Merkwürdige Spideraufrufe

Beitrag von **franzmey** » 01.07.2004, 07:32

hi @all,

mir ist heute in der log aufgefallen, das ein spider merkwürdige abfragen gestartet hat, ich meine besonders den teil, wo zig mal variablen an die adresse angehangen werden.

wieso wechselt er dann noch innerhalb der abfragen seine ip?

207.44.210.108 - - [30/Jun/2004:00:04:10 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14424 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:04:18 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:04:29 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14298 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
207.44.210.108 - - [30/Jun/2004:00:04:50 +0200] "GET /forum/thread24.html HTTP/1.1" 200 5 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:05:02 +0200] "GET /forum/thread24.html HTTP/1.1" 200 5 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:05:03 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
207.44.210.108 - - [30/Jun/2004:00:05:43 +0200] "GET /forum/thread24.html HTTP/1.1" 200 171 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
207.44.210.108 - - [30/Jun/2004:00:06:12 +0200] "GET /forum/thread24.html HTTP/1.1" 200 48 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:06:17 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14718 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:06:54 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14716 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:07:13 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14716 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:07:26 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14278 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:07:59 +0200] "GET /forum/thread24.html HTTP/1.1" 200 170 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:24 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:25 +0200] "GET /forum/thread24.html?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:25 +0200] "GET /forum/thread24.html?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:26 +0200] "GET /forum/thread24.html?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:26 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:26 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:27 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:27 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:28 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:28 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:29 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:29 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:30 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:30 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:31 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:31 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:31 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:32 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:32 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:33 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:33 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:34 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:34 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:35 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 5 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:39 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:41 +0200] "GET /forum/thread24.html?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1?x=1 HTTP/1.1" 200 14231 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:08:46 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14298 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:09:21 +0200] "GET /forum/thread24.html HTTP/1.1" 200 142 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:09:43 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14298 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
207.44.210.108 - - [30/Jun/2004:00:09:47 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14424 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:12:46 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14372 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:13:50 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14488 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:16:06 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14550 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
207.44.210.108 - - [30/Jun/2004:00:16:15 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14676 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:17:24 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14563 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
80.136.38.225 - - [30/Jun/2004:00:17:43 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14562 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
207.44.210.108 - - [30/Jun/2004:00:18:43 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14748 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
207.44.210.108 - - [30/Jun/2004:00:19:04 +0200] "GET /forum/thread24.html HTTP/1.1" 200 14748 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"

von **Anzeige von ABAKUS** »

Beitrag von **bull** » 01.07.2004, 10:17

Was ich täte ist immer die IP rausgreifen und https://<ip> machen. Da kommen die erstaunlichsten Sachen raus. Aber bitte nicht mit dem internet explorer.

Beitrag von **innuendo** » 01.07.2004, 11:30

auch eine Whois Abfrage bringt schon Infos: https://sunny.nic.com/cgi-bin/whois

Beitrag von **Klaus** » 03.07.2004, 20:26

Hallo.
Muss man bei sunny etwas berücksichtigen:
Eingabe der IP liefert stets diese Meldung

BW Whois has detected a condition which may be an automated request. Access is forbidden

Danke
Klaus

Beitrag von **innuendo** » 04.07.2004, 07:59

Hi Klaus,

nein, eigentlich nicht. Ich habs auch gerade mit meiner IP probiert und da kommt eine vollständige, richtige Antwort zurück.

Probiers einfach nochmals. Müsste also gehen.

lg,
Innuendo