Forum Moderators: open

Message Too Old, No Replies

kuloko-bot with hidden hostname

coming from "." -- very funny

         

Romeo

10:12 pm on Oct 20, 2003 (gmt 0)

10+ Year Member



... kuloko-bot is spidering my pages at this moment, leaving a hostname of "." in the apache's log, which baffles me.
I had to explicitly switch "HostnameLookups Off" just to see that its IP address is 66.90.81.41.
A reverse NSLOOKUP indeed shows a 41.81.90.66.in-addr.arpa name = "."
Just a try: nslookup www.kuloko.com --> 66.90.81.41.
Very funny ... why do they hide their name on reverse lookups?

Regards,
R.

jdMorgan

6:25 pm on Oct 24, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Romeo,

There is a previous post [webmasterworld.com] on this subject - You might want to compare notes with krzys to see if your servers or DNS lookup paths have anything in common.

Very interesting - It's not just his server, apparently.

Jim
<edit: spelling>

[edited by: jdMorgan at 9:18 pm (utc) on Oct. 24, 2003]

Romeo

8:20 pm on Oct 24, 2003 (gmt 0)

10+ Year Member



thank you for this pointer, jdMorgan, I haven't seen that previous post before.

While Brett Tabke suggests that "our server config and/or logging facility is glitched..." I think, it is not, as I see this behaviour on doing plain NSLOOKUPs on my server as well as on my unrelated workstation here at home.
Doing lookups on some web-based nslookup services (zoneedit.com) show the same:
41.81.90.66.in-addr.arpa PTR (root)
where they call it "(root)" what I see as "." in my own lookups.
I have zillions of correct HostnameLookup entries in the apache's logfiles except those of the kuloko-bot.

Amazing. Something new every day ...
Regards,
R.