Content Spam: Human or Not? jijikserver Pinsupport

I received this message on my site which on the surface looked like a human. Though they had grammar errors there was enough there to pass. With further analysis I believe this to be a bot.

hey hai this is ashok , i have lg optimusp768 with rooted, unlocked bootloader and also cwm , but i cant find custom roms any wheere please prepare one custom rom , or atleast one stock rom with more features

Human Characteristics:
The comment was on topic. The English, which had grammar and spelling mistakes, was passable.

Bot Characteristics:

  1. Did not come from any referrer
  2. Did not come from a search engine
  3. Did not load the whole page, js, css. The complete page did not load. Timing for the page loaded resources has a gap of 2 seconds. A server would not do this.
  4. Changes from http:/1.0 to http:/1.1, then back
  5. UA changes from one to another, then back, midway through load. This is not possible with a human

    Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
    Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0
    Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
    Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
    Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1

    31.184.238.4 [17/Jul/2018:12:23:20 GET /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/ HTTP/1.0 200 52238 http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/ Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
    31.184.238.4 [17/Jul/2018:12:23:22 GET /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/ HTTP/1.1 200 52238 - Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0
    31.184.238.4 [17/Jul/2018:12:25:02 POST /wp/wp-comments-post.php HTTP/1.0 302 - http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/ Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
    31.184.238.4 [17/Jul/2018:12:25:03 GET /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/ HTTP/1.0 200 52277 http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/#comment-156182 Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
    31.184.238.4 [17/Jul/2018:12:25:05 GET /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/ HTTP/1.0 200 52276 http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/#comment-156182 Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1

  6. Inconsistent Request headers: Most times the cookie is there, the language shows up only once.

    2018-07-17:16:23:21
    URL: /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/
    IP: 31.184.238.4
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
    Host: dontai.com
    Referer: http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/
    User-Agent: Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
    ----

    2018-07-17:16:23:22
    URL: /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/
    IP: 31.184.238.4
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.5,en;q=0.3
    Cache-Control: max-age=0
    Connection: close
    Host: dontai.com
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0
    ----

    2018-07-17:16:25:04
    URL: /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/
    IP: 31.184.238.4
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
    Cookie: comment_author_cb0be998e9e01aed907bdde556d09441=+; comment_author_email_cb0be998e9e01aed907bdde556d09441=+; comment_author_url_cb0be998e9e01aed907bdde556d09441=+
    Host: dontai.com
    Referer: http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/#comment-156182
    User-Agent: Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
    ----

    2018-07-17:16:25:05
    URL: /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/
    IP: 31.184.238.4
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
    Cookie: comment_author_cb0be998e9e01aed907bdde556d09441=+; comment_author_email_cb0be998e9e01aed907bdde556d09441=+; comment_author_url_cb0be998e9e01aed907bdde556d09441=+
    Host: dontai.com
    Referer: http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/#comment-156182
    User-Agent: Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
    ----

    2018-07-17:16:25:06
    URL: /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/
    IP: 31.184.238.4
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
    Cookie: comment_author_cb0be998e9e01aed907bdde556d09441=+; comment_author_email_cb0be998e9e01aed907bdde556d09441=+; comment_author_url_cb0be998e9e01aed907bdde556d09441=+
    Host: dontai.com
    Referer: http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/
    User-Agent: Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
    ----

  7. Blacklisted Ip range from the past

Leave a Reply

Your email address will not be published. Required fields are marked *