Welcome to WebmasterWorld Guest from

Forum Moderators: Ocean10000 & incrediBILL

Message Too Old, No Replies

Stop the presses - a legit user from an Amazon range



8:22 pm on Sep 4, 2012 (gmt 0)

10+ Year Member

Had something strange happen a few minutes ago. A legit user (filled out my bot trap form with challenge question and asked a question concerning the site's topic) visited today from an Amazon IP range:

Mozilla/5.0 (iPhone; U; CPU iPhone OS 4_2_1 like Mac OS X; en-us) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8C148 Safari/6533.18.5"
The user came in via a Google search.


1:46 pm on Sep 5, 2012 (gmt 0)

10+ Year Member


Anything in the 23.21.180.__ range with a Via: header of "Onavo" is the Onova product for iPhone and Android. Its a compression service which speeds up mobile browsing. I'm keeping a close eye on it, but for now it appears to be legit users coming through this. The X-Forwarded-For header also properly contains the real user's IP address.


7:44 pm on Sep 5, 2012 (gmt 0)

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member

I let some proxies through if they behave themselves well but block all of amazon. It may be legit but according to DNS for that full range...

"The activity you have detected originates from a dynamic hosting environment."

Which means the detected IP may well be different next time.

Featured Threads

Hot Threads This Week

Hot Threads This Month