UA "MSIE 6.0" (and nothing else)

hit the trap, masquerading bot?

[WebJoe]

FYI:

UA: MSIE 6.0
IP: 217.73.164.106
(belongs to Romanian Education Network)
referrer: http*//www.kwmap.com/

Visited my main page (twice) and grabed one out of many linked pages: the TRAP. No images, external js or css files, nothing. All within the same second.

kwmap and iaqi are some sort of search engine/directory, I haven't quite figured out which.

I banned it.

[wilderness]

visted my sites also.
Contrary to popular believe, I haven't been overly aggressive in denying all of the RIPE ranges.

This one requires aggression :(
SetEnvIf User-Agent ^MSIE 6\.0$ keep_out
deny from 217.73.

[Peeress]

I also got this ...

Host: 217.73.164.106 Url: /my one links page Http Code : 200
Date: Oct 12 18:32:21 Http Version: HTTP/1.0" Size in Bytes: 8414
Referer: http:*//www.kwmap.com/ Agent: MSIE 6.0

I was undecided as it looked very suspicious and went straight to my links page (but did not get caught in trap..yet), but after reading your posts I just banned it.
Thanks!

[WebJoe]

hmmm wilderness, from your post in thread 2347 [webmasterworld.com] one could get the idea that you deny pretty much all of RIPE...

So please apologize if I don't visit your site...due to a ban ;)

[edit reason: typo]

[edited by: WebJoe at 8:31 pm (utc) on Oct. 13, 2003]

[BlueSky]

This little guy is getting around. He visited me today too. Two pages, but didn't go far enough to hit my trap.

[coyote]

I was just going to post a topic about this one.

Hit my trap today and a few other pages.
I'm banning 217.73.164-165 to make sure it won't be coming back. Also banning the referrer kwmap.com.

[lorax]

Interestingly enough, I just got a link request from Kwmap.com. His/her bot at 217.73.164.106 requested only two pages so far this month.

[excell]

"KwMap is a complex keyword refining tool, aiming to help you discover new keywords. It is a fact that search engines can only help you in finding something if you know the right keywords. "

It spiders your site and maps the key phrases..then you get a link request - if you link back to it.. you get the related key phrases etc..

Interesting.. what does anyone else think of this?

[BlueSky]

Interesting.. what does anyone else think of this?

I think they're presenting themselves in a false light and trying to use a gimick to get a lot of inbound links to help their own placement in the SE.

On my site their bot requested two pages -- the homepage and one of the linked pages. It came back four more times and requested the exact same two. That is hardly what I would call adequate spidering or random sampling to use their so called complex keyword refining tool on.

Each time this bot visited it never asked for robots.txt so it has no idea what content is disallowed on a site. That puts it immediately in the bad bot category.

[excell]

Agree, it certainly isn't a good start.

[BlueSky]

I got a couple more visits from these guys today. This time they used a German SE in the referrer field -- websearchde.com. Looks they're now log spamming for other sites. The WhoIs database shows the domain was just created on 3 Nov 2003 and has a US address in Louisville, Kentucky.

[bull]

similar to the one in msg#1, the ip of websearchde.com is the
"Politehnica" University of Bucharest, Romania.