Welcome to WebmasterWorld Guest from 54.80.185.137

Forum Moderators: Ocean10000 & incrediBILL & keyplyr

Message Too Old, No Replies

Distributed Internet Measurements and Simulations Headquarters

     
6:50 pm on May 26, 2015 (gmt 0)

Senior Member

WebmasterWorld Senior Member aristotle is a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month

joined:Aug 4, 2008
posts:3356
votes: 261


I've been seeing visits to one of my sites from Parklawn Computer Center DIMES HQ (Distributed Internet Measurements and Simulations Headquarters) (Rockville, MD). I've been seeing requests at least once a day for about a week. They come from slightly different IPs. Here is the Latest Visitors entry for a request earlier today:
Host: 150.148.14.37
/
Http Code: 200 Date: May 26 10:39:09 Http Version: HTTP/1.1 Size in Bytes: 20526
Referer: -
Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)

Does anyone know what this is about? Should I block the IPs individually?
8:02 am on June 1, 2015 (gmt 0)

Senior Member

WebmasterWorld Senior Member wilderness is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Nov 11, 2001
posts:5485
votes: 3


"ends with" Trident across multiple versions has been pests from numerous IP's.
6:11 pm on June 1, 2015 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Nov 5, 2005
posts: 2038
votes: 1


aristotle: That IP maps to "fda-gw-wo-03.fda.gov". Perhaps you have a fan in the FDA?

wilderness: Do you block UAs that end with Trident? A la:

RewriteCond %{HTTP_USER_AGENT} ^Mozilla.*Trident/5\.0\)$ [NC]
10:38 pm on June 1, 2015 (gmt 0)

Administrator from US 

WebmasterWorld Administrator not2easy is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Dec 27, 2006
posts:3678
votes: 205


(even more OT) How about those with Two Trident/5.0s at the end? From MSNs Media-bot range:
65.55.212.77 - - [31/May/2015:02:59:01 -0500] "GET /private-diectory/private/nunya-bizness/captcha/captcha.js?ver=1.0 HTTP/1.1" 403 - "http://example.com/some-unvisited-page/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; Trident/5.0)"

(bold = edited but descriptive)
11:19 pm on June 1, 2015 (gmt 0)

Senior Member

WebmasterWorld Senior Member aristotle is a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month

joined:Aug 4, 2008
posts:3356
votes: 261


Well i don't understand how these requests can come from a .gov website, if that's what's happening. It looks like they're coming from Parklawn Computer Center DIMES HQ (Distributed Internet Measurements and Simulations Headquarters) (Rockville, MD) .
12:18 am on June 2, 2015 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member lucy24 is a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month

joined:Apr 9, 2011
posts:14602
votes: 596


i don't understand how these requests can come from a .gov website

Why not? Any large institution-- government, school, corporation-- will have a block of IP addresses. Some of those will be used for incoming traffic (the site's visible website), others for outgoing (browsing from computers that belong to the institution).

All the (human) contact names associated with the IP are "FDA suchandsuch". Look up the name "Parklawn Computer Center" and you will learn more.

:: wandering off to find out why in the world the Hathi Trust has anything whatsoever to say about them ::
1:06 am on June 2, 2015 (gmt 0)

Moderator This Forum from US 

WebmasterWorld Administrator keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:11112
votes: 662


I wouldn't block UAs that end with trident any version. You'll be blocking bots that might benefit your site.

This knee-jerk reaction to block everything that looks new is an obtuse tactic nowadays. It may have worked to a limited degree a few years ago but not with all the apps and platforms of late. It's really necessary to research each and every one to determine whether it can (or will be in the future) a positive actor that brings benefit to your site.
8:22 am on June 2, 2015 (gmt 0)

Junior Member

Top Contributors Of The Month

joined:Jan 26, 2014
posts:197
votes: 0


It's really necessary to research each and every one to determine whether it can (or will be in the future) a positive actor that brings benefit to your site.

Or not. My pet monster is not known for doing background checks, and showing it your ID will not materially affect whether or not it decides to eat you... It is however a very shrewd judge, and if it smells oil on your robot, it will later be picking metal shards from between its teeth.
8:47 am on June 2, 2015 (gmt 0)

Moderator This Forum from US 

WebmasterWorld Administrator keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:11112
votes: 662


Or not. My pet monster is not known for doing background checks, and showing it your ID will not materially affect whether or not it decides to eat you... It is however a very shrewd judge, and if it smells oil on your robot, it will later be picking metal shards from between its teeth.

It's best to post only when sober :)
9:03 am on June 2, 2015 (gmt 0)

Junior Member

Top Contributors Of The Month

joined:Jan 26, 2014
posts:197
votes: 0


You clearly haven't met my pet monster. ;) Seriously though, there are other approaches than classifying your visitors by where they're from. You often make it sound like there's no alternative.
9:53 am on June 2, 2015 (gmt 0)

Moderator This Forum from US 

WebmasterWorld Administrator keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:11112
votes: 662


there are other approaches than classifying your visitors by where they're from. You often make it sound like there's no alternative.

Quite the opposite. I use many factors to "classify" visitors, only one being IP range. You seem to have a misunderstanding about this. No problem, YMMV.