« Laycat and it's ilk are finally machina non grata here. | Main | Possible new kind of attack on your website, and revenue stream... Defamation by HTTP Referer! »
Friday, March 13, 2009
Laycat continues it's stupidity...
Well, first customer of Friday the 13th... GUESS WHO?!?
#: 292 @: Fri, 13 Mar 2009 01:42:01 -0600
Host:
laycat.com
IP: 88.191.79.43
Score: 1
Why blocked: Exploit
probe? Possibly RBN? Claims to be search engine in dev. No 3rd party
info on this. Ignores robots.txt.
File: removed for security
Post:
Query:
Referer:
http://www.spambotsecurity.com/
User Agent: Mozilla/4.0 (compatible;
MSIE 6.0; Windows NT 5.1)
Reconstructed URL:
http://www.spambotsecurity.com/forum/
GRRRRR! Now one of their ploys before was, they claim they don't pull robots .txt more than once in awhile, and it was desynchronized the first time. They claim this is to reduce load on the server, yeah whatever, it doesn't take any time at all to send a short robots.txt . It's been awhile. You didn't care, and started your crap again, getting into my site.
If this isn't a common 'sploit scanning probe with some fairly good sugar on top, I have no clue what it is. Every time it touches, the more I am sure of it.
Zap. 
