Forum Moderators: DixonJones

Message Too Old, No Replies

The same bot from 3 different computers?

Visited by a bot with three different ips, from speakeasy, RCN, and Comcast

         

rfrick

6:15 pm on Mar 22, 2005 (gmt 0)

10+ Year Member



Okay, somebody explain me this. (I am new to looking at raw logs.) I get a visit from a robot. The ip traces to Speakeasy. All of a sudden the ip changes to something completely different, traceable to RCN Corp.

I can tell it's the same robot visit -- there is no time delay, the id is the same and the pattern of requesting HEAD and then GET is very distinctive. This is the transition:

64.81.225.195 - - [17/Mar/2005:21:20:28 -0800] "GET /contact.htm HTTP/1.1" 206 3703 "-" "Mozilla/4.7 [en] (WinNT; U)"
24.148.30.184 - - [17/Mar/2005:21:20:34 -0800] "HEAD /clubs/local.htm HTTP/1.1" 206 0 "-" "Mozilla/4.7 [en] (WinNT; U)"

Then there is a third abrupt change of ip, this ip traceable to ComCast Cable Communication. This visit quickly slides into requesting all HEADs, but it's the same id ("Mozilla/4.7 [en] (WinNT; U)").

Bob

rfrick

11:47 am on Mar 23, 2005 (gmt 0)

10+ Year Member



Sorry, I think I was in a fog. Obviously, some bot is just using three (or more) different ISPs. Why, I don't know -- the bot otherwise makes no effort to pass the Turing test.

Bob