Hot Jobs spoofing as.

[keyplyr]

Busted! Hot Jobs dot com (Y!) spoofing as Google Mediapartners (one of many attempts.)

216.109.121.42 - - [08/Dec/2007:20:59:24 -0500] "HEAD /mypage.html HTTP/1.0" 403 0 "-" "Mediapartners-Google"

[blend27]

I have this UA from that IP on the 30th of November

Mozilla/5.0 (compatible; del.icio.us-thumbnails/1.0; FreeBSD) KHTML/4.3.2 (like Gecko)

No robots.txt was read, took a look at homepage and left.

blend27

[wilderness]

Have three different Class D's using three different UA's from 2005. (one of which was some type of language translator).

Have had their Class C range denied since.

[Hobbs]

33 hits from the .41 as:

"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1; .NET CLR 1.1.4322)"

"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"

"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1; .NET CLR 1.1.4322) (via babelfish.yahoo.com)"

babelfish.yahoo.com
"Mozilla/5.0 (compatible; del.icio.us-thumbnails/1.0; FreeBSD) KHTML/4.3.2 (like Gecko)"

Mozilla/5.0 (compatible; Konqueror/3.4; FreeBSD) KHTML/3.4.2 (like Gecko)"

"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506)"

216.109.112.0/20 is HotJobs.com, Ltd

[DamonHD]

What are they gaining from this?

Why is HotJobs spidering third-party sites, or is some external user abusing HJ as a proxy?

Rgds

Damon

[volatilegx]

or is some external user abusing HJ as a proxy?

Sounds like a likely explanation to me.