Forum Moderators: open

Message Too Old, No Replies

dedibox.fr

Badly behaved bot returns only slightly better behaved.

         

Dijkgraaf

1:52 am on Oct 29, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Old UA: mozilla
New UA: Mozilla/5.0 (Windows; U; Windows NT 6.1; fr; rv:1.9.2.9) Gecko/20100824 Firefox/3.6.9 GTB7.1

IP: 88.190.11.nnn
rDNS: sd-nnnnn.dedibox.fr
robots.txt: No

First visited me in July asked for the root page and then robots.txt and then went wild with 374 more requests in 4 minutes, of those 227 were requests where it had concatenated sub folders and items in the root folders together to ask for things that don't exist
This time it only requested a single page but no robots.txt.
So a bit better behaved, but still a FAIL as no robots.txt or a UA declaring itself.

Pfui

4:59 am on Oct 29, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I've got loads of notes about bad bots from dedibox.fr, ditto badly behaved maybe-people. Point is, I don't think there's a single dedibox.fr bot but rather that the company may be a bot and spammer haven (if only because of its size).

For example, about one of its ranges (88.191.3.0 - 88.191.248.255): [webmasterworld.com...]

Now that the bot's cloaked itself, could you please provide the Project Honey Pot link for the IP you spotted? TIA

dstiles

10:59 pm on Oct 29, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I had 88.160/11 down as broadband with a small hosting block near the end. After checking again (thanks guys!) I find at least 88.190/15 is hosting.

Can I assume that's all there is or is the rest of the /11 cloud or some such?

(These clouds are becoming a nightmare to trace!)

Dijkgraaf

12:22 am on Nov 1, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Project Honeypot doesn't have any information on that IP address yet, although one user has already left a comment about it.