quote:

---

> I uploaded a file to the group, which details my request logs for the
> past week. I have taken the time to remove the legitimate requests
> from this file, to show simply how frequently I'm being hit by this
> bot.
>
> I took my system completely down a little over a week ago, to replace
> some hardware and clean it out. It was down for several days. At
> the same time, I uploaded the new PHP script to my website, and reset
> the webpages to go through that PHP rather than AudioRealm. As you
> can see, when I set the system back up and changed the URL's to use
> my own php script instead of audiorealm, an IP address of
> 209.249.67.136 which is registered to Looksmart.com started hitting
> me shortly after operation. After observing this one hitting me for
> a day, I added their IP address to the blocked networks in the PHP.
> It didn't stop them.
>
> Also, a new IP from Inktomi.com started showing up, 66.196.81.174
> which I also promptly added to the blocked networks. Again, it
> didn't stop them. It appears they're using cached pages to make the
> requests, so they're going through Audiorealm's PHP, not mine.
>
> By the next night, the original Inktomi.com IP range was back,
> hitting me again, 66.196.72.XXX. As soon as this bot started hitting
> me again, the one from Looksmart.com stopped. I was stumped. I
> treid changing the port from 1221 to something else, and then NO
> requests would work. The PHP script couldnm't connect to the server,
> even making sure the PHP showed the corresponding port. So I
> switched ports back. And then I thought of something...
>
> On Sunday, I changed the directory all of the music files were kept
> in, and re-adjusted the webpages again. This occured at
> approximately 3:30PM. Since that time, the requests from the bots
> have comntinued to come in unabated, but now they all fail. All of
> them are looking for the music in the wrong directory. Legitimate
> requests still come in fine. Interesting thing is, as soon as they
> started failing, I started getting hit within 13 or so hours by the
> Looksmart.com IP again. And now, since then, I have been
> relentlessly hit by both, day in, day out. All fail of course.
>
> BTW, Looksmart.com is also a search engine, with a link on the botom
> of the search pages, "Powered by Inktomi"
>
> Just thought I'd let you guys know how much these bots have a hard-on
> for me!

---