Forum Moderators: DixonJones

Message Too Old, No Replies

Lots of requests from a few IPs with zero bytes sent. What's going on?

Looks like a bot/spider but keeps hitting my forms.

         

ra66it

1:12 am on Mar 11, 2004 (gmt 0)

10+ Year Member



I'm getting hit by 1000s of requests from single IPs every few days. No referrer, never requests robots.txt file, zero bytes sent, seems to keep hitting my forms and is using some Java client. Here is a snippit from my logs...

2004-03-08 03:16:51 [client] - GET /default.asp - 200 0 HTTP/1.1 Java/1.4.2_02 -
2004-03-08 03:16:57 [client] - GET /default.asp - 200 0 HTTP/1.1 Mozilla/5.0 -
2004-03-08 03:16:57 [client] - GET /feedback_send.asp - 302 0 HTTP/1.1 Java/1.4.2_02 -
2004-03-08 03:16:57 [client] - GET /default.asp - 200 0 HTTP/1.1 Java/1.4.2_02 -
2004-03-08 03:17:04 [client] - GET /contact-us.asp - 200 0 HTTP/1.1 Mozilla/5.0 -
2004-03-08 03:17:04 [client] - GET /feedback_send.asp - 302 0 HTTP/1.1 Java/1.4.2_02 -
2004-03-08 03:17:04 [client] - GET /default.asp - 200 0 HTTP/1.1 Java/1.4.2_02 -
2004-03-08 03:17:11 [client] - GET /contact-us_send.asp - 302 0 HTTP/1.1 Java/1.4.2_02 -
2004-03-08 03:17:11 [client] - GET /contact-us.asp - 200 0 HTTP/1.1 Java/1.4.2_02 -
2004-03-08 03:17:15 [client] - GET /employment.asp - 200 0 HTTP/1.1 Mozilla/5.0 -
2004-03-08 03:17:18 [client] - GET /feedback_send.asp - 302 0 HTTP/1.1 Java/1.4.2_02 -
2004-03-08 03:17:18 [client] - GET /default.asp - 200 0 HTTP/1.1 Java/1.4.2_02 -

Any ideas on what's going on?

volatilegx

4:19 pm on Mar 11, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Hi ra66it, welcome to WebmasterWorld!

Whatever it is, it looks automated, and I'll bet dollars to donuts that it is up to no good. Probably scanning for email addresses or something like that. I'd ban the IP address.