65.24.37.57 - toto

toto? - no referrer, no ua

[misosoph]

65.24.37.57 - toto [03/Jun/2002:15:40:29 -0400] "GET /files1/file1.html HTTP/1.1" 200 1419 "-" "-"
65.24.37.57 - toto [03/Jun/2002:15:40:29 -0400] "GET /files1/file2.html HTTP/1.1" 200 5380 "-" "-"
65.24.37.57 - toto [03/Jun/2002:15:40:29 -0400] "GET /files1/file3.html HTTP/1.1" 200 12389 "-" "-"
65.24.37.57 - toto [03/Jun/2002:15:40:29 -0400] "GET /files1/file4.html HTTP/1.1" 200 2065 "-" "-"
65.24.37.57 - toto [03/Jun/2002:15:40:29 -0400] "GET /files1/file5.html HTTP/1.1" 200 6131 "-" "-"
65.24.37.57 - toto [03/Jun/2002:15:40:29 -0400] "GET /files1/file6.html HTTP/1.1" 200 1530 "-" "-"
65.24.37.57 - toto [03/Jun/2002:15:40:30 -0400] "GET /files1/file7.html HTTP/1.1" 200 12311 "-" "-"
65.24.37.57 - toto [03/Jun/2002:15:40:32 -0400] "GET /files1/ HTTP/1.1" 200 17632 "-" "-"

Hostname: dhcp065-024-037-057.columbus.rr.com (Road Runner-Central )

I've never seen a robot like this before -- toto?

[dstanovic]

misosoph,

Don't panic unless "Dorothy" starts crawling your site!

Sorry couldn't resist. Dorothy - Toto = "Wizard of OZ - "Oh well" :)

Serious: I cannot find anything on toto :(

[littleman]

It is a dhcp cable modem connection, the computer at the end of that IP is running MS IIS server. Looks like an amateur bot to me.

The files1 files2 files3 stuff makes me think that whoever it is trying to snoop you site really doesn't know what he is doing. If it keeps up contact RR.

[misosoph]

Thank you. It isn't really dogging my site: it only requested 19 files total. I'll keep an eye on it.

"Dynamic host configuration protocol (dhcp)...." This is over my head. Thank you again.

[bird]

That's not necessarily a robot.

I had to check myself, but this field in the common log file format is used to display the username a visitor used to login to your site.

[w3.org...]

authuser
The username as which the user has authenticated himself.

[misosoph]

Thank you all.

Sorry if I caused confusion -- I renamed the files from my access log "file1.html" etc. I only wanted to show that the files all came from the same sub-directory (The original file names would be meaningless to forum users), and that these files were requested less than a second apart.

If someone at work, say, found a Web page they wanted to look at later (maybe at home), they might request all the linked pages (just as a dial-up user who wanted to view pages off line might). But, otherwise, why would someone with a cable modem request more than one page at a time?

If this is not a robot, then why weren't the images that belong to these pages requested? Anyone actually looking at these pages would see that they are mostly pages with maps, and that the pages are useless without the maps.

Anyway, thank you all for explaining the "toto" thing; that was what I most wanted to know. I've been looking at my access logs for a year now, and I'd never seen it before.