Another really stupid web spider

May 10, 2006

I have to take back what I said just the other day about having seen the worst stealth spider I'd ever seen. The day after I wrote that entry, I saw a worse case.

Like the first one, they made two valid requests to start with and then followed them up with 65 bad ones, all in the span of 11 seconds. Also like the first one, all their requests were bad because they couldn't deal with absolute paths in <a href="...">. But they topped the first one because they lowercased all the URLs.

This right here is me clutching my head like a stunned monkey.

All 67 requests came from 69.56.135.218; according to theplanet.com, this is part of 69.56.135.216/29, assigned to 'PQC Service, LLC' of Wilmington Delaware, zip code 19801. All of the machines have generic reverse DNS. (Some Googling suggests that the company runs porn sites.)

Written on 10 May 2006.
« The practical cost of forking in Python
Building a boot floppy for BIOS flashing »

Page tools: View Source, Add Comment.
Search:
Login: Password:
Atom Syndication: Recent Comments.

Last modified: Wed May 10 16:17:40 2006
This dinky wiki is brought to you by the Insane Hackers Guild, Python sub-branch.