Gigamega bot is now known as LiteFinder bot

The same mail harvesters did it again

[malaiac]

<search link snipped>

What is gigamega.net?
gigamega.net is a research project started by a group of Russian candidates from the cities of Saint-Petersburg, Nizhnii Novgorod and Novosibirsk. The project serves as a testing ground for information search technologies and programs, developed by a group of young scientists...

[litefinder.net...]

What is LiteFinder Network Crawler?
LiteFinder Network Crawler is a research project started by a group of Indian candidates from the cities of Bangalore, Patna and Jaipur. The project serves as a testing ground for information search technologies and programs, developed by a group of young scientists...

"Rinse & Repeat"? :)

Known IPs so far
74.86.209.74 host is -templatestill.com-

[edited by: volatilegx at 1:25 am (utc) on Jan. 23, 2008]
[edit reason] removed URL to search link [/edit]

[Loeffler]

Hello malaiac,

Gigamega.bot is a harvester. He collects email addresses
from web sites and adds them to spam mailing lists.

He visited our web page
<snip>
on 25th December 2007 at 02:13 CET.

He identified himself as
"Mozilla/5.0 (compatible; Gigamega.bot/1.0;
+http://www.gigamega.net/bot.html)".

His IP address: 74.86.209.74.

We showed him an email address generated only for him.
We received the first spam for this email address on
27th December 2007.
The email sender was 195.234.132.37.


Gigamega.bot visited our web page
<snip>
on 20th December 2007 at 08:44 CET.

His IP address: 216.40.220.34

We showed him a new email address generated only for him.
We received the first spam for this email address on
7th January 2008.


litefinder.net is a harvester too.

He visited us on 6th November 2007 from 74.86.209.74.
We received the first spam on 11th December 2007.

Visit on 12th November 2007 from 216.40.222.82.
First spam on 17th December 2007.

Visit on 24th November 2007 from 70.85.113.242.
First spam on 17th December 2007.

Visit on 27th November 2007 from 70.85.113.242.
First spam on 28th December 2007.

Visit on 2th December 2007 from 74.86.209.74.
First spam on 27th December 2007

Visit on 2th December 2007 from 74.86.209.74.
First spam on 28th December 2007.

Visit on 9th December 2007 from 75.125.47.162.
First spam on 27th December 2007.

Regards
Andreas.

[edited by: Loeffler at 10:00 am (utc) on Jan. 7, 2008]

[edited by: volatilegx at 10:51 pm (utc) on Jan. 17, 2008]
[edit reason] no URLs please [/edit]