Forum Moderators: open

Message Too Old, No Replies

Thai spider, or something else?

wierd hits from asianet.co.th

         

Ankheg

9:12 pm on Apr 13, 2003 (gmt 0)

10+ Year Member



I've been noticing a huge amount of traffic in the last five days from Thailand - all from dialup addresses at asianet.co.th. He/she/it requests "/", and then seems to re-request every couple of minutes for several hours at a time. Needless to say, the whole /24 and the entire asianet.co.th domain are now banned, but I'm just curious if anyone knows what's going on here? Most recent (this afternoon) *attempt* was from

ppp-203.144.179.82.revip.asianet.co.th

and U/A was given as "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)". Request was HTTP/1.1.

wilderness

9:32 pm on Apr 13, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Ankheg,
I'm afraid I'm not going to be much help. Have had the entire 203. deined since Feb of 2002.

Despair time for Dave again ;)

Don

carfac

10:48 pm on Apr 13, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Ha ha ha ha ha!

I do not despair! I was actually laughing... As I read the first post, I was thinking this was something Don would not have to worry about! :)

On the subject at hand, no, I just ran a couple greps- not seen anything from that class C even...

dave

olwen

10:58 pm on Apr 13, 2003 (gmt 0)

10+ Year Member




Have had the entire 203. deined since Feb of 2002.

OT I'm afraid, but I wonder if distrust of 203 is why I had email rejected when I replied to someone the other day,

wilderness

12:43 am on Apr 14, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



<snip>why I had email rejected</snip>

olwen
The 203. ranges are only denied entry to my websites. Which would include my websites smtp's.
My primary IP account does not have that range denied. At least by numbers ;)

At one time I made a very time consuming effort to separate the Oceanic ranges from the Far East ranges and thought I had done rather well. Although I now realize there were some omission errors.
I mail often with a few Aussie's and Kiwi's and have a plea in for assitance that they may find a way to separate the Oceanic IP ranges from the others. I'm still waiting after a couple of weeks. Folks from those continents have a more than specific interest in my sites content.

Not so far off topic ;)

Don

Andrue

1:03 am on Apr 14, 2003 (gmt 0)

10+ Year Member



hmmm i got a 203.144 hit also, this block here seems to be thialand.

inetnum: 203.144.184.0 - 203.144.184.31
netname: ITVCOTH-ASIANET
descr: ITV Television
descr: SCB TOWER SCBPARK Ladyao chatuchak BKK THailand
country: TH

Ankheg

2:47 am on Apr 14, 2003 (gmt 0)

10+ Year Member



I'm really curious who/what this is... At first I figured it for some sort of uptime/updated monitor someone was running, but... The site in question isn't a blog, or anything else that'd change every 4 minutes, and even if it did, it probably wouldn't be the root or index.html page that would be changing.
My second guess was that it was someone with the Alexa toolbar who wanted to boost my site's rank, but, nope, that's not it either. Any which way you look at it, they're very unwelcome here. Perhaps I could redirect all requests from this IP range to the infamous AmishRakeFight "GFY" page... nah. More effort than it's worth.

I'm usually pretty easy-going with spiders and so on, but some things are just too annoying to ignore.