TTT spider? check your logs for 66.111.39.50 - GoFuckYourself.com

rowan · 03-30-2003, 01:13 AM

Is anyone else getting hits from this IP? It is doing HEAD requests for:

/
/ttt-out.php?trade=(trade from my toplist)
/ttt-out.php

It seems to be only interested in the TTT links, not anything else on that page. My galleries go through another script, so it can't see the TTT links by just parsing index.html. The other odd thing is that I do not have any '/ttt-out.php' (ie completely blind) links on my page.

At first guess it's a bot to find other TTT sites. I think it's loading 'ttt-out.php' (by itself) to find my trades.

It started about 36 hours ago. I've had one trade sign up since then, a CJ1 who ignored the rules about no popups... maybe because he never saw them? *shrug* It may not be related, but check your new trades for sex-journal.net.

66.111.39.50 appears to be a dedicated server on united colo's network.

I'm interested to see if anyone else has been seeing this activity on their site.

XSpider · 03-30-2003, 01:18 AM

1 - 66.111.39.50
Also got this ip in my logs but no new trade signups, my signup page is closed. Who is he and what does this mean?

rowan · 03-30-2003, 01:25 AM

It's hitting my site regularly, between 5-20 minutes between each one. It's probably a spider continuously looping through the web of trades. I want to know if it's for a malicious reason, it could be well intentioned (ie a script to find potential new trades)

XSpider · 03-30-2003, 01:34 AM

Ip traces to http://www.ucg.net/ and this site redirects to cnn.com?? wtf?

rowan · 03-30-2003, 01:48 AM

The correct address for united colo is www.unitedcolo.com ... not that it really makes any diff to this thread, they're just the host.

rowan · 03-30-2003, 04:56 PM

*bump*

hyper · 03-30-2003, 06:09 PM

can you say .htaccess?

rowan · 03-30-2003, 07:29 PM

Quote:

Originally posted by hyper
can you say .htaccess?

Yes. Yes I can.

Understanding what this thing is, and why it's spidering, is more stimulating though.

03-30-2003, 01:13 AM	#1
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	TTT spider? check your logs for 66.111.39.50 Is anyone else getting hits from this IP? It is doing HEAD requests for: / /ttt-out.php?trade=(trade from my toplist) /ttt-out.php It seems to be only interested in the TTT links, not anything else on that page. My galleries go through another script, so it can't see the TTT links by just parsing index.html. The other odd thing is that I do not have any '/ttt-out.php' (ie completely blind) links on my page. At first guess it's a bot to find other TTT sites. I think it's loading 'ttt-out.php' (by itself) to find my trades. It started about 36 hours ago. I've had one trade sign up since then, a CJ1 who ignored the rules about no popups... maybe because he never saw them? shrug It may not be related, but check your new trades for sex-journal.net. 66.111.39.50 appears to be a dedicated server on united colo's network. I'm interested to see if anyone else has been seeing this activity on their site.

03-30-2003, 01:18 AM	#2
XSpider Confirmed User Join Date: Feb 2003 Location: Belgium Posts: 356	1 - 66.111.39.50 Also got this ip in my logs but no new trade signups, my signup page is closed. Who is he and what does this mean? __________________ XSpider

03-30-2003, 01:34 AM	#4
XSpider Confirmed User Join Date: Feb 2003 Location: Belgium Posts: 356	Ip traces to http://www.ucg.net/ and this site redirects to cnn.com?? wtf? __________________ XSpider Last edited by XSpider; 03-30-2003 at 01:37 AM..

03-30-2003, 06:09 PM	#7
hyper Confirmed User Join Date: Mar 2002 Location: Mass Ass Posts: 5,294	can you say .htaccess? __________________

03-30-2003, 01:25 AM	#3
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	It's hitting my site regularly, between 5-20 minutes between each one. It's probably a spider continuously looping through the web of trades. I want to know if it's for a malicious reason, it could be well intentioned (ie a script to find potential new trades)

03-30-2003, 01:48 AM	#5
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	The correct address for united colo is www.unitedcolo.com ... not that it really makes any diff to this thread, they're just the host.

03-30-2003, 04:56 PM	#6
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	bump