Forum Moderators: open
81.199.85.109 - - [26/Oct/2003:18:57:55 -0600] "GET /dir/page.htm HTTP/1.0" 403 294 "-" "Green Research, Inc."
inetnum: 81.199.82.0 - 81.199.87.255
netname: CIDR-COMMUNICATION-01
descr: Internet service provider
country: NG
person: Chikezie Okwunakwe
address: 21 Mobolaji Bank
address: Anthony Way Ikeja
address: Lagos
address: Nigeria
Thanks for those who posted info on Web Content International. He came in pounding today, but got nothing but 403's.
Looking back in the logs we have hits on seven sites from all over the place, including Nigeria, Panama, Mozambique and Israel...
RewriteCond %{HTTP_USER_AGENT} "^Green Research" [OR]
...
I'm also seeing what are obviously the same spiders crawling the same list of URL's, coming from IP's that are widely separated geograpically - frequently with names like Satcom and Sky2net. I wonder if these are just proxy servers that have become known to a bunch of email harvesters.