Forum Moderators: open

Message Too Old, No Replies

Two Bots, 1/2 a world apart- Same Requests

This is weird!

         

carfac

12:42 am on Jun 29, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Just noticed two IP's- one in Michigan, one in Australia, one hits me at 5:50 AM, on at 8:20 AM... they each ask for the SAME 15 files. No more, no less... and daily.

Here is one (Ozzie):

203.111.1.66 - - [28/Jun/2003:08:13:15 -0600] "GET / HTTP/1.0" 200 20343 "-" "Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)"

So I guess this one is Harriet:

68.23.21.250 - - [25/Jun/2003:05:57:36 -0600] "GET / HTTP/1.0" 200 20343 "-" "Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)"

OK, I look now, and it is ONLY the links off the first page they try to follow...

dave

wilderness

2:59 am on Jun 29, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Hey Dave,
Didn't Jim tell you that the Aussie, Kiwi's and myself are a team ;)

I've had the following deny for a couple of weeks.

deny from 68.23.21.
68.23.21.250 - - [15/Jun/2003:03:07:01 -0700] "GET / HTTP/1.0" 200 9409 "-" "Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)"

I'm not sure that I submitted it here. I did submit it to the SBC NG's which are somewhat private. This crawl came on the heels on some inquiries I made at SBC and appeared rather coincedental to me. Course everybody knows I'm an extreme paranoia ;)

Don

BTW, SBC has some relay problems in the PPPoX pool for some time know. Even as their customer I have some of those ranges denied access to my sites.

carfac

4:20 am on Jun 30, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Don:

I had a "Don-Flash" yesterday... I NEARLY blocked 203!

dave