Forum Moderators: open

Message Too Old, No Replies

TkBot

         

lucy24

2:51 am on May 12, 2021 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



IP: changes on each visit, but probably all China
UA: Mozilla/5.0 (compatible; TkBot/0.1; +In_the_test_phase,_if_the_spider_brings_you_trouble,_please_add_our_IP_to_the_blacklist._Thank_you.)
robots.txt: no
Requests: two / per visit, with and without www
Protocol: HTTP
Happily, they came in with assorted header deficits, so there was no need to follow the_advice_in_the_ua_string. I don't know if they would have followed an HTTPS redirect; since they were blocked at the gate, the issue did not arise. I looked up one IP at random: Tencent.

Scheduled posting? How long has that been a thing and I never noticed?

not2easy

3:34 am on May 12, 2021 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



Never seen the TkBot (yet)..

Scheduled posting is not new, mainly used for announcements and article topics so they don't pile up at the same time. I do not think I've ever used it. (yet)..

iamlost

4:40 am on May 12, 2021 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Maybe a half dozen attempted visits since mid April also all from Tencent cloud.

Quick look elsewhere: it has been reported coming from many cloud hosts including AWS in US and Telus in Canada.
Portscans reported as well as brute force attacks.

So many bad bad bots out there.