server2.attributor.com

[Cromicon]

This one completley ignores robots.txt and began ripping through my site today after only 1 visit a day for a few days. I've IP banned it for naughty behaviour but does anyone know what it's for?

Guest 66.132.249.23server2.attributor.com5 min 54 sec
Guest66.132.249.23server2.attributor.com5 min 56 sec
Guest66.132.249.23server2.attributor.com5 min 56 sec
Guest66.132.249.23server2.attributor.com6 min 7 sec
Guest66.132.249.23server2.attributor.com6 min 7 sec
Guest66.132.249.23server2.attributor.com6 min 8 sec
Guest66.132.249.23server2.attributor.com6 min 8 sec
Guest66.132.249.23server2.attributor.com6 min 8 sec
Guest66.132.249.23server2.attributor.com6 min 9 sec
Guest66.132.249.23server2.attributor.com6 min 10 sec
Guest66.132.249.23server2.attributor.com6 min 11 sec
Guest66.132.249.23server2.attributor.com6 min 11 sec
Guest66.132.249.23server2.attributor.com6 min 14 sec
Guest66.132.249.23server2.attributor.com6 min 17 sec
Guest66.132.249.23server2.attributor.com6 min 19 sec
Guest66.132.249.23server2.attributor.com6 min 20 sec
Guest66.132.249.23server2.attributor.com6 min 20 sec
Guest66.132.249.23server2.attributor.com6 min 21 sec
Guest66.132.249.23server2.attributor.com6 min 23 sec
Guest66.132.249.23server2.attributor.com6 min 23 sec
Guest66.132.249.23server2.attributor.com6 min 27 sec
Guest66.132.249.23server2.attributor.com6 min 29 sec
Guest66.132.249.23server2.attributor.com6 min 31 sec
Guest66.132.249.23server2.attributor.com7 min 1 sec
Guest66.132.249.23server2.attributor.com7 min 1 sec
Guest66.132.249.23server2.attributor.com7 min 3 sec
Guest66.132.249.23server2.attributor.com7 min 4 sec
Guest66.132.249.23server2.attributor.com7 min 4 sec
Guest66.132.249.23server2.attributor.com7 min 4 sec
Guest66.132.249.23server2.attributor.com7 min 5 sec
Guest66.132.249.23server2.attributor.com7 min 5 sec
Guest66.132.249.23server2.attributor.com7 min 5 sec
Guest66.132.249.23server2.attributor.com7 min 5 sec
Guest66.132.249.23server2.attributor.com7 min 6 sec
Guest66.132.249.23server2.attributor.com7 min 6 sec
Guest66.132.249.23server2.attributor.com7 min 6 sec
Guest66.132.249.23server2.attributor.com7 min 8 sec
Guest66.132.249.23server2.attributor.com7 min 8 sec
Guest66.132.249.23server2.attributor.com7 min 9 sec
Guest66.132.249.23server2.attributor.com7 min 9 sec
Guest66.132.249.23server2.attributor.com7 min 9 sec
Guest66.132.249.23server2.attributor.com7 min 10 sec
Guest66.132.249.23server2.attributor.com7 min 10 sec
Guest66.132.249.23server2.attributor.com7 min 10 sec
Guest66.132.249.23server2.attributor.com7 min 10 sec
Guest66.132.249.23server2.attributor.com7 min 10 sec
Guest66.132.249.23server2.attributor.com7 min 11 sec
Guest66.132.249.23server2.attributor.com7 min 12 sec
Guest66.132.249.23server2.attributor.com10 min 57 sec
Guest66.132.249.23server2.attributor.com11 min 5 sec
Guest66.132.249.23server2.attributor.com11 min 7 sec
Guest66.132.249.23server2.attributor.com11 min 13 sec
Guest66.132.249.23server2.attributor.com11 min 14 sec
Guest66.132.249.23server2.attributor.com11 min 14 sec
Guest66.132.249.23server2.attributor.com11 min 16 sec
Guest66.132.249.23server2.attributor.com11 min 18 sec
Guest66.132.249.23server2.attributor.com11 min 20 sec
Guest66.132.249.23server2.attributor.com11 min 21 sec
Guest66.132.249.23server2.attributor.com11 min 28 sec

[volatilegx]

What's the user agent? Is it "Guest"?

[incrediBILL]

Check this out...

ping Guest66.132.249.23server2.attributor.com
PING premium3.geo.yahoo.akadns.net (68.142.234.37)

nslookup gives a similar but different answer:
nslookup 68.142.234.37
name = p3w3.geo.re2.yahoo.com.

whois 68.142.234.37

OrgName: Inktomi Corporation
OrgID: INKT
Address: 701 First Ave
City: Sunnyvale
StateProv: CA
PostalCode: 94089
Country: US

Yahoo or Yahoo customer?

[edited by: incrediBILL at 7:42 am (utc) on July 12, 2006]

[thetrasher]

Yahoo customer, Bill.
server2.attributor.com ->CNAME-> premium3.geo.yahoo.akadns.net
68.142.234.0 - 68.142.234.255 = Akamai
I saw some spams linking to domains hosted there.

66.132.249.23 = server2.attributor.com (A=none)
One server in a server farm.

Attributor is an early stage company

[wilderness]

This crawl old:
69.0.197.227 - - [18/Dec/2003:16:30:16 -0800] "GET / HTTP/1.1" 200 7871 "-"
"Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)"

Today;

[interland.net...] & interland.com
redirects to a web host of a different name.

[Cromicon]

Begging your pardons, the formatting was a bit screwy.
UA is server2.attributor.com,
IP: 66.132.249.23
And guest is just what my website logs call unidentified visitors.

So judging by the posts here so far it's a yahoo customer running something?

[edited by: Cromicon at 12:04 pm (utc) on July 12, 2006]

[thetrasher]

redirects to a web host of a different name.

They changed [webmasterworld.com] their name.

Cromicon:
Like many pests, this bot came via a mass hosting provider [ws.arin.net]. Yahoo is not involved.

Your guest, the company "Attributor", uses Akamai services for hosting its website. Akamai uses a Yahoo IP range.

[Pfui]

FWIW, from yesterday...

server1.attributor.com
NutchCVS/0.8-dev (Nutch; [lucene.apache.org...] [e-mail])

Asked for robots and / but I 403 Nutch so I can't say if it would've honored it or not.

[edited by: Pfui at 12:14 am (utc) on July 13, 2006]

[incrediBILL]

Confirming the same nutch sighting on 7/11 asking for robots and "/", probably got no further for same reasons.

66.132.249.23 "NutchCVS/0.8-dev (Nutch; [lucene.apache.org...] [e-mail])"

[zCat]

Had the same sighting as Pfui, it didn't get any further than robots.txt and the top page due to my site having a terminal case of Nutch allergy ;).

From the site which the bot appears to come from:

"Attributor is an early stage company that is enabling new landscape-shifting mechanisms for content publishing across the internet. It is led by seasoned Internet entrepreneurs and backed by some of the earliest investors in companies like Google, Skype and Overture."

An "early stage company that is enabling new landscape-shifting mechanisms"? They some kind of matinee-orientated theatrical group providing online backhoe / digger services? Well, if they need my content to advertise their dramatic agricultural / construction machinery they're more than welcome to introduce me to to some of those early investors and their cash ;).

[GaryK]

It's not fair to make me squirt coffee through my nose from laughing so hard zCat. :)

I haven't seen this one yet.

[zCat]

I thing I triggered it by using one of those multiple blog ping services, as its first (and only) hit after robots.txt was the blog directory on the site (which is very new).

Sorry to hear about the coffee, maybe you can develop that as a party trick? ;)