Program Shareware 1.0.3

What is this?

[andrewrab]

hey all...

I consider myself a serious searcher... in other words, I can always find what I'm looking for... but not this time...

Found someone else wondering about this too...

Program Shareware 1.0.3
216.205.91.230

Couldn't find much except a search for it in regular Google that turne up about a million publicly-available website traffic reports... the ones who listed this thing showed it as second behind Google in terms of how active.

He thought it was AdWorks... can't be since this site of mine popped on Sunday and doesn't use Adwords (or AdSense for that matter) and this crawled my entire site today... don't like it!

Any ideas?

[Goober]

It came back as Sprint out of Reston, VA as the ISP and I found this thread:

[webmasterworld.com...]

Try to search google also.

Good Luck

Goober

[andrewrab]

Thanks Goober!

[stevenha]

My logs showed visits from this thing, always from 216.205.*.* addresses (Sprint, USA). It follows links quickly and pretty thoroughly on the couple of days that it got hold of my sitemap. But on other days, it started at a deep page, and took few pages thereafter.

The previous post suggested this spider should be lumped in with other spiders that were hypothesized to be searching for guestbooks. But it could just be an off-line browser, or a link partner searching thing, couldn't it?

[erorc]

I got hit with this thing recently too.

Everything I see seems to confirm it's looking for email addresses to scrape for spam lists.

This thing manifested itself as hundreds of bogus URL requests which generated 404 errors. The program doesn't seem to handle paths very well.

I contacted DELLHOST (the ISP) with the info and they confirmed complaints and are right now in the process of shutting them down.

[pendanticist]

Hmmmmmmmm....

216.205.94.84 - - [17/Sep/2003:01:11:30 -0700] "GET / HTTP/1.1" 200 20690 "-" "Program Shareware 1.0.3"
216.205.75.23 - - [17/Sep/2003:01:46:27 -0700] "GET / HTTP/1.1" 200 20690 "-" "Program Shareware 1.0.3"
216.205.75.25 - - [17/Sep/2003:12:14:49 -0700] "GET / HTTP/1.1" 200 20690 "-" "Program Shareware 1.0.3"
216.205.94.89 - - [18/Sep/2003:06:12:01 -0700] "GET / HTTP/1.1" 200 20690 "-" "Program Shareware 1.0.3"
216.205.94.84 - - [18/Sep/2003:13:30:07 -0700] "GET / HTTP/1.1" 200 20690 "-" "Program Shareware 1.0.3"

This is the only thing I've seen.

Pendanticist.

[erorc]

if there were well behaved, I never would have noticed them, but I get several hundred 404s a day from them, because they request bogus URLs.

Maybe your pages are at the root level? I dunno. But DELLHOST seemed to have other issues with them as well.

[a3dmofo]

i'm also on a search about this thing. it is infact trolling for guestbooks and then posting in them, typically something like this....

"Hi I just wanted to say what a great web site you have here, thank you. The guest book is a nice touch too. Is there any problem in my telling you about my own web site? Regards Mike OK, here's some information on my site, it is called Phentermine, as in the diet pills that the clinically obese use. Not many people realize there are 3 forms of Phentermine: Generic Phentermine HCl, branded tablet form Adipex and time release Ionamin capsules. These are all Phentermine based appetite suppressants. Other appetitie suppressants (although not Phentermine based) include Didrex, Meridia, Bontril, and Tenuate. Another slimming pill which is NOT an appetite suppressant is Xenical which helps stop dietry fat being absorbed by the stomach. What do you think? Interesting huh?! If you would like to know more about these prescription slimming medications, hop on over to Phentermine .TC! Oh, BTW, nearly forgot. We also sell Ortho Tri-cyclen, Propecia, Renova, Vaniqa and Zyban. But our number one product is Phentermine
RX <RX>
LA, LA USA - Friday, September 19, 2003 at 10:37:34 (EDT)"

[stevenha]

OH my goodness. That's hilarious. And good work a3dmofo. I did a google search for some of those phrases in that block of text, and it was full, with that phrase, and others similar to it! That's a real eye opener. Can you elaborate on how you tracked this one down.. and also comment on the source of the apparent variations.