Forum Moderators: open

Message Too Old, No Replies

Need help with software ID

         

incrediBILL

7:14 pm on Jul 29, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Here's a weird one because it looks like it's a real live human mixed up in this somehow.

After getting the email asking why he was having trouble accessing my site I reviewed the log files I see the following user agent for most of the hits:

"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; WOW64; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; Media Center PC 5.0)"

This user agent asked for robots.txt a total of 3 times during the course of access, hit my spider trap and then started requesting the same links over and over on my spider trap page for about 200 pages worth, real quick too.

Intermixed with these hits is this user agent which appears to be the human:

"Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.12) Gecko/20080201 Firefox/2.0.0.12"

I don't know if it was 2 different users behind a NAT or an anon proxy, or maybe the machine is compromised, or the guy ran a scraper script that hung and had the audacity to ask me why it got stopped, no clue.

Anyone have any idea whether bredband.comhem.se uses a proxy for outbound traffic?

It certainly didn't send any proxy information if that's the case.

The only other thing I could think of is maybe he's got some kind of RSS feed finder installed such as the old IEAutoDiscovery that goes on a tear through a site.

I'm waiting on a response but people usually have no clue what's installed causing problems.

Any clues so I could offer suggestions to the guy?

[edited by: incrediBILL at 7:16 pm (utc) on July 29, 2008]

wilderness

7:29 pm on Jul 29, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



bredband.comhem.se

WOW64;

The US provider Wide Open West in Sweden?

My BAD!
A thousand apologies.

[en.wikipedia.org...]