| 11:19 pm on Sep 9, 2003 (gmt 0)|
It came back as Sprint out of Reston, VA as the ISP and I found this thread:
Try to search google also.
| 11:22 pm on Sep 9, 2003 (gmt 0)|
| 12:25 am on Sep 10, 2003 (gmt 0)|
My logs showed visits from this thing, always from 216.205.*.* addresses (Sprint, USA). It follows links quickly and pretty thoroughly on the couple of days that it got hold of my sitemap. But on other days, it started at a deep page, and took few pages thereafter.
The previous post suggested this spider should be lumped in with other spiders that were hypothesized to be searching for guestbooks. But it could just be an off-line browser, or a link partner searching thing, couldn't it?
| 4:00 pm on Sep 19, 2003 (gmt 0)|
I got hit with this thing recently too.
Everything I see seems to confirm it's looking for email addresses to scrape for spam lists.
This thing manifested itself as hundreds of bogus URL requests which generated 404 errors. The program doesn't seem to handle paths very well.
I contacted DELLHOST (the ISP) with the info and they confirmed complaints and are right now in the process of shutting them down.
| 4:11 pm on Sep 19, 2003 (gmt 0)|
220.127.116.11 - - [17/Sep/2003:01:11:30 -0700] "GET / HTTP/1.1" 200 20690 "-" "Program Shareware 1.0.3"
18.104.22.168 - - [17/Sep/2003:01:46:27 -0700] "GET / HTTP/1.1" 200 20690 "-" "Program Shareware 1.0.3"
22.214.171.124 - - [17/Sep/2003:12:14:49 -0700] "GET / HTTP/1.1" 200 20690 "-" "Program Shareware 1.0.3"
126.96.36.199 - - [18/Sep/2003:06:12:01 -0700] "GET / HTTP/1.1" 200 20690 "-" "Program Shareware 1.0.3"
188.8.131.52 - - [18/Sep/2003:13:30:07 -0700] "GET / HTTP/1.1" 200 20690 "-" "Program Shareware 1.0.3"
This is the only thing I've seen.
| 4:34 pm on Sep 19, 2003 (gmt 0)|
if there were well behaved, I never would have noticed them, but I get several hundred 404s a day from them, because they request bogus URLs.
Maybe your pages are at the root level? I dunno. But DELLHOST seemed to have other issues with them as well.
| 11:53 pm on Sep 19, 2003 (gmt 0)|
i'm also on a search about this thing. it is infact trolling for guestbooks and then posting in them, typically something like this....
"Hi I just wanted to say what a great web site you have here, thank you. The guest book is a nice touch too. Is there any problem in my telling you about my own web site? Regards Mike OK, here's some information on my site, it is called Phentermine, as in the diet pills that the clinically obese use. Not many people realize there are 3 forms of Phentermine: Generic Phentermine HCl, branded tablet form Adipex and time release Ionamin capsules. These are all Phentermine based appetite suppressants. Other appetitie suppressants (although not Phentermine based) include Didrex, Meridia, Bontril, and Tenuate. Another slimming pill which is NOT an appetite suppressant is Xenical which helps stop dietry fat being absorbed by the stomach. What do you think? Interesting huh?! If you would like to know more about these prescription slimming medications, hop on over to Phentermine .TC! Oh, BTW, nearly forgot. We also sell Ortho Tri-cyclen, Propecia, Renova, Vaniqa and Zyban. But our number one product is Phentermine
LA, LA USA - Friday, September 19, 2003 at 10:37:34 (EDT)"
| 1:15 am on Sep 20, 2003 (gmt 0)|
OH my goodness. That's hilarious. And good work a3dmofo. I did a google search for some of those phrases in that block of text, and it was full, with that phrase, and others similar to it! That's a real eye opener. Can you elaborate on how you tracked this one down.. and also comment on the source of the apparent variations.