Forum Moderators: open

Message Too Old, No Replies

iearthworm - yahoo-related or not?

User agent string "iearthworm@yahoo.com.cn"

         

Marino

11:09 am on Mar 9, 2009 (gmt 0)

10+ Year Member



Hello all,

My site has been hit some hundred times by a bot "iearthworm", always requesting the same image. I have found an old post about it (http://www.webmasterworld.com/search_engine_spiders/3095061.htm).


203.209.253.nnn - - 07/Mar/2009:05:50:33 +0100 GET /dist/feed.png HTTP/1.1 403 1230 - iearthworm/1.0, iearthworm@yahoo.com.cn
203.209.253.nnn - - 28/Feb/2009:09:11:06 +0100 GET /dist/feed.png HTTP/1.1 302 537 iearthworm/1.0, iearthworm@yahoo.com.cn
203.209.253.nnn - - 01/Mar/2009:23:49:15 +0100 GET /dist/feed.png HTTP/1.1 302 537 iearthworm/1.0, iearthworm@yahoo.com.cn

Is this thing really yahoo-related? The whois record says no, so I guess it's a spam bot. Some referers are images, but are in fact redirections through .htaccess. I banned the string iearthworm and the IP.

Regards,

Marino

[edited by: incrediBILL at 5:06 pm (utc) on Mar. 9, 2009]
[edit reason] obscured IPs, removed referal specifics [/edit]

Marino

1:21 pm on Mar 13, 2009 (gmt 0)

10+ Year Member



Definitely banned it as it kept on requesting the very same image, again and again.

GaryK

4:05 pm on Mar 13, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I've seen the first one as recently as February of this year. The second one hasn't shown up since December of last year. Reverse DNS indicated they were not from Yahoo. Although with Yahoo's track record sometimes it's hard to make such a definitive statement. Still, I am reasonably confident it's not from Yahoo. Anything with iearthworm in it has been banned.

iearthworm/1.0, iearthworm@yahoo.com.cn
iearthworm/1.0, mailto:iearthworm@yahoo.com.cn