Twitter - The Dark Side | IPA BOTS vs. HUMANS Analysis

APPENDICES, IPAs1 BOTS vs. HUMANS Analysis. You may also support this effort by acquiring a cool, full PDF version of this Study or get a paperback version of TWITTER: The Dark Side - Does Twitter's Bit.ly enables a Massive Click Fraud? by getting it here.

At this page you may find a list of IPA of the bots we detected but Bit.ly presents as humans.

Clicks or Click Fraud?

Check out animation about millions of bots clicks show at Bit.ly as "statistics"

Twitter: The Dark Side Study

Check out these Ads and Click ones of Your Interest

Twitter: The Dark Side | IPA BOTS vs. HUMANS Analysis

First row : Bot/Human # Clicks per IP IP ADDRESS REVERSE DNS

Second row : analysis process and the call explained

B 330, 79.99.6.106 , 79-99-6-106.serverhotell.net
This is a Twingly Recon Bot, first seen on 4/30/2009 8:20:00 AM, coming from Sweden

B 253, 91.121.89.155 , mojito.smartwebsearching.be

http://mojito.smartwebsearching.be/

a buse bots, scrapers, etc that usually show up as just a generic browser type as Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.5) Gecko/2009011817 Gentoo Firefox/3.0.5. therefore the Call – it’s a bot!

A strong Google connection graph:

http://www.robtex.com/dns/smartwebsearching.be.html#graph

B 148, 174.129.111.78 , ec2-174-129-111-78.compute-1.amazonaws.com

BOT PycURL/7.18.2

First Seen On: 6/12/2009 4:00:00 PM Call – it’s a bot!

B 146, 74.126.19.26 , 74.126.19.26.static.a2webhosting.com

http://www.123.net/pages/customer_care.html#technical

74.126.19.26 Twitturl’s BOT
Mozilla/5.0 (compatible; Twitturls; +http://twitturls.com) Call – it’s a bot!

B 109, 174.129.107.161 , ec2-174-129-107-161.compute-1.amazonaws.com

BOT PycURL/7.18.2

First Seen On: 6/12/2009 4:00:00 PM Call – it’s a bot!

B 80, 72.44.43.230 , ec2-72-44-43-230.compute-1.amazonaws.com

BOT LWP::Simple/5.808 – The libwww-perl collection is a set of Perl modules and its typical use is for writing simple crawlers and bots. Therefore the Call – it’s a bot!

B 71, 91.121.123.191 , ks355488.kimsufi.com

Allocated to RIPE, coming from France’s ISP kimsufi known for hosting porn a machine gun porn bots like ks2830. kimsufi.com CALL – it’s a bot!

B 52, 174.129.178.139 , ec2-174-129-178-139.compute-1.amazonaws.com

BOT PycURL/7.18.2 but not yet caught as such. Call – it’s a bot!

B 41, 89.212.78.95 , 89-212-78-95.static.t-2.net

Not yet caught as such but all 41 clicks came from Slovenia a small country in Eastern Europe; Associated with request-response.com and T-2 Ripe Team from Maribot, therefore the Call – it’s a bot!

B 40, 75.101.146.81 , ec2-75-101-146-81.compute-1.amazonaws.com

http://feedtrace.com is a service that uses a BOT Mozilla/5.0 (compatible; Feedtrace-bot/0.2; bot@feedtrace.com)

B 40, 67.23.46.234 , 67-23-46-234.static.slicehost.net

They also host (not on this IP) SmartViper a crawler. Call it’s a BOT. More insight would be good.

B 39, 77.74.49.226 , Error: No RDNS

Most likely a TESTING Bot, located in Netherlands; also uses 14 other User-Agents from the same IP Address. Call – it’s a bot.

B 32, 212.227.97.200 , s15352843.onlinehome-server.info

Unknown BOT coming from Germany that appears on many Twitter related services like Krumlr that “provides rankings, stats, tags, plus thousands of current links to browse.” Call – it’s a bot .

B 31, 67.202.56.119 , ec2-67-202-56-119.compute-1.amazonaws.com

Clicks came from the Amazon’s Elastic Compute Cloud, EC2 design customers to run their own applications. It is unlikely, given all other metrics, this is not some home-made bot. Call – it’s a bot.

B 30, 67.202.10.201 , ec2-67-202-10-201.compute-1.amazonaws.com

B 27, 75.101.205.207 , ec2-75-101-205-207.compute-1.amazonaws.com

B 26, 72.44.48.172 , ec2-72-44-48-172.compute-1.amazonaws.com

B 24, 75.101.139.240 , ec2-75-101-139-240.compute-1.amazonaws.com

B 19, 67.192.227.87 , Error: No RDNS

Came using Python-urllib/2.4 that is a standard python module for working with web sites, open GET, POST data etc., extremely unlikely to be a human. Call – it’s a bot.

? 19, 122.172.14.21 , ABTS-KK-dynamic-021.14.172.122.airtelbroadband.in

Difficult to call.

B 17, 174.129.117.163 , ec2-174-129-117-163.compute-1.amazonaws.com

B 15, 75.101.250.90 , ec2-75-101-250-90.compute-1.amazonaws.com

B 15, 66.249.67.133 , crawl-66-249-67-133.googlebot.com

GOOGLEBOT

B 13, 75.101.204.77 , ec2-75-101-204-77.compute-1.amazonaws.com

B 13, 72.44.57.45 , ec2-72-44-57-45.compute-1.amazonaws.com

B 12, 67.207.201.152 , 152.201.207.67.svwh.net

User-Agent Mozilla/5.0 (compatible; mxbot/1.0; +http://www.chainn.com/mxbot.html) coming from http://www.chainn.com/ that is a service “The World’s Gone Social” therefore a Call – it’s a bot.

B 12, 67.207.201.151 , 151.201.207.67.svwh.net

B 11, 84.19.190.38 , ns.km33511.keymachine.de

fastkeyword dot biz service is a Russian keyword collection service. Call – it’s a bot.

B 10, 75.101.237.77 , ec2-75-101-237-77.compute-1.amazonaws.com

B 10, 67.207.201.150 , chainn-mail.com

B 9, 174.129.175.212 , ec2-174-129-175-212.compute-1.amazonaws.com

B 8, 82.168.40.164 , 82-168-40-164.ip.telfort.nl

Most likely a TESTING Bot, located in Netherlands; same IP is being used by a well-known Java Bot; Java/1.6.0_07. Call – it’s a bot.

B 7, 75.101.233.192 , ec2-75-101-233-192.compute-1.amazonaws.com

B 7, 174.129.218.179 , ec2-174-129-218-179.compute-1.amazonaws.com

B 6, 75.101.178.66 , ec2-75-101-178-66.compute-1.amazonaws.com

B 6, 70.32.91.95 , danzarrella.com

Crawler that uses Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1 and does not support compression. It is a newly minted service by Dan Zarrella, TweetPsych, that uses two linguistic analysis algorithms (RID and LIWC) to build a psychological profile of a person based on the content of their tweets. Call – it’s a bot.

B 6, 67.207.201.140 , 140.201.207.67.svwh.net

B 6, 216.112.111.231 , 216.112.111.231.ptr.us.xo.net

Unknown BOT coming from the US that appears on many Twitter related services like Krumlr that “provides rankings, stats, tags, plus thousands of current links to browse.” And “visits” the same Tweet several times in a second, unlikely behavior for a human. Call – it’s a bot .

B 6, 190.59.34.14 , cuscon105450.tstt.net.tt

This is a known bot, Java/1.6.0_14, first recorded 6/10/2009 2:19:00 AM So Call – it’s a bot has already been made.

B 6, 142.166.3.122 , Error: No RDNS

142.166.3.122 presents a Flash-based login screen when accessed via Firefox. However, the browser’s status bar gives a very helpful hint: Read login.radian6.com. So we know have a name to go by. Indeed, login.radian6.com resolves to that IP is a company focused on building the complete monitoring and analysis solution for PR and advertising professionals so they can be the experts in social media. So they crawl blogs and index what everybody is saying about some company or another. Call – it’s a bot.

This find courtesy of http://hackd.net/2007/11/05/what-is-radianrss/

B 5, 94.23.51.159 , rps6637.ovh.net

Unverified bot – firstly recognized as Rank Crawler’s bot but it seems it is a separate ovh.net’s crawler. Call – it’s a bot.

B 5, 75.101.232.11 , ec2-75-101-232-11.compute-1.amazonaws.com

B 5, 64.233.172.6 , Error: No RDNS
GOOGLEBOT

B 5, 216.24.142.47 , flx1-ppp47.lvdi.net

http://me.dium.com redirect to http://www.oneriot.com/ “real time search for real time web” therefore a Call – it’s a bot.

B 5, 174.129.222.132 , ec2-174-129-222-132.compute-1.amazonaws.com

B 4, 93.32.52.204 , 93-32-52-204.ip32.fastwebnet.it

not an easy call but that IP address was listed at Spamhaus PBL as spam. Therefore the call, a bot.

B 4, 91.121.85.14 , rossia.semiocast.net

According to the Project Honey Pot a behavior from the IP address is consistent with that of a comment spammer and could even be Googlebot. Call – it’s a bot.
This find courtesy of : http://www.projecthoneypot.org/ip_91.121.85.162

B 4, 67.23.46.213 , 67-23-46-213.static.slicehost.net

They host (not on this IP) SmartViper a crawler. Call it’s a BOT. More insight would be good.

B 4, 216.24.142.46 , flx1-ppp46.lvdi.net

http://me.dium.com redirect to http://www.oneriot.com/ “real time search for real time web” therefore a Call – it’s a bot.

B 4, 216.129.119.81 , ramp2b.cuil.com

Came from http://www.cuil.com/info/ - The “World’s biggest search engine” therefore it is a crawler. Call – it’s a bot.

? 4, 216.112.111.232 , 216.112.111.232.ptr.us.xo.net
Difficult to call.

B 4, 174.143.235.139 , 174-143-235-139.slicehost.net

They also host (not on this IP) SmartViper a crawler. Call it’s a BOT. More insight would be good.

B 4, 174.129.214.250 , ec2-174-129-214-250.compute-1.amazonaws.com

B 3, 88.211.15.166 , Error: No RDNS

Unknown BOT coming from GB that appears on many Twitter related services like Krumlr that “provides rankings, stats, tags, plus thousands of current links to browse.” Call – it’s a bot .

B 3, 216.24.142.45 , flx1-ppp45.lvdi.net

This IP is associated with http://me.dium.com redirect to http://www.oneriot.com/ “real time search for real time web” therefore a Call – it’s a bot.

B 3, 216.24.131.119 , 216-24-131-119.viawest.net

This IP is associated with http://me.dium.com redirect to http://www.oneriot.com/ “real time search for real time web” therefore a Call – it’s a bot.

3, 193.47.80.45 , crawl09.exabot.com

This IP is associated with http://www.exabot.com/go/robot) that redirects to Exalead a company “founded by search engine pioneers” therefore a Call – it’s a bot.

H 3, 189.220.21.66 , Error: No RDNS

This is us – our three visits

B 3, 174.143.236.111 , 174-143-236-111.static.slicehost.net

They also host (not on this IP) SmartViper a crawler. Call it’s a BOT. More insight would be good.

B 2, 98.129.76.120 , dev1.mixx.com

Mixx.com is a service that say it is your link to the web content that really matters and these links were posted by http://www.mixx.com/users/twittersubmitter which presents itself as human user, a 14 years old at Mixx and states "In all seriousness, I am the Tweetmixx bird, I am all things Tweetmixx". Given it constantly submites links, many per minute, the Call is clear – it’s a bot.

B 2, 98.129.76.119 , db4.mixx.com

B 2, 91.121.53.183 , bloodymary.whatever-company.com

Coming from Roubaix, France this IP was seen using proxy honey pot therefore it might be just a harmless crawler but the Call is clear – it’s a bot.

B 2, 89.151.84.34 , kite.favsys.net

Coming from Poland, User-Agent Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.0.6) Gecko/2009011913 Firefox/3.0.6 TweetmemeBot. Call is clear – it’s a bot.

B 2, 89.151.116.51 , coot.favsys.net

Coming from Poland, User-Agent Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.0.6) Gecko/2009011913 Firefox/3.0.6 TweetmemeBot. Call is clear – it’s a bot.

B 2, 84.17.129.60 , 60.cust-3.waldc.net

This IP comes from notorious Villers-le-bouillet in Belgium where mojito is located, using Linux but on 640x480 resolution, ie. the Call is – it’s a bot.

B 2, 83.149.198.173 , noname.ispras.ru

Most likely a Russian harmless (so far) bot coming from Moscow; it’s has been noted at proxy’s honey pot. Call is – it’s a bot.

B 2, 82.80.129.209 , bzq-82-80-129-209.dsl.bezeqint.net

Tough call – this IP comes from Israel and is never been registered as a bot. However, it points to some web directories so Call is – it’s a bot.

B 2, 75.101.226.74 , ec2-75-101-226-74.compute-1.amazonaws.com

B 2, 75.101.159.100 , ec2-75-101-159-100.compute-1.amazonaws.com

H 2, 74.183.205.72 , adsl-074-183-205-072.sip.clt.bellsouth.net

A nice human Twitter user coming from Charlotte, NC

B 2, 70.37.69.221 , Error: No RDNS

Microsoft. With so many bots running from there, a tough Call – it’s a bot.

H 2, 67.220.192.206 , 67-220-192-206.hosted.static.webnx.com

A nice human Twitter user coming from Los Angeles, CA

H 2, 67.218.99.195 , Error: No RDNS

This IP comes from Palo Alto, CA and raised a red flag but this is a human, interested in Linkedit and so many other things.

B 2, 66.219.58.34 , net66-219-58-34.static-customer.corenap.com

This IP is associated with MetaData Lab and is its Mlbot. Call – it’s a bot.

B 2, 64.62.134.170 , Error: No RDNS

This IP had no DNS data and is not known bot BUT it belongs to the Viral Heat http://www.viralheat.com a monitoring service. Call – it’s a bot.

B 2, 209.20.88.55 , 209-20-88-55.slicehost.net

This IP belongs to Mighty Brand, a service that “is listening” the Net for you. Therefore, a Call is – it’s a bot.

B 2, 208.74.66.43 , butterfly.topsy.com
Topsy is designed to mine the collective signal from the social web in real-time. To measure the relative importance of each search result, Topsy examines the links being cited, the description of these links and the influence of each person citing a link. Topsy augments traditional search engines by finding interesting and relevant information that people are talking about. If other people are discussing it, Topsy thinks you might find it interesting and relevant too. Call – it’s a bot. A Twitter bot.

B 2, 208.109.21.49 , ip-208-109-21-49.ip.secureserver.net

This IP belongs to GoDaddy, ergo a Call – it’s a bot

H 2, 174.133.61.66 , 42.3d.85ae.static.theplanet.com

A human from Houston, Texas

2, 174.129.91.213 , ec2-174-129-91-213.compute-1.amazonaws.com

B 2, 174.129.89.199 , ec2-174-129-89-199.compute-1.amazonaws.com

B 2, 174.129.226.52 , ec2-174-129-226-52.compute-1.amazonaws.com

B 2, 174.129.2.195 , ec2-174-129-2-195.compute-1.amazonaws.com

B 2, 174.129.197.181 , ec2-174-129-197-181.compute-1.amazonaws.com

B 2, 174.129.193.67 , ec2-174-129-193-67.compute-1.amazonaws.com

B 2, 174.120.9.66 , montecarlo.websitewelcome.com

This IP might not be a bot but belongs to a compromised websites and is blocked with: Google Diagnostic Page, WOT Score Card, hpHosts listing MalwareDomainList MDL listing and ZeuS Tracker Zeus Tracker listing and we call it a Malicious BOT.

B 2, 173.45.243.151 , mail.paranker.com
This IP does not serve for mail servers, domains on nothing similarly human and uses User-Agent chirplinks_res/1.0 therefore a Call – it’s a bot.

B 2, 128.121.156.53 , fbx2.83degrees.com

At first blush it seems like a nice human from Englewood, Colorado that most likely works for / with Greenpeace. BUT it behaving on-line and browsing patterns looks more like crawling patterns; a call – it’s a bot; it also generates some duplicate clicks when coming from Powertwitter so it raises a flag; perhaps Powertwitter has a bug? More info welcomed. 100% accurate call not possible and we propose to count it as a bot.

H 1, 98.228.180.249 , c-98-228-180-249.hsd1.il.comcast.net

A nice human from Deklab, Illinois.

H 1, 98.203.140.223 , c-98-203-140-223.hsd1.wa.comcast.net
Most likely a nice human from Seattle, Washington

B 1, 91.199.104.3 , 3.bitdefender.com
This IP comes from the city of Nadia Comaneci and Ilie Ceausescu, Bucharest in Romania and belong to BitDefender. An antivirus & Antispyware software producer. It could be a human but was seen at least one “honey pot” ergo the Call is – it’s a bot.

H 1, 90.194.1.177 , 5ac201b1.bb.sky.com

This is most likely a nice human from Great Britain.

H 1, 75.85.66.83 , cpe-75-85-66-83.socal.res.rr.com

Most likely a nice human from Chino HIlls, California.

B 1, 75.101.196.254 , ec2-75-101-196-254.compute-1.amazonaws.com

H 1, 74.208.125.5 , u15330034.onlinehome-server.com

Most likely a nice human from Wayne, Pennsylvania.

H 1, 70.138.81.114 , 70-138-81-114.lightspeed.hstntx.sbcglobal.net

Most likely a nice human from Houston, Texas.

H 1, 68.39.59.65 , c-68-39-59-65.hsd1.nj.comcast.net

Most likely a very nice human from Brick, New Jersey.

H 1, 67.207.201.164 , 164.201.207.67.svwh.net

Most likely a nice human from San Jose, California.

B 1, 67.202.36.174 , ec2-67-202-36-174.compute-1.amazonaws.com

H 1, 66.130.26.240 , modemcable240.26-130-66.mc.videotron.ca

Most likely a nice human, our neighbor from Canada.

H 1, 65.78.114.185 , 65-78-114-185.c3-0.tlg-ubr1.atw-

tlg.pa.cable.rcn.com

Most likely a nice human from Allentown, Pennsylvania.

B 1, 220.181.7.35 , baiduspider-220-181-7-35.crawl.baidu.com

China’s biggest SE; Baidu. Call – it’s a bot.

B 1, 220.181.7.26 , baiduspider-220-181-7-26.crawl.baidu.com

China’s biggest SE; Baidu. Call – it’s a bot.

B 1, 220.181.7.22 , baiduspider-220-181-7-22.crawl.baidu.com

China’s biggest SE; Baidu. Call – it’s a bot.

B 1, 208.54.14.21 , m150e36d0.tmodns.net

Most likely an EMAIL SPAM BOT. It uses name "Leigh Waddell" but e-mail address goes with another name LynetteflagstoneCastle@newlincrea.com with the Subject: Find the best replica Rolex, Jewelry etc. Call – it’s a bot.

B 1, 207.189.121.57 , Error: No RDNS

This IP comes from User-Agent that is IE4 – a version no human is using anymore. It has been recorded at least one honey pot ergo the Call – it’s a bot.

H 1, 206.53.157.39 , Error: No RDNS

Most likely a human using BlackBarry

H 1, 119.237.149.159 , n119237149159.netvigator.com
Most likely a nice human from Hong Kong.

H 1 98.204.19.177, c-98-204-19-177.hsd1.va.comcast.net

This is most likely a nice human from Woodbridge, Virginia.

H 1 96.232.5.213, pool-96-232-5-213.nycmny.east.verizon.net

This is most likely a nice human from Flushing, New York.

H 1 96.228.64.233, pool-96-228-64-233.hstntx.fios.verizon.net

This is most likely a nice human from League City, Texas.

B 1 93.103.16.118, 93-103-16-118.link.t-2.net

Not yet caught as a bot, but this IPA is from Slovenia a small country in Eastern Europe; Associated T-2 Ripe Team from Maribor, that uses various bots to crawl the Internet and was seen using at least one honey pot, therefore the Call – it’s a bot!

H 1 89.243.35.137, 000.000.000.000

This is most likely a nice human from Great Britain.

B 1 89.151.84.35, raven.favsys.net

Coming from Poland, User-Agent Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.0.6) Gecko/2009011913 Firefox/3.0.6 TweetmemeBot. Call is clear – it’s a bot.

B 1 86.125.22.162, static-86-125-22-162.rdsnet.ro

This IP comes from the city of Nadia Comaneci and Ilie Ceausescu, Bucharest in Romania and is not clear at the first glance. Deeper research has shown that IPA is not associated with any domain names, it is not a mail server but it tried to hack Darren Popham’s website. C all is – it’s a bot.

This find courtesy of : http://www.darrenpopham.com/?p=321

H 1 84.1.59.153, dsl54013B99.pool.t-online.hu

This might be a human from Hungary.

B 1 82.80.129.33, bzq-82-80-129-33.dsl.bezeqint.net

This IPA came from Israel and has almost gotten away. No data about it but that IPA’s used for Direct -to- MX mailing" that refers to a method of e- mail transmission commonly employed by spammers and is being blocked by Spamhaus and Sorbs therefore the Call – it’s a Spambot.

H 1 76.213.250.242, adsl-76-213-250-242.dsl.lsan03.sbcglobal.net

This is most likely a nice human from Los Angeles, CA.

H 1 75.17.95.30, 75-17-95-30.lightspeed.hstntx.sbcglobal.net

This is most likely a nice human from Friendswood, Texas.

B 1 74.6.146.210, iy13.search.sk1.yahoo.com

This definitively looks like a Yahoo spider. Call – it’s a bot.

? 1 74.3.208.148, 74.3.208.148.reverse.gogrid.com

No info whatsoever. No User-Agent, no geo info, nothing…

? 1 74.3.208.147, 74.3.208.147.reverse.gogrid.com

No info whatsoever. No User-Agent, no geo info, nothing…

H 1 72.197.215.172, ip72-197-215-172.sd.sd.cox.net

This is most likely a nice human from Poway, CA.

H 1 72.167.183.24, p3slh219.shr.phx3.secureserver.net

This is most likely a nice human from Scottsdale, Arizona.

B 1 71.41.201.38, rrcs-71-41-201-38.sw.biz.rr.com

This IP is associated with MetaData Lab and is its Mlbot. Call – it’s a bot.

B 1 70.37.13.98, 000.000.000.000

This most likely is a Microsoft spider. Call – it’s a bot.

H 1 70.107.89.242, pool-70-107-89-242.ny325.east.verizon.net

This is most likely a human from New York, NY.

H 1 70.103.135.83, 000.000.000.000

This is most likely a human from Kuna, Idaho.

H 1 69.121.254.13, ool-4579fe0d.dyn.optonline.net

This is most likely a human from Bronx, NY.

B 1 67.218.116.134, crawl-9c.cuil.com

Came from http://www.cuil.com/info/ - The “World’s biggest search engine” therefore it is a crawler. Call – it’s a bot.

H 1 66.92.152.178, tpmserver.talentpaymaster.com

This is most likely a human from Gaithersburg, Maryland

B 1 66.249.71.174, crawl-66-249-71-174.googlebot.com

GOOGLEBOT

B 1 66.235.112.5, tn-fw.ask.com

Ask Jeeves / Teoma crawler, thus the Call is clear – it’s a bot.

H 1 66.229.229.66, c-66-229-229-66.hsd1.fl.comcast.net

This is most likely a human from Fort Lauderdale, Florida

B 1 65.55.51.39, msnbot-65-55-51-39.msn.com

A MSNBOT. Call – it’s a bot.

B 1 65.55.207.78, msnbot-65-55-207-78.search.msn.com

A Microsoft / Bing spider. Call – it’s a bot.

B 1 62.101.105.46, 62-101-105-46.fastres.net

This IPA came with User-Agent Jakarta Commons-HttpClient/3.1 and most definitively deserves a Call – it’s a bot.

B 1 38.101.216.130, 000.000.000.000

This IPA came using Python-urllib/2.4 that is a standard python module for working with web sites, open GET, POST data etc., extremely unlikely to be a human. Call – it’s a bot.

H 1 24.237.27.99, 99-27-237-24.gci.net

Was that Sarah Palin visting us from Fairbanks, Alaska? Maybe not but for sure this is a nice human visitor.

H 1 24.147.69.254, c-24-147-69-254.hsd1.ma.comcast.net

This is most likely a human from Boston, Massachusetts.

B 1 220.181.7.54, baiduspider-220-181-7-54.crawl.baidu.com

China’s biggest SE; Baidu and its spider. Call – it’s a bot.

B 1 220.181.7.37, baiduspider-220-181-7-37.crawl.baidu.com

China’s biggest SE; Baidu and its spider. Call – it’s a bot.

B 1 212.143.95.199, 000.000.000.000

This IPA came from Israel and had not been detected as a bot so far. However its browsing patterns –212.143.95.199 visited http://www.mass.gov/ more times than Yahoo! and AskJeeves’s crawlers therefore the Call – it’s a bot!

H 1 209.6.15.222, 209-6-15-222.c3-0.smr-ubr1.sbo-smr.ma.cable.rcn.com

This is most likely a human from Somerville, Massachusetts.

H 1 209.172.34.43, ip-209-172-34-43.static.privatedns.com

This is most likely a human from Canada.

B 1 208.80.195.57, static-208-80-195-57.as13448.com

Not yet caught as a bot, but this IPA was seen using at least one honey pot, therefore the Call – it’s a bot!

B 1 208.80.193.57, static-208-80-193-57.as13448.com

Not yet caught as a bot, but this IPA was seen using at least one honey pot, therefore the Call – it’s a bot!

B 1 208.74.66.60, 000.000.000.000

Not yet caught as a bot, but this IPA was seen using at least one honey pot, therefore the Call – it’s a bot!

B 1 196.40.21.139, 000.000.000.000

This IPA came from San José, Costa Rica. Our friends form the Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server and dictionary attacker. Clear Call – it’s a bot!

H 1 190.59.34.166, cuscon105602.tstt.net.tt

This IPA came from Trinidad and Tobago and while it might or might not be a bot we like the name and call it a Honorary Hybrid and count as a human.

H 1 174.143.213.49, 174-143-213-49.static.cloud-ips.com

This is most likely a human from San Antonio, Texas.

H 1 174.143.183.119, 174-143-183-119.static.cloud-ips.com

This is most likely a human from San Antonio, Texas.

B 1 174.129.233.224, ec2-174-129-233-224.compute-1.amazonaws.com