Forum Moderators: open

Message Too Old, No Replies

ParchedAnalysisAgent

(distributed HTTP access/referer spammer)

         

Pfui

4:57 am on Dec 30, 2009 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



mail.24*communications.com
Mozilla/5.0 (compatible; ParchedAnalysisAgent/8.0; http://www.parchednomore.com)

robots.txt? NO
Fake ref/Log spam? YES, the UA's URL

Same host also unleashed SMAgent / SMAnalysisAgent / smhelper.com [webmasterworld.com] in the same manner. All connected in some way to "Wasabi Ventures"; and hosted via dreamhost.com.

From search results, the 'parched' UA/site's part of just another paid-for log spam scheme with site-specific, so-called 'analysis agents.'

Pfui

8:38 pm on Jan 3, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



And yet another variation, hitting a different site:

mail.24*communications.com
Mozilla/5.0 (compatible; HealthAnalysisAgent/1.0; http://www.healthdump.com)

robots.txt? NO
Fake ref/Log spam? YES, the UA's URL

If you want to block the Host... The * is a number between 6 and 8.

: )

wilderness

1:06 am on Jan 4, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



There have always been big abuses in the Shaw IP ranges.

It's possible that the provider has a specific range for selling hosting services, however I'm not aware of any such designation.

Pfui

8:16 pm on Jan 4, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Search results indicate a number of Hosts/IPs connected-to and/or used by an (apparent) owner in the business of selling distributed HTTP access/referer 'advertising' campaigns. (I'm being purposefully vague because I don't want to plug his stuff and use any key phrases.)

In short, it's just traffic blasting via log spam and junk UAs.

Thus for me, the most significant number is -- yeah, you guessed it -- 403.

: )

Pfui

10:14 pm on Jan 7, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



See also:

cipherkey.net linked to a wide variety of bad bots
DFAgent/DivineFlowersExplorer, FinancialAnalysisAgent, LegalX Deep Analyzer
[webmasterworld.com...]