Forum Moderators: open

Message Too Old, No Replies

Anyone know what AuditBot/0.1 is

Being hit everyday with this

         

dramstore

12:33 pm on Oct 2, 2005 (gmt 0)

10+ Year Member



Wonder if anyone knows what AuditBot is?
One of my sites is being hit daily for weeks now

Wondering whether to ban it or not

Thanks

[edited by: jatar_k at 6:48 pm (utc) on Oct. 3, 2005]
[edit reason] removed ip from ISP [/edit]

jatar_k

6:49 pm on Oct 3, 2005 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



the only info I could find about it was either open logs or from the ISP that ip was from.

Is it hitting hard? The logs I found showed tiny amounts of hits from it. I couldn't find a reason not to ban it.

wilderness

7:26 pm on Oct 3, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



The link below provides that it is something used to check the activity of chat rooms:
[support.bb4.com...]

dramstore

7:53 pm on Oct 3, 2005 (gmt 0)

10+ Year Member



Thanks for that.

I has been having every file on my site retrieved a few times a day for about 2 weeks now (no chat room on the site).
I banned the ip shortly after posting this and it came back about an hour later using a different one, banned that too but looks like this could go on.

It actually logs as auditbot/0.1 - the only thing I could find about it in google or yahoo was one guy asking what it was.
There is some talk of auditbot (not /0.1) referring to an auditing package but I assume this is not related.

wilderness

8:06 pm on Oct 3, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Please "sticky" me (privatelty) an entire log line with IP and I'll see if the IP matches anything in my records.

Don

dramstore

9:52 pm on Oct 3, 2005 (gmt 0)

10+ Year Member



Wilderness, thanks, sticky sent.

Seems to be a problem.

Just looked in the logs of another of my sites and the same IP is accessing files under the title
"ContactBot/0.2"

Something very odd about this - I didn't know we shouldn't post IP's, so anyone wants the ip sticky me

wilderness

1:01 am on Oct 4, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



dram,
This IP range from Abovent.
Both they and their customers (this is one) have a variety of bots in use.
This particular customer just provides a contact (from an ARIN) back to Abovenet.

Another customer of their (although a different IP range) is the BecomeBot of which there are multiple threads in the archives.

The only alternatives I see?
1) deny the entire Abovenet ranges
2) deny the bots individually

Don

edit wilderness 10/3; BTW it's ok to inlcude IP ranges, just be SURe to either XX or XXX the Class D. (This is really only intended to be applicable for private IP ranges of which your inqury is not. Perhaps jatar was not aware of that?)

wilderness

1:23 am on Oct 4, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



dram,
go to the ARIN set and copy the two lines individually and on different searches: EXACTLY:

> 64.124.

then

> 64.125.

these searches may max out at 256 lines.
In any event you will see that the entire ranges are COMMERCIAL and not private.

Don

dramstore

10:19 am on Oct 4, 2005 (gmt 0)

10+ Year Member



Thats for your help on this, I'll take a look at that.
What's your opinion - would you ban it?

wilderness

11:36 am on Oct 4, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



would you ban it?

dram,
Each webmaster must decide what bots are benefical or detrimental to their own websites.

I have the portions of Abovenet denied to include the Class D of the IP range you provided and the Class C's of the two ranges that I provided.

Don