Welcome to WebmasterWorld Guest from 54.91.4.56

Forum Moderators: Ocean10000

Message Too Old, No Replies

LegalX Deep Analyzer

(née WideCircles Analysis Agent)

     
5:41 pm on Sep 11, 2009 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Nov 5, 2005
posts: 2041
votes: 1


node0.grid1.<redacted>.com - - [11/Sep/2009:10:15:37 -0700] "GET / HTTP/1.1" 403 210 "http://www.legalx .net" "LegalX Deep Analyzer ( http://www.legalx.net ) http://www.legalx.net"

robots.txt? NO

Ua string format continues to be miscoded. Also, bot-runner and spammed site are in the same range as before.*

There should be sanctions against any site meta tag-spamming spamming the word "attorney" at least 24 times, ditto the word "lawyer" at least 25 times. So smarmy.
-----

*Prior discussion about similar UA from same Host/IP (June, 2009, thread too old for replies):

WideCircles Analysis Agent [webmasterworld.com]

[edited by: incrediBILL at 8:06 am (utc) on Jan 12, 2014]
[edit reason] fixed formatting and redacted domain name [/edit]

7:59 pm on Oct 11, 2009 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:May 14, 2008
posts: 3244
votes: 18


You don't mention the IP but in your linked reference it was in the 65.110.11.n range.

Just had this hit from 209.205.91.nn (Cipherkey Exchange Corp 209.205.64.0 - 209.205.111.255)

UA: LegalX Deep Analyzer ( http://www.legalx.net ) <a href="http://www.legalx.net">http://www.legalx.net</a>

Referer: http://www.legalx.net

Any reason not to block cipherkey?

[edited by: incrediBILL at 5:31 am (utc) on Oct. 26, 2009]
[edit reason] fixed link [/edit]

10:45 pm on Oct 11, 2009 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Nov 5, 2005
posts: 2041
votes: 1


No reason at all not to block that I can see. The no-robots.txt activity is unwarranted, and unwanted:

zz20920591035.cipherkey.net - - [02/Oct/2009:05:04:16 -0700] "GET / HTTP/1.1" 403 210 "http://www.legalx.net" "LegalX Deep Analyzer ( http://www.legalx.net ) http://www.legalx.net"

robots.txt? NO

Both cipherkey and <redacted> crawl from Vancouver, B.C., so I suspect they're related more than geographically.

[edited by: incrediBILL at 8:07 am (utc) on Jan 12, 2014]
[edit reason] fixed formatting and redacted domain [/edit]

9:48 pm on Oct 23, 2009 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Nov 5, 2005
posts: 2041
votes: 1


Variation on a theme with this bad bot-running, fake-referring, links-in-log-spammer of a Host:

z2092059nnnn.cipherkey.net
SocialPark Website Content Analysis Agent( http://www.socialpark.net ) <a href="http://www.socialpark.net">Social Media Advertising</a>

robots.txt? NO

Spam ref: http://www.socialpark.net

11:16 pm on Oct 23, 2009 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Feb 16, 2007
posts:846
votes: 0


FWIW, I'm seeing legit human visits from TELUS/Cypherkey. Looks like it needs fine-grained access rules, much like 38.0.0.0/8

209.53.175.nnn 209.53.189.nnn 209.53.195.nnn (zz195nnn.cipherkey.net)

9:31 pm on Nov 21, 2009 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Nov 5, 2005
posts: 2041
votes: 1


zz20920591035.cipherkey.net
Mozilla/5.0 (compatible; FinancialAnalysisAgent/1.0; http://www.ifsdb.com)

robots.txt? NO
spam ref? YES: http://www.ifsdb.com

Yet another UA/log spam combo from the fakers at cipherkey.

10:15 pm on Jan 7, 2010 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Nov 5, 2005
posts: 2041
votes: 1


See also:

cipherkey.net linked to a wide variety of bad bots
DFAgent/DivineFlowersExplorer, FinancialAnalysisAgent, LegalX Deep Analyzer
[webmasterworld.com...]

ParchedAnalysisAgent
(distributed HTTP access/referer spammer)
[webmasterworld.com...]

10:28 pm on Jan 7, 2010 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:May 14, 2008
posts: 3244
votes: 18


For what it's worth, I found cipherkey ranges at:

66.51.128.0 - 66.51.143.255
209.53.193.0 - 209.53.214.255
209.139.240.0 - 209.139.247.255

All now blocked.

Is it worrying that their DNS is at verisign?

11:30 pm on Jan 7, 2010 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:12913
votes: 893


In addition to the previously mentioned, Cipherkey also sends trouble from these ranges:

65.110.0.0/19
209.205.64.0/19
209.205.96.0/20

6:46 pm on Mar 12, 2010 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Feb 16, 2007
posts:846
votes: 0


And a new-ish UA:
Mozilla/5.0 (compatible; LegalContentAnalysis/1.0; [spammed-url])
 

Join The Conversation

Moderators and Top Contributors

Hot Threads This Week

Featured Threads

Free SEO Tools

Hire Expert Members