Welcome to WebmasterWorld Guest from 50.19.0.90

Forum Moderators: Ocean10000 & incrediBILL

Message Too Old, No Replies

bigpond dot net dot au

bot or end-user?

     
11:47 am on Feb 1, 2012 (gmt 0)

Full Member

10+ Year Member

joined:May 24, 2005
posts: 211
votes: 0


cpe-121-216-42-***.lnse1.ken.bigpond.net.au
(removed last 3 digits until I know more).
Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)
===

One of my sites received a lot of bot-like activity from this IP last night. It hit almost every .php file, .css file and second-level directory on my site but called no images or .js, etc.

I thought this was strange considering it had no specific U-A to identify itself as belonging to any particular organisation and it didn't even bother looking at robots.txt. Also, there were no referring URL's whatsoever.

Anyone have any more info on it or it's activity?

Thanks in advance.
6:59 pm on Feb 1, 2012 (gmt 0)

Senior Member

WebmasterWorld Senior Member wilderness is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Nov 11, 2001
posts:5408
votes: 2


deny from 121

solves this ;)

however bigpound is a major internet provider.
7:07 pm on Feb 1, 2012 (gmt 0)

Full Member

10+ Year Member

joined:May 24, 2005
posts: 211
votes: 0


Is this activity common then?

Blocking them would have no effect on the site in question but I may hold off for now and see how it goes.
7:23 pm on Feb 1, 2012 (gmt 0)

Preferred Member

10+ Year Member

joined:May 4, 2003
posts:565
votes: 0


bigpond (not bigpound) is THE biggest ISP in Australia - both .net and .com domains
7:25 pm on Feb 1, 2012 (gmt 0)

Full Member

10+ Year Member

joined:May 24, 2005
posts: 211
votes: 0


Thanks (coincidence, was just listening to the track of your name!)

Anyhow, I mean the unusual activity, is this something know from this ISP ?

Thanks
7:28 pm on Feb 1, 2012 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Nov 5, 2005
posts: 2038
votes: 1


- Check the IP at projecthoneypot.org [projecthoneypot.org...]

Look at the number of type of UAs and whether there are any comments.

- Google the IP (to see if it shows up on anti-spam forums, etc.).
9:45 pm on Feb 1, 2012 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month

joined:May 14, 2008
posts:3089
votes: 2


I have only a few bad IPs from that range, nothing since September, and all single hits from compromised (ie virus'd) computers.

Telstra (bigpond) in general, I have about 160 bad IPs going back a couple of years. Not too bad. I need to keep it open for genealogy lists and contacts.

I block MSIE 7.0b. It's way past beta time and I only see it now as "bot" activity.
10:40 pm on Feb 1, 2012 (gmt 0)

Full Member

10+ Year Member

joined:May 24, 2005
posts: 211
votes: 0


Good point, thank you.
 

Join The Conversation

Moderators and Top Contributors

Hot Threads This Week

Featured Threads

Free SEO Tools

Hire Expert Members