Forum Moderators: open

Message Too Old, No Replies

bigfinder

Bad German bot

         

Dijkgraaf

11:34 pm on Sep 21, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



UA: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; eSobiSubscriber 2.0.4.16; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)

IP: 83.133.125.nnn
robots.txt: No
Behaviour: Did a conditional fetch on home page (HTTP Status 103, with 0 bytes in response) and had it's home page as the URL.

Project Honeypot
Geographic Location [Germany] Germany (Hausham, Bayern)
Spider First Seen approximately 1 year, 6 months, 2 weeks ago
Spider Last Seen within 2 weeks
Spider Sightings 14 visit(s)
User-Agents seen with 7 user-agent(s)
Threat Rating 19

First Bad Host Appearance approximately 3 months, 2 weeks ago
Last Bad Host Appearance within 3 months, 2 weeks
Bad Host Appearances 31 appearance(s) in spam e-mail or spam post urls

User Agent Strings
Mozilla/3.01 (compatible;)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; de)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506)
T-Online Browser
T-Online Browser (Windows NT 5.1; U; de)

enigma1

11:54 am on Sep 23, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



It also changes the UA between visits from what I see in my logs, so maybe is not a spider just another open proxy service.