File extensions I don't even have.

As fast as five files per second.

[pendanticist]

The 403s fed were the result of the blank UA, but still. Never have I had files like these refer to. While I have links to certain legal sites, none of the files names are even close.

Any idea what this individual was trying to do?

Is this an automated thing?

**.***.***.*- - [28/Jan/2005:10:19:38 -0800] "GET /lawyers/ahmedabad-lawyers.php HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:19:38 -0800] "GET /docs/bareact.shtml HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:19:38 -0800] "GET /docs/appeal/01.shtml HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:19:38 -0800] "GET /docs/main.php3?id=LEAS1 HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:19:38 -0800] "GET /docs/windingup-litigation/05.shtml HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:19:39 -0800] "GET /docs/indian%20law/livelegal.shtml HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:19:39 -0800] "GET /docs/indian%20law/consultation-chember.shtml HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:19:39 -0800] "GET /member/mregform.php3 HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:19:41 -0800] "GET /lawyers/bosnia HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:19:42 -0800] "GET /lawyers/hungary HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:19:43 -0800] "GET /lawyers/belgium HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:19:58 -0800] "GET /member/Weddings%20in%20Ceredigion,%20Ceredigion%20Weddings.html HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:20:00 -0800] "GET /lawyers/main.php3?id=WOCA2&PHPSESSID=e8cd6235cd3f38957484eb748eb0a6b0 HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:20:01 -0800] "GET /lawyers/main.php3?id=WOCA1&PHPSESSID=e8cd6235cd3f38957484eb748eb0a6b0 HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:20:01 -0800] "GET /lawyers/docs/indian%20law/legalhelpline.shtml?PHPSESSID=e8cd6235cd3f38957484eb748eb0a6b0 HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:20:01 -0800] "GET /lawyers/main.php3?id=CHLB2&PHPSESSID=d0c50efa5762baf25dcd9de503e4e647 HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:20:02 -0800] "GET /lawyers/main.php3?id=CHLB1&PHPSESSID=d0c50efa5762baf25dcd9de503e4e647 HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:20:02 -0800] "GET /lawyers/docs/indian%20law/legalhelpline.shtml?PHPSESSID=d0c50efa5762baf25dcd9de503e4e647 HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:20:24 -0800] "GET /lawyers/baq119.asp HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:20:24 -0800] "GET /lawyers/docs/bareact.shtml HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:20:25 -0800] "GET /lawyers/docs/appeal/01.shtml HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:20:25 -0800] "GET /lawyers/docs/windingup-litigation/05.shtml HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:20:25 -0800] "GET /lawyers/lawyers/ahmedabad-lawyers.php HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:20:26 -0800] "GET /lawyers/docs/main.php3?id=LEAS1 HTTP/1.1" 403 262 "-" "-"
**.***.***.*- - [28/Jan/2005:10:20:26 -0800] "GET /lawyers/docs/indian%20law/docs/indian%20law/livelegal.shtml HTTP/1.1" 403 262 "-" "-"

[incrediBILL]

Cut and paste a few of the paths like "docs/appeal/01.shtml" into google and a single legal site comes up over and over again. In some cases the same page names showed up on multiple legal sites.

I think someone is looking for copyright infringment or cloned web sites, just a thought.

[pendanticist]

I wondered about that too. Only wouldn't it have to be automated to pull that many files per second?

[walkman]

unless someone with those files redirected their domain to yours

[pendanticist]

Redirected to mine. Whatta concept. :o

What would the advantage be, for them or me? <- Poetic ain't it?

There has been no activity since that visit.