Does anyone know who this is?

Forum Moderators: open

Message Too Old, No Replies

Does anyone know who this is?

Being hit nonstop today.

BigJim69

11:34 pm on Apr 19, 2001 (gmt 0)

I can't figure out who's spider this is. It is visiting repeatedly all day long. Anyone see this before?

Host: 194.170.1.130
Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows 95)

Froggyman

2:37 am on Apr 20, 2001 (gmt 0)

Hmmmmmmm!

Might be a little concerned, maybe.....

See the posts by GEM100 [gem100.plebian.com]. Note the IP listed.

Froggyman

2:53 am on Apr 20, 2001 (gmt 0)

You might want to do a thorough security [gem100.plebian.com] check NOW!

Froggyman

4:54 pm on Apr 20, 2001 (gmt 0)

I guess they weren't real happy with me poking around their site :)

It's an underground hacker site. Ban the IP now and moniter your web logs for suspicious activity.

Thanks to Google, you can view the moved pages using the cache [google.com] feature.

Sorry for the unreturned e-mail but considering the current situation I think it wiser to post on safer ground.

Hope this helps.

GEM100

7:48 pm on Apr 20, 2001 (gmt 0)

Hey, I found you from my site logs. I am REDESIGNING my site, but that IP is actually PROXY ip of Etisalat, ISP provider in UAE. Like proxy IPs start from 194.170.xxx.xxx, and real IPs like 213.42.xxx.xxx. Just see the HTTP_X_FORWARDED_FOR env var, instead of REMOTE_ADDR :-) Hell, guys, I wouldn't be on win95... And who the hell would spider you all day long? Something is wrong here...

Froggy: hey, dude, I am NOT underground hacker, LMAO, I just am a bit interested in internet security :-)

And how come someone here knows me??? Who are you people?

littleman

5:09 pm on Apr 26, 2001 (gmt 0)

I just have to say that this was a great thread! Froggy you are good.

BoneHeadicus

5:22 pm on Apr 26, 2001 (gmt 0)

Yes, Froggyman and littleman both can track em down and book em.

GEM100

3:10 pm on Apr 27, 2001 (gmt 0)

How is he good? Hello, that proxy is used by thousands of people here, there is no way to avoid it, it is ISP default censorship proxy. I never saw this site before I have seen HTTP_REFERER from this thread in my site logs. LMAO, whats exactly problem was???

Froggyman

6:30 am on Apr 28, 2001 (gmt 0)

If you guys only knew what I know....

BoneHeadicus

7:03 am on Apr 28, 2001 (gmt 0)

Cough it up Froggyman....what's wrong? You got a, erm, frog in your throat?

GEM100

8:53 am on Apr 28, 2001 (gmt 0)

Froggy: who are you??? You sound sort of funny, you know, trying to make some mystery out of nothing...