Distributed referer log spamming?

I always look at my web server logs, I find the various log spammers, bots and RSS readers really interesting. About a week ago I noticed a lot of log spamming all in a short period of time and thought something must be going on but waited till it happened again.

Today again I got 5 log spam attempts in a very short interval from different IP addresses. As this is the 2nd time this happens I can only imagine this is 5 machines that is acting in a coordinated fashion.

64.69.172.9 - - [16/Apr/2004:15:29:46 +0100] "GET / HTTP/1.0" 200 32759 "http://www.nudecelebblogs.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

201.128.123.11 - - [16/Apr/2004:15:33:09 +0100] "GET / HTTP/1.0" 200 32759 "http://paris-hilton-video.blogspot.com" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

212.163.30.100 - - [16/Apr/2004:15:34:15 +0100] "GET / HTTP/1.0" 200 32759 "http://www.shatteredreality.net" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

217.219.165.3 - - [16/Apr/2004:15:34:46 +0100] "GET / HTTP/1.1" 200 32861 "http://britneyspearsnude.blogspot.com/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

80.58.35.46 - - [16/Apr/2004:15:37:23 +0100] "GET / HTTP/1.0" 200 32759 "http://www.amateurxpass.com" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"

The IP addresses are in US, MX, ES, IR and ES and interestingly enough have exactly the same user agent. 2 of the machines are running mail servers and may also be NAT/Masquarading machines I am guessing.

Eitherway, I think someone is controlling a bunch of bot machines and using them to spam logs. I wonder if I contact the hosting companies of these sites if they will shut them down?

Leave a comment

Recent Entries

  • flashpolicyd 2.0

    I wrote a multi threaded server for Adobe Flash Policy requests, some background from Adobe:Since policy files were first introduced, Flash Player has recognized /crossdomain.xml...

  • Adventures with Ruby

    Some more about my continuing experiences with ruby, in my last post I saidthe language does what you'd expect and as you'll see in my...

  • New programming language of choice - Ruby

    I have fallen out of love with Perl some time ago, I cannot point to one specific thing about it that put me off, I...

  • On working from home

    I've not been posting much here, work has been incredibly manic the last while, especially I need to still finish off my SSO posts with...

  • Rework of puppet facts for /etc/facts.txt

    Previously I blogged a custom fact that reads /etc/facts.txt to build up some custom facts for use in Puppet manifests, well I've since learned a...

Close