Forum Moderators: open

Message Too Old, No Replies

OpenfosBot (Korea)

         

Pfui

4:32 pm on Feb 26, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



121.138.194.zzz
Mozilla/5.0 (compatible; OpenfosBot/3.1; +http://www.openfos.com/)

robots.txt? NO

That IP is KORNET, a.k.a. Korean Telecom. The host in the UA, OPENFOS, is also in Korea: 210.116.122.zzz -- WHOIS sez it's a business-to-business directory.

The bot also gave two fake referers (obfuscated with spaces here):

http:// www. google. com/
(Google's refs are never 'plain')

http:// www. None/.Category-Keywords-Snipped.profile.htm
(Love that TLD...)

FWIW: I've long redirected huge chunks of KORNET because of bad/rogue bots and apparent zombies.

incrediBILL

11:35 pm on Feb 28, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I saw this one back in Sept. 08 with different IP and version #

218.153.70.zzz "Mozilla/5.0 (compatible; OpenfosBot/2.4; +http://www.openfos.com)"

thetrasher

1:54 am on Mar 1, 2009 (gmt 0)

10+ Year Member



Google's refs are never 'plain'
[webmasterworld.com ]

Pfui

7:21 pm on Mar 2, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



@thetrasher: I didn't know that. Thanks!

Hmm. Recent months' logs show that 'plain' goo referer hits to three different sites overwhelmingly come from bots and bad hosts/IPs.

Looks like at our end, the risk of one of those bad apps/hosts 'getting lucky' far exceeds the rare real person getting redirected to an offsite page saying to e-mail for access.