What are they after?

Hitting the same page every single hour...

[keithj]

On a commerce site we run, I've noticed 2 new entries in our log files. Both IP's are hitting a single page (one hits index, the other hits our usage policy), over and over, for the past 3 weeks. One (with a Russian address) hits every hour, at the same time. 8:02, 9:02, 10:02, etc. The other hits every 1-2 hours at different times. No referrer information, never any hits to another page.

I've checked on several search engines for specific strings of text that we use, but haven't seen them listed anywhere suspicious.

Any idea what these guys are trying to attempt?

[incrediBILL]

Based on the timing, it almost appears someone is monitoring your site for uptime.

[Filipe]

Just an idea but... our merchant service provider requires that we have our privacy policy and terms of service registered with them at all times (they have base requirements for all their merchants).

Perhaps someone with whom you have a similar relationship (or someone who could benefit somehow by your downtime) is checking to see if either of these documents go down or move.

[keyplyr]

Most likely, the person has thier bot scheduled and forgot about it.

[incrediBILL]

just block the IP and see what happens :)

[Marino]

A russian address? Like srv003.*******.ru?

[keithj]

No... a whois of the site came up with a russian address. The IP didn't have a reverse DNS entry.

I spoke with our ISP and had them block the IP addresses... now I'll see if anyone yells :)

Thanks for the thoughts and ideas!