Forum Moderators: phranque
The strange thing is that this particular IP address has been doing this for awhile. I thought it was odd, so I banned the IP in .htaccess for about a week. Then, as a test, I removed the ban yesterday. Today I checked the log again and the same IP is back again generating more 404's.
I wouldn't have noticed this in the first place, but there seems to be a pattern. He hits the 404 page several times in close succession very early in the morning, and then about every 30-35 minutes or so throughout the day.
The IP (last part masked off) is 76.31.48.xx. I looked up that IP on Project Honey Pot and there was no exact match, but it seems that there are some known baddies nearby. The user-agent is
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9) Gecko/2008052906 Firefox/3.0
Which is identical to mine, except that I'm using Firefox 3 on Vista.
So, is this some bot that is spoofing a user-agent and referrer? I can't imagine that a real human user would hit the site this often and not bother to contact me asking why they can't get anything other than a 404 page.