A bad bot by any other name...
213.186.122.3.utel.net.ua
Mozilla/5.0 (compatible; AhrefsBot/1.0; +http
://ahrefs
.com/robot/)
08/17 0n:12:30 /robots.txt
08/17 0n:12:32 /robots.txt
But don't let that fool you. The following Project Honey Pot comments [
projecthoneypot.org...] are echoed x3, as recently as last May:
Triple whammy: rule breaker, maliciously malformed URLs and more than 100 hits per minute. User Agent - "Mozilla/5.0 (compatible; SiteBot/0.1; +http[i]://www
.sitebot
.org/robot/)"[/i]
Something's been crawling a while from that IP, by one name or another. Also from Project Honey Pot for 213.186.122.3 --
Mozilla/5.0 (compatible; AhrefsBot/1.0; +http
://ahrefs
.com/robot/)
Mozilla/5.0 (compatible; SiteBot/0.1; +http
://www
.sitebot
.org/robot/)
Mozilla/5.0 (compatible; SiteBot/0.1; +http
://www
.sitebot
.org/robot/),gzip(gfe)
See also [
webmasterworld.com...]
Last but not least...
From last May, an apparently not-so-coincidental neighbor of the above IP:
213.186.120.196.utel.net.ua
Mozilla/5.0 (compatible; SiteBot/0.1; +http://www.sitebot.org/robot/)
robots.txt? Yes...
But don't let that fool you. See even more comments about 213.186.120.196 [
projecthoneypot.org...] a la:
"They claim to be sitebot. Don't ask, just block it. And all other IPs of Ukraine. This is another attempt to "fool webmasters", by giving a "search engine bot" user agent. The main goal is to spam, of course, but I would be surprised if they could not deliver malware as well (SQL.injection and the like)."
(I've redirected .ua for years. Never once had a real person touch base after the fact.)
