Friday, February 29, 2008

Scottsonline (199 = 205 = 200; 204 = 208)

There are many details to be extracted from logs for miscellaneous websites that help illustrate the impermanent nature of Roger's IPs in the years 2003 and 2004. Below are some Rogers IPs extracted from a log for scottsonline.com. Especially, to be noted are the coloured entries.
IP pages hits bandwidth last visit date
66.185.84.71 2 7 124154 2004 09-02 08:29:00
66.185.84.199 1 1 1686 2004 09-08 13:12:10
66.185.84.205 1 1 1686 2004 09-08 13:26:30
66.185.84.200 4 18 112762 2004 09-08 13:27:06
66.185.84.19726 86 4103099 2004 09-08 13:28:08
66.185.84.204 1 1 25877 2004 09-12 18:20:44
66.185.84.208 6 41 568401 2004 09-12 18:20:57
66.185.84.69 14 77 959341 2004 09-22 08:09:40
66.185.84.76 6 9 25130 2004 09-24 20:20:29
66.185.84.8034 284 7429937 2004 09-28 14:01:20
Beginning with the blue entries, it is theoretically possible that four Rogers customers showed up within a few minutes of one another at 13:12:10, 13:26:30, 13:27:06, and 13:28:08 of Sept. 08, 2004. But especially with the last three log entries, it is easier to believe that this is one person, and that it is yet another example of the fluidity of the Rogers IPs, and within a minute-and-a-half, the Scottsonline customer had cycled through 66.185.84.205, -200, and 197.

The same point can be made about the two red entries, from four days later. The two red log entries are only 15 seconds apart, and x.x.x.204 "hits" only a single page once before disappearing and giving way to x.x.x.208.  This is easiest to explain if this is one user whose IP has changed suddenly, as these IPs can be seen to do elsewhere.  

Whether the other IPs reflect the same users, and whether the 'blue-user' and 'red-user' is the same person, is less clear.  But given that these IPs often seem elsewhere to shift into one another, it seems highly likely not only that the red IPs and blue IPs all belong to the same user, but so, too, do the other IPs that we find here: x.x.x.69, x.x.x.76, and x.x.x.80.