| Welcome to WebmasterWorld Guest from 22.214.171.124 |
register, free tools, login, search, subscribe, help, library, announcements, recent posts, open posts,
| 5:54 pm on Aug 16, 2010 (gmt 0)|
Previously... extrabot dot com [webmasterworld.com...]
Currently... Courtesy of Ukranian Telecom:
(rIP: 126.96.36.199*; 188.8.131.52/14)
Fake Ref/Log Spam? YES: http://extrabot.com/bot/sbvnxicdlhn.htm
UAs: FOUR in 10 secs --
Mozilla/5.0 (Macintosh; U; Intel Mac OS X; es) AppleWebKit/418.9.1 (KHTML, like Gecko) Safari/419.3
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; Crazy Browser 2.0.1)
Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:184.108.40.206) Gecko/20070219 Firefox/220.127.116.11
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:18.104.22.168) Gecko/20070312 Firefox/22.214.171.124
Clearly undeterred by 403s.
FWIW, I've long-blocked the ukrtel Host & CIDR, and extrabot as Host and Ref.
| 2:12 am on Aug 17, 2010 (gmt 0)|
Hit me too
The last part in the UA, the .htm file name appears to randomly change, was different for me.
This way, Pfui, it appears they could now tell by your post what your associated website is. Also by the time you posted. Then look you up via website registry.
(if they happen to be the reading type)
[extrabot.com...] "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:126.96.36.199) Gecko/20070309 Firefox/188.8.131.52"
(I've changed the last part, the file name above)
All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
© Webmaster World 1996-2013 all rights reserved