Roger finds another 'creepy crawler':
12.148.209.198 - - [21/Feb/2003:05:45:13 +0000] "GET /robots.txt HTTP/1.1" 404 300
12.148.209.198 - - [21/Feb/2003:06:08:01 +0000] "GET / HTTP/1.1" 200 7651
12.148.209.198 - - [21/Feb/2003:06:43:01 +0000] "GET /gate/archive.html HTTP/1.1" 401 493
12.148.209.198 - - [21/Feb/2003:07:21:54 +0000] "GET /gate/video.html HTTP/1.1" 401 493
12.148.209.198 - - [25/Feb/2003:11:29:35 +0000] "GET /robots.txt HTTP/1.1" 404 300
12.148.209.198 - - [25/Feb/2003:12:00:44 +0000] "GET /gate/album/index.html HTTP/1.1" 401 493
12.148.209.198 - - [25/Feb/2003:12:31:26 +0000] "GET /gate/archive.html HTTP/1.1" 401 493
12.148.209.198 - - [25/Feb/2003:13:04:24 +0000] "GET /gate/video.html HTTP/1.1" 401 493
12.148.209.198 - - [09/May/2003:20:18:32 +0100] "GET /robots.txt HTTP/1.1" 404 300
12.148.209.198 - - [09/May/2003:20:18:32 +0100] "GET /gate/album/index.html HTTP/1.1" 401 493
12.148.209.198 doesn't resolve on a reverse dns lookup. but further investigation turns up: this link, which leads to http://www.nameprotect.com
Interesting to see the words they are looking for: album, archive, video. at least they first look for robots.txt.
I'm getting hooked on access_log!
I should note that Roger's 'blog and mine are hosted on the same server, run by a guy who lives up to his motto "World's worst ISP". We have to grep the Apache logs to find the hits just for our sites, 2 among the six hosted by this guy. He's lazy, and can't be bothered to configure Apache to spit out separate logs... a least this 'bot is relatively polite...
10:48:50 PM
|