Archive for May, 2008

eWatch Bot

This eWatch bot has not requested robots.txt and it is masquerading as a human surfer.
Example visit:
199.230.29.117 – - [23/May/2008:03:32:46 -0400] “GET /blog/ HTTP/1.0″ 200 11225 “-” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)”
This traces back to a PR Newswire service that searches the web for corporations.
IP Address: 199.230.29.117
Reverse IP: app6.ewatch.com
OrgName: [...]

internetserviceteam.com scrapper

Had a cluster of alerts today both from Modsecurity, the robot trap, and LFD caused by a bot from internetserviceteam.com.
This robot spoofs their useragent to make it appear that they are a human surfer using Internet Explorer 6.
A bad robot hit /trap/ 2008-05-11 (Sun)
address is 89.149.244.45, agent is Mozilla/4.0 (compatible; MSIE 6.0; Windows NT [...]