I received this message on my site which on the surface looked like a human. Though they had grammar errors there was enough there to pass. With further analysis I believe this to be a bot.
hey hai this is ashok , i have lg optimusp768 with rooted, unlocked bootloader and also cwm , but i cant find custom roms any wheere please prepare one custom rom , or atleast one stock rom with more features
Human Characteristics:
The comment was on topic. The English, which had grammar and spelling mistakes, was passable.
Bot Characteristics:
- Did not come from any referrer
- Did not come from a search engine
- Did not load the whole page, js, css. The complete page did not load. Timing for the page loaded resources has a gap of 2 seconds. A server would not do this.
- Changes from http:/1.0 to http:/1.1, then back
- UA changes from one to another, then back, midway through load. This is not possible with a human
Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0
Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.131.184.238.4 [17/Jul/2018:12:23:20 GET /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/ HTTP/1.0 200 52238 http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/ Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
31.184.238.4 [17/Jul/2018:12:23:22 GET /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/ HTTP/1.1 200 52238 - Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0
31.184.238.4 [17/Jul/2018:12:25:02 POST /wp/wp-comments-post.php HTTP/1.0 302 - http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/ Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
31.184.238.4 [17/Jul/2018:12:25:03 GET /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/ HTTP/1.0 200 52277 http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/#comment-156182 Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
31.184.238.4 [17/Jul/2018:12:25:05 GET /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/ HTTP/1.0 200 52276 http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/#comment-156182 Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1 - Inconsistent Request headers: Most times the cookie is there, the language shows up only once.
2018-07-17:16:23:21
URL: /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/
IP: 31.184.238.4
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Host: dontai.com
Referer: http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/
User-Agent: Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
----2018-07-17:16:23:22
URL: /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/
IP: 31.184.238.4
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.5,en;q=0.3
Cache-Control: max-age=0
Connection: close
Host: dontai.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0
----2018-07-17:16:25:04
URL: /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/
IP: 31.184.238.4
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Cookie: comment_author_cb0be998e9e01aed907bdde556d09441=+; comment_author_email_cb0be998e9e01aed907bdde556d09441=+; comment_author_url_cb0be998e9e01aed907bdde556d09441=+
Host: dontai.com
Referer: http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/#comment-156182
User-Agent: Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
----2018-07-17:16:25:05
URL: /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/
IP: 31.184.238.4
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Cookie: comment_author_cb0be998e9e01aed907bdde556d09441=+; comment_author_email_cb0be998e9e01aed907bdde556d09441=+; comment_author_url_cb0be998e9e01aed907bdde556d09441=+
Host: dontai.com
Referer: http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/#comment-156182
User-Agent: Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
----2018-07-17:16:25:06
URL: /wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/
IP: 31.184.238.4
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Cookie: comment_author_cb0be998e9e01aed907bdde556d09441=+; comment_author_email_cb0be998e9e01aed907bdde556d09441=+; comment_author_url_cb0be998e9e01aed907bdde556d09441=+
Host: dontai.com
Referer: http://dontai.com/wp/2015/08/24/lg-optimus-l9-p769-smartphone-root-cwm-remove-bloatware/comment-page-1/
User-Agent: Mozilla/5.0 (Windows NT 7.1; Win64; rv:43.1) Gecko/20100101 Firefox/43.1
---- - Blacklisted Ip range from the past
