IP address following friends websurfing

T

Toytown

Gawd
Joined
Jan 13, 2005
Messages
996
Wasn't sure what to title this thread, but here goes.

One of the websites i run is meant just for my family and so has very little visitors, most days 0, because of this its very easy for me to follow the log files for the domain, whilst checking them a week or two ago i found some strange behaviour, whereby about 30 seconds of a friend visiting a webpage on my site, another IP would then visit that same page. For instance

She visits - http://www.mydomain.com/test.htm
IP visits (20-180 seconds later) - http://www.mydomain.com/test.htm

so in the logs it will look like this (i've x'd out her IP address)

2008-11-02 02:45:10 W3SVC1637339476 GET /mail - 80 - x.x.x.x
2008-11-02 02:46:37 W3SVC1637339476 GET /mail - 80 - 150.70.84.155

She lives a long way away so i cant check her computer, but she says she has ran antivirus on it, so i would be interested to see what that ip is. It also follows her to pages that are not linked to or in any search engines, so some kind of information is being sent from her computer to the ip address before it visits the page.

I did try doing a checkup on the IP on google etc, but found nothing only that its hosted in Japan.

Any ideas?
 
AV doesn't always catch everything, especially if it's not a good AV program. make sure she runs some other malware detection software also, like spybot or adaware. there's a few others out there too.
 
Thanks Atech, looks like it could be part of the AV package they have and hopefully nothing to worry about.
 
You must log in or register to reply here.
Back
Top