Wasn't sure what to title this thread, but here goes.
One of the websites i run is meant just for my family and so has very little visitors, most days 0, because of this its very easy for me to follow the log files for the domain, whilst checking them a week or two ago i found some strange behaviour, whereby about 30 seconds of a friend visiting a webpage on my site, another IP would then visit that same page. For instance
She visits - http://www.mydomain.com/test.htm
IP visits (20-180 seconds later) - http://www.mydomain.com/test.htm
so in the logs it will look like this (i've x'd out her IP address)
2008-11-02 02:45:10 W3SVC1637339476 GET /mail - 80 - x.x.x.x
2008-11-02 02:46:37 W3SVC1637339476 GET /mail - 80 - 150.70.84.155
She lives a long way away so i cant check her computer, but she says she has ran antivirus on it, so i would be interested to see what that ip is. It also follows her to pages that are not linked to or in any search engines, so some kind of information is being sent from her computer to the ip address before it visits the page.
I did try doing a checkup on the IP on google etc, but found nothing only that its hosted in Japan.
Any ideas?
One of the websites i run is meant just for my family and so has very little visitors, most days 0, because of this its very easy for me to follow the log files for the domain, whilst checking them a week or two ago i found some strange behaviour, whereby about 30 seconds of a friend visiting a webpage on my site, another IP would then visit that same page. For instance
She visits - http://www.mydomain.com/test.htm
IP visits (20-180 seconds later) - http://www.mydomain.com/test.htm
so in the logs it will look like this (i've x'd out her IP address)
2008-11-02 02:45:10 W3SVC1637339476 GET /mail - 80 - x.x.x.x
2008-11-02 02:46:37 W3SVC1637339476 GET /mail - 80 - 150.70.84.155
She lives a long way away so i cant check her computer, but she says she has ran antivirus on it, so i would be interested to see what that ip is. It also follows her to pages that are not linked to or in any search engines, so some kind of information is being sent from her computer to the ip address before it visits the page.
I did try doing a checkup on the IP on google etc, but found nothing only that its hosted in Japan.
Any ideas?