Forum Moderators: open

Message Too Old, No Replies

Bot from netzhase

Hit hard last night.

         

carfac

3:22 pm on Feb 21, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Just got hit last night by this:

216.169.111.198 - - [20/Feb/2003:23:09:27 -0700] "GET /index.html HTTP/1.1" 200 5169 "http://www.netzhase.de/conrad-electronic/" "http://www.netzhase.de/conrad-electronic/"

The link provided is (of course) a broken link, abd the IP resolves to Essential Services SKYPORT

jdMorgan

3:42 pm on Feb 21, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



carfac,

... Guess I should have posted yesterday
RewriteCond %{REMOTE_ADDR} ^216\.169\.(9[6-9]¦1[01][0-9]¦12[0-7])\. [OR]

NON-Essential Services, IMHO.
Came with a referrer from some pop-up killer at tvsites.net, so that seems to be a variable.

Jim

nativenewyorker

4:14 pm on Feb 21, 2003 (gmt 0)

10+ Year Member



jim,

I think you left out a dash.

RewriteCond %{REMOTE_ADDR} ^216\.169\.(9[6-9]¦1[0~1][0-9]¦12[0-7])\. [OR]

Replace ~ with -

Ted

jdMorgan

5:13 pm on Feb 21, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Ted,

No dash is needed if the numbers are contiguous.

Normally, characters enclosed in regex pattern square brackets are treated as a list, and any character in that list is tested for a match with the current character position in the request string. When numbers or letters are separated by a dash, it becomes a special case - a character-within-range comparison. In the case where the numbers or letters are contiguous, either may be used, but the simple list is more efficient than a range compare. That is:
[ABC] is the same as [A-C]
[123] is the same as [1-3]
[xy] is the same as [x-y]
[89] is the same as [8-9]

It will work either way, but leaving out the dash when the characters are contiguous is more efficient.

HTH,
Jim

carfac

7:34 pm on Feb 21, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Jim:

As always, I am in your debt! Thanks, I just banned the single IP- knowing the full range is better!

NOTE to anyone copying the above code- remember to edit the vertical bars.... this board replaces them with the dashed vertical bar!

nativenewyorker

11:47 pm on Feb 21, 2003 (gmt 0)

10+ Year Member



Brett,

carfac said:

NOTE to anyone copying the above code- remember to edit the vertical bars.... this board replaces them with the dashed vertical bar!

Since you guys are doing an update to the boards within the next week, maybe this is something that can be corrected.

Ted

carfac

5:37 pm on Feb 22, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



nativenewyorker:

This (the vertical to a dashed vertical) is a pretty common replacement in forums.... I have seen it in at least THREE different forum softwares. I would image that the vertical bar is a reserved character (you must have a couple...) Do not know in Bretts spefic case (and I cannot speak for him!), but based on other forums, it might just be something you need to be aware of, and just cope with!

dave