Bizzare Patterns - A New Bot?

63.127.106.243 - Can anyone identify this ip?

[digitalgirl]

Hi,

I see this running through my site, but oddly it is grabbing the same pages over and over and over. Although it is fast, due to the repetition the stats are very very long.

What could this be? Should I be worried? Sorry, may sound silly :-)

I guess I am trying to figure out if this is a bot and if this pattern (getting the same pages over and over 5-6 min long) is usual.

Thank ya'll :o)

DGirl

[littleman]

I wouldn't call it usual. What was it's user agent? It actually sounds like it could be a browser caught in a loop. Some builds of Mozilla have a bug that could cause this.

The class C traces back to interactive-core.com -> It's ip is 63.127.106.115.
[interactivecore.com...] - they have some sites hosted on the lower and mid point IPs of the class C on a NetBSD 1.3.x machine, but then it goes dead at .145.

[digitalgirl]

"GET / HTTP/1.0" 200 10412 "-" "Mozilla/4.7 [en] (Win98; U)

This is what I see. Is that helpful?

Thanks :)

DGirl

[circuitjump]

It looks like it's a browser.
Netscape to be specific on a Windows 98 machine.

I'm still new to this UA stuff but I think that thats what it is.

[digitalgirl]

Thank you kindly :) I am new at this as well, but this is a great forum so I learn everyday.

Dgirl ;)