Guestbook spammer’s bot?

Guestbook spam info

I caught an IP address from Atrivo accessing a non-existent page in my guestbook on annelisabeth. Wondered why on earth. But it soon became clear when I checked my logs for that file. It had been accessed three times.

1) Googlebot
Google then put it in the index, even though the page is blank.

2)69.50.176.146
On Atrivo’s network. Which usually means spammer’s lair.
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) Opera 7.20 [en]

3)80.227.56.42
On dubaiinternetcity.net’s net, which practically guarantee’s it’s an open proxy
User Agent: Opera 7.51

My guess: The second access was a spambot searching Google for possible guestbook spam targets.

The Atrivo bot returned the next day and downloaded my cat diary category and the January archives over and over.

Leave a Reply