__/ [Blinky the Shark] on Saturday 10 September 2005 22:54 \__
> Roy Schestowitz wrote:
>> __/ [Brian Wakem] on Saturday 10 September 2005 18:35 \__
>>
>>> Roy Schestowitz wrote:
>>>
>>>> [Sat Sep 10 07:31:08 2005] [error] [client 218.232.120.86] File does
>>>> not exist: /home/schestow/public_html/robotsxx.txt
>>>
>>>
>>> I just checked my error logs for this year on a busy site. I have 5
>>> reqests for robotsxx.txt, all from 218.232.120.83, which is very
>>> similar to the IP address you noted.
>>>
>>> The IPs trace to Seoul.
>>
>> I'd be far more worried had the file been robotsxxx.txt (triple X). I
>> did some reverse IP lookups in the past and they all appear to come
>> from questionable places. The intention of the requestor is rather
>> mysterious, but I am sure there is a story behind it.
>
> This looks like it *is* kinda related to xxx material. It seems
> associated with this (see a whois on that IP):
>
> http://plantynet.com/plantynet_eng/index.html
Do you reckon it is spam in disguise under variation of a file with good
cause? I really hope not. See below.
__/ [Alan Little] added on Saturday 10 September 2005 20:43 \__
>> <SNIP>
>>
>> One wonders if it could become an alternative to referrer spam. One
>> would hope not. Imagine the horror... comment spam, E-mail spam,
>> referrer spam... and... error log spam. The typical spammer does not
>> mind destruction. Error log Bayesian filters anyone...?
>
> GET /enlarge_YOUR_log_www.bigbeef.com HTTP/1.1
Spammers will sooner or later realise it. It is extremely easy to automate
this. You just shove a list of domains and can spam almost a million per
minute on a thick connection. The whole World Wide Web spammed in just an
hour? Scary thought. Some people are set to received an E-mail when a 404
crops up.
Best wishes,
Roy
--
Roy S. Schestowitz | Useless fact: Florida is bigger than England
http://Schestowitz.com | SuSE Linux | PGP-Key: 74572E8E
3:05am up 17 days 3:36, 3 users, load average: 0.34, 0.38, 0.39
|
|
