Forum Moderators: Robert Charlton & goodroi

Message Too Old, No Replies

Google ip address?

Spoofing or not...

         

dolcevita

10:48 am on Oct 16, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I've just found this in my log and i have suspicion of this is really google bot:

204.13.153.34 16/10/2005 05:06:31 Mediapartners-Google/2.1

Looking to the who is it show up:

204.13.153.34
34-153-13-204-Dedicated.Multacom.COM
Host reachable, 1807 ms. average

204.13.152.0 - 204.13.155.255

MULTACOM CORPORATION
16654 Soledad Canyon Rd #150
Canyon Country
CA
91387
United States

Network Operations Center
+1-661-977-9436
noc@multacom.com
Network Operations Center
+1-661-977-9436
noc@multacom.com

Abuse:
Abuse Department
+1-661-554-0287
abuse@multacom.com
Abuse Department
+1-661-554-0287
abuse@multacom.com

NS1.MULTACOM.COM
NS2.MULTACOM.COM

MULTA-NET1
Created: 2005-04-20
Updated: 2005-06-15
Source: whois.arin.net

I couldnt find ip address above nowhere as ip address from google on other sites.Can somone help me.Is this someone try to spoof google bot or is it really google bot?

Thanks

tedster

2:16 am on Oct 17, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Mediapartners runs the googlebot that spiders Adsense pages.

theBear

2:30 am on Oct 17, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Send that information in a email to Google. All of the media partner googlebots that I have checked have been from Google IP blocks but that means little.

dolcevita

7:03 am on Oct 17, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I know about mediapartners but there are 2-3 really impressive source that listed all ip's who belong to bots and ip above is not listed there.
One of the solution could be send mail to google and ask them but i would rather if someone can confirm or not about this ip.
Spoofing user-agent is easy and i still have my suspicious.
Actually i use only on one high traffic page of my site block script.If there are more than 2 refresh or clicks within 3 second you'll be blocked for a 300 second.
I must say that i never catch before ip address above as google ip address.Mostly and almost always googlebots or mediapartners visit my site from ip's from ranges:

66.249.64
66.249.65
66.249.66
66.249.68
66.249.69
66.249.71

B ut never from ip above.Still strange and very suspicious.

nsqlg

7:35 am on Oct 17, 2005 (gmt 0)

10+ Year Member



98,5% Spoof I guess.

cws3di

7:43 am on Oct 17, 2005 (gmt 0)

10+ Year Member



I agree with dolcevita - it seems likely to be a spoofed User Agent, since when did Google start using a shared hosting service to run its Mediapartners bot!

When you look at the webpage shown on the whois record, it seems obvious to me that they (or one of their shared hosting clients) is running the spoofed bot.

vdoyl

8:18 am on Oct 17, 2005 (gmt 0)

10+ Year Member



It is a 100% spoof

spekiehl

1:12 pm on Oct 17, 2005 (gmt 0)

10+ Year Member



Yeah, definitely a spoofer unless you were using some kind of wannabrowser.com dealio, but I doubt it. Did that host spend lots of time on your servers? Could be someone trying to get by any sort of content blocking in order to leech some pages. Otherwise, who knows.