Tuesday, August 25, 2009

Old Browsers in Logs - Hackers

I would like to reject all old browsers that come to our site from Google advertising or otherwise. Looking at the networks that these old browser visitors come from, it is pretty clear that 99% of them are bots, software or competitors.

I wish Google would do something about this like disallowing ads for old, insecure browsers like IE6.

Monday, August 10, 2009

Slicehost - Bad Traffic

We seem to be getting a lot of bad traffic from the slicehost IP range.

OrgName: Slicehost LLC
OrgID: SLICE
Address: 4579 Laclede Avenue #258
City: St. Louis
StateProv: MO
PostalCode: 63108
Country: US

NetRange: 67.207.128.0 - 67.207.159.255

ThePlanet.com - bad traffic

Getting a lot of bad traffic from this network:

OrgName: ThePlanet.com Internet Services, Inc.
OrgID: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US

ReferralServer: rwhois://rwhois.theplanet.com:4321

NetRange: 174.132.0.0 - 174.133.255.255

Amazon cloud traffic

After a bunch of odd traffic from the Amazon "elastic cloud" networks searching for pages that don't exist on our sites, one site's search engine rankings has dropped.

Coincidence, I don't know.

Sunday, August 09, 2009

Google Imposter

A Google Imposter hit our sites today from this IP:64.69.46.216

On this network:
OrgName: CoreExpress
OrgID: COEX
Address: 600 W. 7th Street
Address: Suite 360
City: Los Angeles
StateProv: CA
PostalCode: 90017
Country: US

NetRange: 64.69.32.0 - 64.69.47.255

Wednesday, August 05, 2009

AOL Proxy Cache

I noticed this IP and related IPs were hitting our sites a ton:

207.200.116.13

A reverse look up of the domain shows this IP is:

cache-ntc-aa09.proxy.aol.com

I'm personally not a fan of other networks caching and hosting our content.

I think mail servers cache images to reduce hits so those images can't be used to measure email campaigns, if true.