Register

If this is your first visit, please click the Sign Up now button to begin the process of creating your account so you can begin posting on our forums! The Sign Up process will only take up about a minute of two of your time.

Results 1 to 1 of 1
  1. #1
    Junior Member
    Join Date
    May 2018
    Posts
    1
    Member #
    59003

    Strange client IP in a serie of GET

    Hello,

    Running Apache as http server, I fail to understand a serie of consecutive GET that I can find traced in the access.log.

    I get one page P.html needing J.js, C.css and I.jpg files.

    IP representing the 3 first numbers of some IPv4 address, I can find the following sequence :

    IP.2 GET P.html
    IP.7 GET J.js
    IP.3 GET C.css
    IP.12 GET I.jpg

    The last number of the IP given in this example is only in order to mean some change.
    I get other occurrences of other sequences.

    - The referer given for the first access traces some precise google search,
    - The user agent is identical for all requests and very standard.
    - The IP range is not listed in any abuseip-like list
    - I get no trace of any suspicious GETs from any client sharing the IP range.

    I would like to know what sort of client is this ?
    A bot ? A hacker disguising his IPs ? Whatever honest system sharing the load ?

  2.  


Remove Ads

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
All times are GMT -6. The time now is 10:20 PM.
Powered by vBulletin® Version 4.2.3
Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.
vBulletin Skin By: PurevB.com