Forum Moderators: open

Message Too Old, No Replies

Spambot or linkchecker

spambot, linkchecker, new bot, jazztel .es

         

marodhum

2:17 pm on Dec 15, 2007 (gmt 0)

10+ Year Member



Yesterday i noticed this in my userlog.
38.70.218.** - - "GET /index.html HTTP/1.0" "http://www.example.com/example.html" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1".
It crawled my site for a long time, only asking html pages. It came from one of my link partner site.
So my guess is either it is a spambot or a linkchecker.
I tried google-ing, but could not find any answer.
anybody else did notice it?

[edited by: volatilegx at 1:59 am (utc) on Dec. 16, 2007]
[edit reason] obfuscated ip address [/edit]

keyplyr

5:51 am on Dec 16, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Took a couple dozen .html pges before I caught it and banned the range: 87.218.70.***

Don't know what it is either, but since it is spoofing as a browser and did not request robots.txt, I figure it's malicious.

jazztel .es hosts a wide range of clients, so it's anyone's guess what this is.

wilderness

7:08 am on Dec 16, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



There's old threads on Performance Systems International

marodhum

6:51 pm on Dec 16, 2007 (gmt 0)

10+ Year Member



Thx wilderness and keyplyr, for the info. It came back again and started hitting heavily, it only stops, when it reaches my mailto link. So, my guess, it is a spam harvester. Banned the ip range :)