www.netfactual.com/survey/

Just got gobbled by my trap

[Andrue]

i see there is already a few posts about this one but just a current notice i guess. this guy just ate my trap:

64.21.155.201 - vries.dnb.domaingo.com - [15:34 04/15/03] [netfactual.com...]

[carfac]

Andrue:

Weird. Netfactual is a monitoring sort of "service"... I would expect a quick ping or something, not for it to try and d/l a bunch of pages. How many hits, and how quickly?

dave

[jdMorgan]

... Looks like a faked referer. It appears that the requestor wasn't NetFactual, it was vries.dnb.domaingo.com

Jim

[Andrue]

on further checking my server log it shows this actually, what bit the trap was the non UA i guess rather then it grabbing my trap snare:

64.21.155.201 - - [15/Apr/2003:14:34:08 -0500] "GET / HTTP/1.0" 200 13074 "http://www.netfactual.com/survey/" "-"

[carfac]

Jim:

Actually, 64.21.155.201 when I checked it went back to Net Access Corporation, not vries.dnb.domaingo.com. Not knowing who netfactual runs through- and thinking Net Access COULD me their ISP or whatever, I did not immediately conclude that it was a fake UA.

But based on it requesting multiple docs, I would say that is a good possibility...

dave

[anallawalla]

I get a blank UA:

From AXS log reader:
A visitor from vries.dnb.domaingo.com (64.21.155.201)
arrived from www.netfactual.com/survey/,
and visited (my domain)/index.shtml
at 02:16:35 on Monday, April 21, 2003.
This visitor used .