Forum Moderators: open

Message Too Old, No Replies

Cat & Dog

Chinese UA

         

dstiles

5:18 pm on Sep 13, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Just noticed an odd UA from a Chinese IP crop up a few times in the past 24 hours or so.

IP: 124.64.52.nnn

UA: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; cat(http://catx.us/); dog(http://dogx.us/); fat(http://fatx.us/); games(http://ouou.us/); money(http://gougou.us/); music(http://uume.us/); news(http://aoyun.us/); seo(http://seox.us/); stock(http://stockx.us/); traffic(http://youku.us/))

Referer: [iurl.us...] site's home URL)

It hit with the same domain followed by /index.html which has never been an option - it's a dynamic ASP site.

iurl.us uses a US TLD registered by a Chinese company last April. From the home page of the site (viewed with a tool not a browser!) and from google, it claims to be a "tiny url" generator. The home page is written in English.

It hit only a few times across two sites; only one had an improbable page added to the domain.

Pfui

12:43 pm on Sep 18, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Exact same thing cruised by a bit ago, from:

123.113.171.nnn

I've yet to regret 403'ing every single Chinese CIDR I discover one way or another. The number of botnet-involved hits hailing from that part of the world is astonishing

dstiles

1:41 am on Sep 19, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Wish I could, too, but I have a couple of internationally-trading customers who object. Ditto South America. And North America too, really. :)