Agent: HostTracker.com, sharing IP?

[Joey123]

Check this out. Every time I block his IP range, he changes to another IP, many of which are in foreign countries. He must be sharing IP's. The IP changes, but the Agent string stays the same. Here is the log to show what I mean:

---

202.142.222.81 /
Http Code: 200 Date: Jun 29 10:22:50 Http Version: HTTP/1.1 Size in Bytes: 0
Referer: -
Agent: Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)

69.50.179.66 /
Http Code: 403 Date: Jun 29 10:21:58 Http Version: HTTP/1.1 Size in Bytes: -
Referer: -
Agent: Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)

202.142.222.81 /
Http Code: 200 Date: Jun 29 09:19:26 Http Version: HTTP/1.1 Size in Bytes: 0
Agent: Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)

204.9.190.138 /
Http Code: 403 Date: Jun 29 09:13:05 Http Version: HTTP/1.1 Size in Bytes: -
Referer: -
Agent: Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)

205.218.64.72 /
Http Code: 403 Date: Jun 29 09:12:42 Http Version: HTTP/1.1 Size in Bytes: -
Referer: -
Agent: Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)

64.246.22.53 /
Http Code: 403 Date: Jun 29 09:12:19 Http Version: HTTP/1.1 Size in Bytes: -
Referer: -
Agent: Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)

64.246.22.53 - - [29/Jun/2005:03:22:26 -0700] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)"
205.218.64.72 - - [29/Jun/2005:03:27:57 -0700] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)"
204.9.190.138 - - [29/Jun/2005:03:29:45 -0700] "HEAD / HTTP/1.1" 200 0 "-" "Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)"
64.246.22.53 - - [29/Jun/2005:04:31:04 -0700] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)"
205.218.64.72 - - [29/Jun/2005:04:35:33 -0700] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)"
205.218.64.72 - - [29/Jun/2005:04:39:25 -0700] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)"
205.218.64.72 - - [29/Jun/2005:04:42:36 -0700] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)"
205.218.64.72 - - [29/Jun/2005:04:46:18 -0700] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)"
205.218.64.72 - - [29/Jun/2005:04:49:04 -0700] "HEAD / HTTP/1.1" 403 - "-" "Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)"
204.9.190.138 - - [29/Jun/2005:04:58:35 -0700] "HEAD / HTTP/1.1" 200 0 "-" "Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)"
204.9.190.138 - - [29/Jun/2005:05:00:59 -0700] "HEAD / HTTP/1.1" 200 0 "-" "Mozilla/4.0 (compatible; HostTracker.com/1.0;+http://host-tracker.com/)"

[py9jmas]

1. Welcome to Webmaster World. Please don't post the same thing in multiple forums.
2. If you go to the website in the user-agent, it explains who they are and what they are doing. The first sentence is

We have several monitoring points all over the world.

They are monitoring how responsive your site is from different parts of the network. They arn't even downloading the page - they're sending HEAD requests. I doubt they care if they get a 200 response or a 403 access denied.

[Joey123]

No, you are wrong. Somebody has subscribed to this service and is paying to have my site monitored. And there are two agents listed, not just one.

On the other matter, my post was relavant to both sections of this website and you should leave it alone. Not everybody is going to follow the same sections as you.

[blend27]

you know py9jmas, its always starts as we are only monitoring what you got and later on someone decides to get a little more in to capitalizing on someone else’s efforts thingy. I don’t want to get in to the argument here but I’ll give an example of.

You have a retail store: some one walks in -'opens the door' - you say HI, How are you! They turn away and say nothing. So they do it 5 times a month, its getting to the point when you need to say to you self 'Well Hi thingy does not work', what does he really want, that dude that opens and closes the door?’. Then you ask someone who knows what’s up and find out that the freak that visits you retail location is really wasting your time and oil in the door hinges. You say to your self – ‘’Naaaaaa, he crazy! Better keep him away. Next time he comes you push the button and the door is locked. Crazy one leaves and never comes back… But wait,…. Here he is again, looking in you backdoor window, shaved and looking happy, -LOCK the Window, put a shade on. So he goes… Couple days later, you buddy that sells similar stuff finds that the same thing is happening to him. Generally starting to think, your buddy is interested in ‘WHAT’S in it for him’. He greets the purp, and offers to spy for him on you. You start spending time keeping it real and as less crazy as you can in your store. But for a “small fee or a link”, crazy one finds friends more and more, you at the same time spend more time watching over your shoulder for crazies.

It’s Absurd. If you tell someone GO AWAY - NOT WELLCOME, there should be no reason for them to even play innocent and try to comeback…

Blend27

P.S. I might of spelled the word PURP incorrectly, but I hope you get the point.

[alfredh]

I was pretty disgusted by these guys when I saw them in my server log. I went so far as to write a prototype ISAPI filter to specifically block them based on their cs(user-agent) string. I needed some code like that for another project anyway...

I wrote support, and politely (not) asked them to stop hitting my server. Unbelievably, they stopped.

OK, maybe they were only sucking down a few hundred bytes of bandwidth every hour. However, there are lots of these types of things out there, and I don't want them using my bandwidth. At least they could support robots.txt or something.

Al

[edited by: Receptional at 8:22 am (utc) on July 5, 2005]
[edit reason] No email addresses are allowed please [/edit]