Welcome to WebmasterWorld Guest from 50.19.53.104

Forum Moderators: DixonJones & mademetop

Message Too Old, No Replies

What are they after?

Hitting the same page every single hour...

     

keithj

9:38 pm on Feb 3, 2005 (gmt 0)

10+ Year Member



On a commerce site we run, I've noticed 2 new entries in our log files. Both IP's are hitting a single page (one hits index, the other hits our usage policy), over and over, for the past 3 weeks. One (with a Russian address) hits every hour, at the same time. 8:02, 9:02, 10:02, etc. The other hits every 1-2 hours at different times. No referrer information, never any hits to another page.

I've checked on several search engines for specific strings of text that we use, but haven't seen them listed anywhere suspicious.

Any idea what these guys are trying to attempt?

incrediBILL

7:12 pm on Feb 5, 2005 (gmt 0)

WebmasterWorld Administrator incredibill is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



Based on the timing, it almost appears someone is monitoring your site for uptime.

Filipe

7:54 pm on Feb 5, 2005 (gmt 0)

10+ Year Member



Just an idea but... our merchant service provider requires that we have our privacy policy and terms of service registered with them at all times (they have base requirements for all their merchants).

Perhaps someone with whom you have a similar relationship (or someone who could benefit somehow by your downtime) is checking to see if either of these documents go down or move.

keyplyr

7:56 pm on Feb 5, 2005 (gmt 0)

WebmasterWorld Senior Member keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



Most likely, the person has thier bot scheduled and forgot about it.

incrediBILL

3:35 am on Feb 6, 2005 (gmt 0)

WebmasterWorld Administrator incredibill is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



just block the IP and see what happens :)

Marino

10:41 am on Feb 6, 2005 (gmt 0)

10+ Year Member



A russian address? Like srv003.*******.ru?

keithj

2:48 pm on Feb 7, 2005 (gmt 0)

10+ Year Member



No... a whois of the site came up with a russian address. The IP didn't have a reverse DNS entry.

I spoke with our ISP and had them block the IP addresses... now I'll see if anyone yells :)

Thanks for the thoughts and ideas!

 

Featured Threads

Hot Threads This Week

Hot Threads This Month