Clever spider got redirected by my cloaking software

209.73.164.126 u/a tv33_Merc_ep-1.0

[han solo]

This one hit my stuff yesterday and today. The domains are not doing great, but along cam this little spider from Altavista, and wham, got redirected, and landed on my clients sites.

Just thought I'd let everybody know that they still seem to be trying to find new and interesting ways to grab cloaked stuff.

Cheers,
Han Solo

[littleman]

The NSlookup is tv33.sv.av.com.
That is a strange one from altavista. Anyone have any info on it? It is out of the 209.73.164.* which it looks like they've been using since early October. Were you screening for this class C, or just single IPs at a time? Also, what is the procedure of your spider ID, and redirecting?

[han solo]

He he he, I have to admit, I appreciate all the help Littleman.

I guess I'll come clean. Filtering by single IP's only, I think that is part of the reason I got caught flat footed by this one. I've already had some stuff axed, and this was one of them, so it doesn't concern me too much.

The procedure is by HTTP_USER_AGENT, and then REMOTE_ADDR, depending on the engine I'm targeting.

Um, you won't repeat this, will you? I'd hate to let my cat out of the bag...

Cheers,
Han Solo