Fake AV

log spammer?

[wilderness]

I'm not sure if this is a log spammer or not.
Neither am I sure of the entire crawling is even AV.

Three times today, I've had referrers mixed in with a supposed AV slow crawl. These referrers are in fact log spam. One instance was even one of my own pages. I've looked at the other two referrers and one is most defintely spam. The other a Danish reference, I'm unable to get a decent translation.

In the event the AV crawl is genuine?
It almost appears as if the log spamming is a reaction to the AV crawl, much like the internet worms related emails.

In the past I might have jumped the gun and denied AV entirely. The SE was dormat for a while. However, recently I'm getting some decent referrals from AV.
As a result, I'm just not sure what action will be taken on my end at this point.

Don

Almost slipped through the cracks :(
All the IP ranges are AV numbers

[jdMorgan]

Does what you're seeing tie in with this [webmasterworld.com] active thread?
Do the IPs look legitimate?

Jim

[wilderness]

Jim,
I don't believe it's the same.

All these are coming from 216.39.48.201 with Scooter 3.3 as the UA.
The IP does appear legitimate. However, two of the three referrers are most deifintely log spam, which leads me to believe that the IP is faked.

Most recently I've had active spidering from Scooter 3.3 SF and the IP 216.39.50.155

Don