getting hammered by tide544.microsoft.com today

[bakedjake]

... well relatively hammered. Certainly more than I would expect.

IP: 131.107.0.114
UA: "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)"

It's crawling landing pages; it has requested each landing page about 20 times today. But it keeps doing it over and over again, like it's expecting something different to happen.

And the requests are becoming more frequent as the day goes on.

[lucy24]

Curious. Quick search through raw logs tells me I've had precisely one recent visit from this range.

131.107.0.114, apparent human*, a few weeks ago, via-- hmmmmm --Bing search.

UA-- double hmmmmm --Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)

Is your guy getting only the page, or the associated files as well?


* All subsidiary files plus piwik; plausible search string.

[wilderness]

This Class C has long been a proving grounds for MS Products, in fact, there are multiple old threads from 2003, and when MSN began crawling unidentified from this IP as they prepared to enter the SE world.

FWIW, I was just teasing keyplr about this range in another thread.

[dstiles]

I've had 131.107/16 blocked for ever-ish. Certainly several years. I'm not even sure it's true MS - the activity I used to see was very scraper-ish and looked more like leased server activity.

[wilderness]

dstiles,
You may be correct about the ownership, I didn't check.

However, when MS started using that IP in 2003, the range wasn't registered to them either.