---

[ January Full List | Reply ]

---

Re: Is our site under attack? From Jeff on 6 Jan '01 replying to Re: Is our site under attack? posted by Sam >It sounds like a spambot to me (an email address harvester). The >HTTP_USER_AGENT environment variable would tell you for sure. Also, >Are you getting any HTTP_REFERER info? Where would I find this HTTP_USER_AGENT and HTTP_REFERER info? I presume we'd have to look into our ISP's server logs to get that. I guess we could ask our host for the logs. I'm seeing the source of the hits in our Tracker program that just shows something like 151.155.123.456 (the last two groups vary). Our Simple Tracker gives either the IP of a visitor, or text that is usually something like: spider-wd034.proxy.aol.com (that's an easy one!) Interesting point about it maybe being an address harvester, but page only contains one email address, surely not worth a thousand visits.

Reply to this message
Required Details
Your name:
Subject:

Optional Details
Home page title:
Home page URL:
Email:	(if you'd like to receive automatic replies by email)
Your Message
>>It sounds like a spambot to me (an email address harvester). The >>HTTP_USER_AGENT environment variable would tell you for sure. Also, >>Are you getting any HTTP_REFERER info? > > >Where would I find this HTTP_USER_AGENT and HTTP_REFERER info? I presume >we'd have to look into our ISP's server logs to get that. I guess we >could ask our host for the logs. > >I'm seeing the source of the hits in our Tracker program that just shows >something like 151.155.123.456 (the last two groups vary). > >Our Simple Tracker gives either the IP of a visitor, or text that is >usually something like: spider-wd034.proxy.aol.com (that's an easy one!) > >Interesting point about it maybe being an address harvester, but >page only contains one email address, surely not worth a thousand >visits. > > >