LegalX Deep Analyzer

(née WideCircles Analysis Agent)

[Pfui]

node0.grid1.<redacted>.com - - [11/Sep/2009:10:15:37 -0700] "GET / HTTP/1.1" 403 210 "http://www.legalx .net" "LegalX Deep Analyzer ( http://www.legalx.net ) http://www.legalx.net"

robots.txt? NO

Ua string format continues to be miscoded. Also, bot-runner and spammed site are in the same range as before.*

There should be sanctions against any site meta tag-spamming spamming the word "attorney" at least 24 times, ditto the word "lawyer" at least 25 times. So smarmy.
-----

*Prior discussion about similar UA from same Host/IP (June, 2009, thread too old for replies):

WideCircles Analysis Agent [webmasterworld.com]

[edited by: incrediBILL at 8:06 am (utc) on Jan 12, 2014]
[edit reason] fixed formatting and redacted domain name [/edit]

[dstiles]

You don't mention the IP but in your linked reference it was in the 65.110.11.n range.

Just had this hit from 209.205.91.nn (Cipherkey Exchange Corp 209.205.64.0 - 209.205.111.255)

UA: LegalX Deep Analyzer ( http://www.legalx.net ) <a href="http://www.legalx.net">http://www.legalx.net</a>

Referer: http://www.legalx.net

Any reason not to block cipherkey?

[edited by: incrediBILL at 5:31 am (utc) on Oct. 26, 2009]
[edit reason] fixed link [/edit]

[Pfui]

No reason at all not to block that I can see. The no-robots.txt activity is unwarranted, and unwanted:

zz20920591035.cipherkey.net - - [02/Oct/2009:05:04:16 -0700] "GET / HTTP/1.1" 403 210 "http://www.legalx.net" "LegalX Deep Analyzer ( http://www.legalx.net ) http://www.legalx.net"

robots.txt? NO

Both cipherkey and <redacted> crawl from Vancouver, B.C., so I suspect they're related more than geographically.

[edited by: incrediBILL at 8:07 am (utc) on Jan 12, 2014]
[edit reason] fixed formatting and redacted domain [/edit]

[Pfui]

Variation on a theme with this bad bot-running, fake-referring, links-in-log-spammer of a Host:

z2092059nnnn.cipherkey.net
SocialPark Website Content Analysis Agent( http://www.socialpark.net ) <a href="http://www.socialpark.net">Social Media Advertising</a>

robots.txt? NO

Spam ref: http://www.socialpark.net

[caribguy]

FWIW, I'm seeing legit human visits from TELUS/Cypherkey. Looks like it needs fine-grained access rules, much like 38.0.0.0/8

209.53.175.nnn 209.53.189.nnn 209.53.195.nnn (zz195nnn.cipherkey.net)

[Pfui]

zz20920591035.cipherkey.net
Mozilla/5.0 (compatible; FinancialAnalysisAgent/1.0; http://www.ifsdb.com)

robots.txt? NO
spam ref? YES: http://www.ifsdb.com

Yet another UA/log spam combo from the fakers at cipherkey.

[Pfui]

See also:

cipherkey.net linked to a wide variety of bad bots
DFAgent/DivineFlowersExplorer, FinancialAnalysisAgent, LegalX Deep Analyzer
[webmasterworld.com...]

ParchedAnalysisAgent
(distributed HTTP access/referer spammer)
[webmasterworld.com...]

[dstiles]

For what it's worth, I found cipherkey ranges at:

66.51.128.0 - 66.51.143.255
209.53.193.0 - 209.53.214.255
209.139.240.0 - 209.139.247.255

All now blocked.

Is it worrying that their DNS is at verisign?

[keyplyr]

In addition to the previously mentioned, Cipherkey also sends trouble from these ranges:

65.110.0.0/19
209.205.64.0/19
209.205.96.0/20

[caribguy]

And a new-ish UA:

Mozilla/5.0 (compatible; LegalContentAnalysis/1.0; [spammed-url])