Hi Harsh ,

I queried against ISLGRebuildProduction database, and the query I built is:

select s.LastName, s.FirstName, g.GroupName, ss.*
from dbo.SubscriberSession SS
left join dbo.Subscribers S on ss.SubscriberId = s.SubscriberId
left join dbo.Groups G on s.GroupId = g.GroupId
where ss.StartTime = ss.EndTime
and year(ss.StartTime) = 2021
order by ss.StartTime desc

Hi Harsh ,

I dug a bit in the data, and realized that the % of "Zero seconds" sessions were very high in April, and even higher so far in May.

• In April, 2409 out of 7359 (32.7%) were logged as "zero seconds" sessions.
• In May so far, 2149 out of 4831 (44.5%) were logged as "zero seconds" sessions.

To be clear, if the difference in seconds between endTime and startTime is less than 1, I classify the session as "zero seconds".

I'm attaching an updated spreadsheet, which contains ALL session data for 2021.

ZeroSecSessions2.xlsx 7.25 MB • Download

Hi Morgan ,

I drilled down in the data a bit more this morning, and there is one IP address that jumps out in terms of # of "zero seconds" sessions:

image.png 7.81 KB • Download

That IP belongs to Allen & Overy LLP.
Out of a total combined 4831 sessions logged against ISLG, 1841 of them were "zero seconds" sessions from Allen & Overy LLP.

Furthermore, 1471 of these "zero seconds" sessions at Allen & Overy LLP occurred yesterday 5/12 between 9am and 9:30am (local server time). Since it's not humanely possible to create that many sessions in a span of 30 minutes, we are either dealing with a bug on our end, or with a bot or web crawler on their end.

I think we need to contact them and try to determine what is happening.

I also have a few questions:

1. Can we tell how many distinct users from Allen & Overy LLP have accessed ISLG in May? All I can see in ISLG Admin are "Anonymous".
2. Do we know whether this firm accesses ISLG via a proxy server or any other special access method?
3. Have they reached out to us with any issue or concern since our new ISLG went live?

Hi Morgan and Harsh ,

Note that the other top 2 IPs that have experienced the most zero-login issues are:

• 154.59.124.193 (Not sure who this is – I will need to look them up in the database) | 289 total zero-seconds sessions
• 195.33.27.60 (Wilmer Cutler Pickering Hale and Dorr LLP) | 158 total zero-seconds sessions