away? What about the clicking pattern, seem human?
Where the images called?
Other external files (js, css) get called in a normal pattern?

[shady]

There are programs about which will download an entire site to your hard drive. If it looks its run through all your links, it could be one of those.

[carfac]

Thanks all!

dave