Welcome to WebmasterWorld Guest from 23.20.137.66

Forum Moderators: Ocean10000 & incrediBILL

Message Too Old, No Replies

bigpond dot net dot au

bot or end-user?

     
11:47 am on Feb 1, 2012 (gmt 0)

10+ Year Member



cpe-121-216-42-***.lnse1.ken.bigpond.net.au
(removed last 3 digits until I know more).
Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)
===

One of my sites received a lot of bot-like activity from this IP last night. It hit almost every .php file, .css file and second-level directory on my site but called no images or .js, etc.

I thought this was strange considering it had no specific U-A to identify itself as belonging to any particular organisation and it didn't even bother looking at robots.txt. Also, there were no referring URL's whatsoever.

Anyone have any more info on it or it's activity?

Thanks in advance.
6:59 pm on Feb 1, 2012 (gmt 0)

WebmasterWorld Senior Member wilderness is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



deny from 121

solves this ;)

however bigpound is a major internet provider.
7:07 pm on Feb 1, 2012 (gmt 0)

10+ Year Member



Is this activity common then?

Blocking them would have no effect on the site in question but I may hold off for now and see how it goes.
7:23 pm on Feb 1, 2012 (gmt 0)

10+ Year Member



bigpond (not bigpound) is THE biggest ISP in Australia - both .net and .com domains
7:25 pm on Feb 1, 2012 (gmt 0)

10+ Year Member



Thanks (coincidence, was just listening to the track of your name!)

Anyhow, I mean the unusual activity, is this something know from this ISP ?

Thanks
7:28 pm on Feb 1, 2012 (gmt 0)

WebmasterWorld Senior Member 5+ Year Member



- Check the IP at projecthoneypot.org [projecthoneypot.org...]

Look at the number of type of UAs and whether there are any comments.

- Google the IP (to see if it shows up on anti-spam forums, etc.).
9:45 pm on Feb 1, 2012 (gmt 0)

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member



I have only a few bad IPs from that range, nothing since September, and all single hits from compromised (ie virus'd) computers.

Telstra (bigpond) in general, I have about 160 bad IPs going back a couple of years. Not too bad. I need to keep it open for genealogy lists and contacts.

I block MSIE 7.0b. It's way past beta time and I only see it now as "bot" activity.
10:40 pm on Feb 1, 2012 (gmt 0)

10+ Year Member



Good point, thank you.
 

Featured Threads

Hot Threads This Week

Hot Threads This Month