Prev: I BUY used, new and refurbed Sun, Cisco, Lucent, Nortel, Alcatel, 3com, IBM, HP, Compaq, Dell, Madge, Cabletron, Juniper Networks, Bintec, Siemens, Foundry, Networks, Extreme Networks, Fore/Marconi, Tellabs Lucent/Avaya/Ascend, Xylogics, Brocade, I
Next: Barrage of repeated requests for large files on my server from bots... what to do?
From: bz on 7 May 2008 05:30
richard k zad <richkzad(a)gmail.com> wrote in news:c9f6d507-a64d-463b-95a7-
6ccb7d13f778(a)w1g2000prd.googlegroups.com:

> An example of one of the bots from the access_log:
> 211.139.255.10 - - [06/May/2008:22:45:31 -0400] "GET /videos/content/
> 439_poppy2606.wmv HTTP/1.1" 403 317 "http://www.173la.cn/u/egao/"
> "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; )"
> (Notice it's 403 because I'm blocking them myself)
>

according to whois -h whois.apnic.net
[quote]
Please send abuse e-mail to
remarks: chenxi(a)gd.chinamobile.com
remarks: Please send probe e-mail to
remarks: chenxi(a)gd.chinamobile.com
[unquote]

Of course you could bloock all china.

05/07/08 04:24:16 Fast traceroute 211.139.255.10
Trace 211.139.255.10 ...
.....
7 4.69.132.77 61ms 55ms 56ms TTL: 0 (ae-
3.ebr2.LosAngeles1.Level3.net ok)
8 4.69.137.22 55ms 53ms 52ms TTL: 0 (ae-72-
72.csw2.LosAngeles1.Level3.net ok)
9 4.68.20.69 51ms 57ms 52ms TTL: 0 (ae-23-
79.car3.LosAngeles1.Level3.net ok)
10 62.156.138.69 54ms 89ms 55ms TTL: 0 (No rDNS)
11 62.154.14.105 310ms 354ms 207ms TTL: 0 (lax-
sa1.LAX.US.net.DTAG.DE ok)
12 62.154.5.205 210ms 208ms 208ms TTL: 0 (hkg-
sa1.HKG.HK.net.DTAG.DE ok)
13 217.239.41.10 208ms 209ms 348ms TTL: 0 (No rDNS)
14 217.6.24.138 280ms 247ms 265ms TTL: 0 (No rDNS)
15 218.200.253.237 262ms 250ms 250ms TTL: 0 (No rDNS)
16 211.136.3.57 243ms 236ms 235ms TTL: 0 (No rDNS)
17 211.136.6.34 270ms 259ms 262ms TTL: 0 (No rDNS)
18 211.139.135.70 269ms 256ms 260ms TTL: 0 (No rDNS)
19 211.139.254.3 278ms 254ms 267ms TTL: 0 (No rDNS)
20 211.139.255.10 271ms 264ms * TTL:244 (No rDNS)

The lack of rDNS shows they are rather clueless.
You might complain to HKG.HK.net.DTAG.DE about the bots
It looks like HKG may be Hongcong and



--
bz

please pardon my infinite ignorance, the set-of-things-I-do-not-know is an
infinite set.

bz+csm(a)ch100-5.chem.lsu.edu remove ch100-5 to avoid spam trap
 | 
Pages: 1
Prev: I BUY used, new and refurbed Sun, Cisco, Lucent, Nortel, Alcatel, 3com, IBM, HP, Compaq, Dell, Madge, Cabletron, Juniper Networks, Bintec, Siemens, Foundry, Networks, Extreme Networks, Fore/Marconi, Tellabs Lucent/Avaya/Ascend, Xylogics, Brocade, I
Next: Barrage of repeated requests for large files on my server from bots... what to do?