bingbot/3.0-alpha

[Angonasec]

As if... *Sigh*

37.115.187.54 - - [24/Mar/2015] "GET /robots.txt HTTP/1.1" 403 293 "-" "Mozilla/5.0 (compatible; bingbot/3.0-alpha; +http://www.bing.com/bingbot.htm)"

37.115.0.0/16 Kyivstar GSM, Kiev, Ukraine. Still ber...locked!

[lucy24]

I'm sure I posted about this somewhere.

:: shuffling papers ::

Oh, I just mentioned it tangentially on the first page of the current SSID thread [webmasterworld.com] (as usual, fragment link flatly refuses to work):

I've been deriving some amusement from a Ukrainian robot calling itself

Mozilla/5.0 (compatible; bingbot/3.0-alpha; +http://www.bing.com/bingbot.htm)

It crawls from 46.118.various. Lending verisimilitude to the UA, it asks for robots.txt as many as five times on a single visit.

[Angonasec]

You are all invited to join me in blocking 37. and 46. to keep out such reprobates.

[lucy24]

join me in blocking 37. and 46.

You and wilderness ;)

They're not all Ukrainian server farms in those ranges. It just seems that way sometimes.

[wilderness]

dat taint all (nor this):

RewriteCond %{REMOTE_ADDR} ^3[679]\.

RewriteCond %{REMOTE_ADDR} ^4[1369]\. [OR]

[keyplyr]

They're not all Ukrainian server farms in those ranges.

They're not server farms at all, just a few compromised accounts. Kyivstar & Golden Telecom are ISPs and I get a little human traffic from those ranges. I do agree that hack attempts come from these ranges on a daily basis; just need to set-up blocks with a surgical approach.

37.115.0.0/16
37.115.128.0 - 37.115.255.255

46.118.0.0/15
46.118.0.0 - 46.119.255.255

94.153.0.0/18
94.153.0.0 - 94.153.127.255

134.249.0.0/16
134.249.0.0 - 134.249.255.255

[Angonasec]

Sadly, appalling ethics are not confined to; Ukraine, nor to any particular nation, ISP, humans, or robots.

[lucy24]

They're not server farms at all, just a few compromised accounts.

Oh, I know; in fact it's a Man Bites Dog headline-worthy day when I find an actual server farm in eastern Europe. That's why I've been going over to the bad_russia redirect. In the remote chance that an actual human accidentally replicated the behavior of an undesirable robot, they are then free to continue to the originally requested page. And if not, I've saved myself a chunk of bandwidth, since they seem to like large pages.

[keyplyr]

I just ignore them range-wise since all the wp-, admin, etc hits get blocked anyway. I stay away from redirects cause I'm mobile-responsive and I want to keep my 100% score hoping for high ranking in next Wednesdays mobile search algo update :)

[lucy24]

Next Wednesday?! Oh, even Google would not be so evil. I thought D-Day was the 21st...

[keyplyr]

April Fool :)




(even though it's supposed to be *on* April 1st instead of *about* April 1st it was still very satisfying)