Forum Moderators: open

Message Too Old, No Replies

lanshanbot/1.0

         

bobothecat

9:20 pm on Apr 20, 2006 (gmt 0)



202.96.51.153 - - [20/Apr/2006:04:41:11 -0500] "GET /robots.txt HTTP/1.0" 403 208 "-" "lanshanbot/1.0"
202.96.51.153 - - [20/Apr/2006:04:41:12 -0500] "GET / HTTP/1.0" 403 198 "-" "lanshanbot/1.0"

Tried to read robots.txt and index.html - best I could find about it is:

"Unknown robot from Easten Network China"

Pfui

2:33 am on Apr 21, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I saw it on the 13th and 14th, from 202.96.51.146 (inetnum: 202.96.51.0 - 202.96.51.255).

It was a sneaky devil. Here's just one day's hits -- note the six top-level grabs (redirected away) 15 seconds after every successful robots.txt fetch (where it's disallowed), plus two sub-level attempts, too:

202.96.51.146 - - [13/Apr/2006:01:49:25 -0700]
"GET /robots.txt HTTP/1.0" 200 8339 "-" "lanshanbot/1.0"
202.96.51.146 - - [13/Apr/2006:01:49:40 -0700]
"GET / HTTP/1.0" 302 211 "-" "lanshanbot/1.0"
202.96.51.146 - - [13/Apr/2006:06:31:42 -0700]
"GET /robots.txt HTTP/1.0" 200 8339 "-" "lanshanbot/1.0"
202.96.51.146 - - [13/Apr/2006:06:31:57 -0700]
"GET / HTTP/1.0" 302 211 "-" "lanshanbot/1.0"
202.96.51.146 - - [13/Apr/2006:10:53:38 -0700]
"GET /robots.txt HTTP/1.0" 200 8339 "-" "lanshanbot/1.0"
202.96.51.146 - - [13/Apr/2006:10:53:53 -0700]
"GET / HTTP/1.0" 302 211 "-" "lanshanbot/1.0"
202.96.51.146 - - [13/Apr/2006:15:07:06 -0700]
"GET /robots.txt HTTP/1.0" 200 8339 "-" "lanshanbot/1.0"
202.96.51.146 - - [13/Apr/2006:15:07:21 -0700]
"GET / HTTP/1.0" 302 211 "-" "lanshanbot/1.0"
202.96.51.146 - - [13/Apr/2006:15:15:59 -0700]
"GET /directory/ HTTP/1.0" 302 211 "-" "lanshanbot/1.0"
202.96.51.146 - - [13/Apr/2006:19:26:50 -0700]
"GET / HTTP/1.0" 302 211 "-" "lanshanbot/1.0"
202.96.51.146 - - [13/Apr/2006:19:36:34 -0700]
"GET /directory/ HTTP/1.0" 302 211 "-" "lanshanbot/1.0"
202.96.51.146 - - [13/Apr/2006:23:34:55 -0700]
"GET /robots.txt HTTP/1.0" 200 8339 "-" "lanshanbot/1.0"
202.96.51.146 - - [13/Apr/2006:23:35:10 -0700]
"GET / HTTP/1.0" 302 211 "-" "lanshanbot/1.0"

Did/tried pretty much the same thing the next day, all over again. Same forbidden fruit, too. I figure if I see it again, it's a goner.