Forum Moderators: DixonJones

Message Too Old, No Replies

Oddness in Google alerts website showing in tmp files

anybody seen this?

         

timestocome

6:22 pm on Jul 24, 2008 (gmt 0)

10+ Year Member



I have Google alerts set for all my domains. In the last few weeks, they have been returning alerts for websites that have nonsensical pages in their /tmp/ directories.

My sites along with others, some sleezy, some not and a bunch of nonsense appear on these pages.

Anyone know what is up with this?

Example from a page I chased back:

types of coffee roasted beans, oven roasted asparigus, elsa kolo roasted barley, roasted sea bass recipes, calories roasted salted cashews, oven roasted potatoes 350
Post N84250: Candy Mason608, 1:31
Favourite Song: Dir, dir, Jehova, will ich singen BWV 299 (Rundfunkchor Berlin), Gomorrha., Delutani Szerelem, Cycles Of Night, Shade Gate.

Post N46995: NICHOLA521, 8:15
Top Site: bluepeel.com; artstribe.com; flightline.co.uk; seniortrip.org; riversideacura.com.

Post N90598: Barbie57, 17:32
Places to visit: "Chuchaila Kalan", "Marčana", "Silwai", "Sangabuye", "Jamestown".

mayest

6:57 pm on Jul 24, 2008 (gmt 0)

10+ Year Member



I've been seeing the exact same thing. I have no idea what is going on. Until a few days ago, I was just deleting these but now I have them automatically tagged and then I archive them. I got a few in there and the URLs all look similar to this:

example.com/tmp226/cnf222/nonsense_filename.htm

What they have in common is /tmp###/cnf###/ where ### is some seemingly random number.

timestocome

9:11 pm on Jul 24, 2008 (gmt 0)

10+ Year Member



Yes, I'm seeing the same pattern. Clearly it is a bot.

I'm just not sure what it's purpose is and if the sites I find the files on are sending out the bots or victims of the bots.