It is very unlikely that they are from the same machine. One is from 70.225.137.151, the other is from 76.251.230.168, within a few minutes of each other. In order for the same machine to have sent them, they would hav= e to reconnect from a different ISP between transmissions or re-DHCP with the same ISP. http://whois.domaintools.com/70.225.137.151 AT&T Richardson TX http://whois.domaintools.com/76.251.230.168 AT&T Richardson TX Since both IP's are on the same ISP, only the reconnect makes sense, and since these are dsl lines, which typically stay connected and typically don't change IP even on re-connect, it is almost certainly two different machines.=20 It's possible that one user could be controlling two different PC's... I do that; one at home and the other via remote desktop at the office. If I hit = a web site from home and then hit the same site from the remote machine the connecting IP's would be from two different ISPs even. -- James Newton 1-970-462-7764=20 -----Original Message----- From: piclist-bounces@mit.edu [mailto:piclist-bounces@mit.edu] On Behalf Of Aaron Sent: Saturday, August 28, 2010 20:42 To: Microcontroller discussion list - Public. Subject: [TECH]: deciphering log files from website Below are two entries from some log files on a website that I maintain. I am trying to figure out if they are from the same computer. I note that the IP addresses are different, but both resolve to "AT&T Internet Services", to separate servers within about 20 miles of the person's home address who I believe is responsible for the entries. I also note that the user agents are identical. I searched through 22 days of log files and can not find another user agent that matches exactly. I don't have much experience deciphering this kind of thing and am looking for correlation of my findings. (I took the liberty of obscuring the website name and host ip address) 2010-08-17 23:29:09 W3SVC46816626 NTXPWUS69 74.xxx.xxx.145 POST /contact.asp - 80 - 70.225.137.151 HTTP/1.1 Mozilla/5.0+(Macintosh;+U;+Intel+Mac+OS+X+10.5;+en-US;+rv:1.9.2.8)+Gecko/20= 1 00722+Firefox/3.6.8 - http://thewebsitename.org/ thewebsitename.org 302 0 0 414 738 10843 2010-08-28 23:36:53 W3SVC46816626 NTXPWUS69 74.xxx.xxx.145 POST /contact.asp - 80 - 76.251.230.168 HTTP/1.1 Mozilla/5.0+(Macintosh;+U;+Intel+Mac+OS+X+10.5;+en-US;+rv:1.9.2.8)+Gecko/20= 1 00722+Firefox/3.6.8 - http://thewebsitename.org/ thewebsitename.org 302 0 0 414 2174 10578 Aaron --=20 http://www.piclist.com PIC/SX FAQ & list archive View/change your membership options at http://mailman.mit.edu/mailman/listinfo/piclist --=20 http://www.piclist.com PIC/SX FAQ & list archive View/change your membership options at http://mailman.mit.edu/mailman/listinfo/piclist .