Anyone tell me what this is

Forum Moderators: phranque

Message Too Old, No Replies

Anyone tell me what this is

getting hit every 5 mins by this

nicebloke

2:07 pm on Jun 23, 2001 (gmt 0)

I keep getting hit every 5 mins, for the last 3 days by this:

IP Address: 195.11.209.130
HostName: cruise.ppm-uk.com
Browser/OS: MSProxy/2.0

No referer info.

The IP whois [samspade.org]

Any clues?

Ta.

sea

6:08 pm on Jul 1, 2001 (gmt 0)

I believe MSProxy/2.0 is an email harvester, not 100% sure, but I think I've heard that UA before, and they definitely seem to be hitting you like harvesters do which is all the time. Check to see if they are pulling files that most people can't find on your site (ie. if you have hidden links) because they work on following anything with a path.

nobody999

8:39 pm on Jul 1, 2001 (gmt 0)

Hi,
Did you figure out if MSProxy is e-mail harvester ?

Thx

Andre

nicebloke

8:47 pm on Jul 1, 2001 (gmt 0)

(It stopped after 5 days)

After some advice from engine I have decided to contact the company the IP originates from, which is Prudential, a large UK insurance company.

It's on the list...

theperlyking

9:13 pm on Jul 1, 2001 (gmt 0)

I find proxies are the ones that tend to annoy me the most (or at least that I see the most). msproxy has been banned for a while now for me, along with anything that has a ua of mozilla 3.0 (cant remember exact string) as they have the habit of requesting multiple pages per second.