OrgProbe Bot

Warning

[Angonasec]

New to me...

81.187.72.xxx - - [16/Feb/2015] "GET /randompage.htm HTTP/1.1" 403 238 "-" "OrgProbe/0.9.4 (+http://www.blocked.org.uk)"

Purports to be an anti-censorship campaigner bot.

It fires off calls to the same page via a dozen IPs within seconds, from what look like "infected" machines on unblocked mostly UK ISPs.

You have been warned Friends :)

PS. Unrelated: I appear to have discovered (and blocked) +all+ current Sinobots pestering my own domains. +None+ have got in for months now:) Unless they have merely paused, resting for the imminent Gong Xi Fa Chai mayhem?

[Angonasec]

Still calling the following day; for another randomfile name from different UK ISPs.

Begrudgingly chewing 403s from our sites; all of which most definitely support censorship :)

This is the result of blocking punters using ISPs at the dubious end of the scale; and you know their names, if you reside in the UK.

We also try to educate those punters who use nefarious platforms such as; Opera, Blackberry etc.

You know their names, if you watch your raw access logs :)

[blend27]

Whats wrong with Blackberry now?

[Angonasec]

The same as ever :)

[keyplyr]

[webmasterworld.com...]

[lucy24]

Idle query: Why would any robot choose to give itself a name that sounds like an activity reported by the tinfoil-helmet sector?

File alongside parallel unanswerable query of why the Feds would choose to send out email that looks identical to phishing spam. Shrug.

[keyplyr]

The name "OrgProbe" makes me shudder with horrifying memories of the proctologist.

[LifeinAsia]

The name "OrgProbe" makes me shudder with horrifying memories of the proctologist.

Reminds me of my alien abduction...

[keyplyr]

You too?

[Angonasec]

They even went to the trouble of registering a UK org domain... to convince us they have a legitimate agenda.

For those of you employing Medics-with-steely-instruments, you may be bold enough to visit the site in the UA of the thread's first post. I haven't, but if you are so inclined, do try to avoid the proffered "goodies".

[lucy24]

the site in the UA of the thread's first post

You mean it's really "blocked dot org"?! I assumed you just made that up for the post.

But then, I don't think I ever knew that .org.uk was a thing.

It fires off calls to the same page via a dozen IPs within seconds

From their front page, it looks as if that's an essential part of their mission: It isn't a question of whether their robot is blocked from your site, but whether your site is blocked by any major ISP. I think TalkTalk is the one we see most often in this context.

do try to avoid the proffered "goodies"

Heh. I jumped right in to make sure I've never done anything to offend any major British ISP. (Wouldn't have thought so anyway, but one never knows.)

[Angonasec]

Now that was the first "woman's post" I've read of yours Luce :)