homepage Welcome to WebmasterWorld Guest from 54.226.168.96
register, free tools, login, search, subscribe, help, library, announcements, recent posts, open posts,
Subscribe to WebmasterWorld

Visit PubCon.com
Home / Forums Index / Search Engines / Search Engine Spider and User Agent Identification
Forum Library, Charter, Moderators: Ocean10000 & incrediBILL

Search Engine Spider and User Agent Identification Forum

    
Novel User Agent
Made by ZmEu @ WhiteHat Team - www.whitehat.ro
dstiles




msg:4413604
 6:03 pm on Feb 2, 2012 (gmt 0)

This User-Agent hit my server about 500 hundred in 8 minutes in one of those php admin/manager/etc attacks - what can we break now kind of thing. Hit most of the sites on the server as far as I can tell: they usually do.

Full UA: Made by ZmEu @ WhiteHat Team - www(.)whitehat(.)ro
(parentheses added around dots to discourage the sods)

IP: 83.170.113.208 - UK2 hosting - same as mine :(

Action: completely non-white-hat.

Common enough recently but the UA is (in my experieice) unusual.

 

Pfui




msg:4413716
 11:53 pm on Feb 2, 2012 (gmt 0)

It's old, and bad. [webmasterworld.com...]

Its names range from the short -- ZmEu -- to the long version you saw, and in-between. I see it maybe three, four times a month across as many sites, literally from all over (.com, .ro, .ru, .jp, etc).

Basically it's just another exploit that aims to get its hooks into any machine anywhere and wreak havoc everywhere.

dstiles




msg:4414055
 9:15 pm on Feb 3, 2012 (gmt 0)

Thanks. Hadn't conciously noticed it before. Perhaps it only popped up here two or three times before instead of hundreds.

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Search Engines / Search Engine Spider and User Agent Identification
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About
© Webmaster World 1996-2014 all rights reserved