Missigua Locator 1.9

It wants YOUR Guestbook!

[carfac]

I just saw this this morning. Came in one one page (no referer) then went right for:

217.5.53.190 - - [09/Apr/2003:01:54:09 -0600] "GET /cgi/guest_book.cgi HTTP/1.1" 200 322 "-" "Missigua Locator 1.9"

and a couple other cgi scripts... got banned and hung out for about 200 requests.

dave

[wilderness]

Deutsche Telekom AG
Loads of unwanted traffic coming from this IP. At least it was ;)
Don

[bull]

Deutsche Telekom is Germany's largest ISP. I'd only block them if you didn't want visitors from Germany. (Hope I never need your site... ;-) )

[wilderness]

<snip>I'd only block them if you didn't want</snip>

BINGO ;)

My opening pages begin with North American. Now it just so happens that statistical center of my sites content is in NA.
Besides, your likely not interested in horses anyway ;-)

[carfac]

wilderness:

>>> At least it was ;)

You KILL me! :)

Yes, I saw it was DT... and I do get the occasional problem from there, but I do need to stay online in Europe, so I will keep the IP range in, and block the agent.

I did block whole ranges from Malasia, though! I think I have also blocked whole ranges from a couple African countries... Nigeria, Somalia. You know where else I get a LOT of problems from (more than Deutsche Telekom) Isreal!

dave

[Jaf]

I've just started a thread on guestbook spammers [webmasterworld.com] ... and then minutes later saw this post :)

Yes I've seen this agent. Others doing the same include

- Production Bot
- Full Web Bot
- Demo Bot

and in the last week or two

- Educate Search
- Franklin Locator
- Industry Program
- Mac Finder
- Program Shareware
- Missauga Locate

All from different IP addresses. All banned in my htaccess
now

[edited by: Jaf at 11:59 pm (utc) on April 13, 2003]

[carfac]

Jaf:

Thanks for the list! Had most... but not all!

[jrobbio]

I just had this little critter and I've no idea how it found it since I don't even have this appearing on my pages anywhere since I took it down, but it may have found a reference for it somewhere.
213.54.32.197 - - [29/Apr/2003:20:05:41 +0100] "GET /index.php?option=guestbook&Itemid=50 HTTP/1.1" 200 21389 "-" "Missigua Locator 1.9"