Sunday, July 16, 2006

Hooters Casino Crawling or Breached?

This is the same exact scenario that I saw with the Tireman site and several others.

All dedicated servers, yet the SAME crawler with the exact same behavior is operating from this server:

24.120.182.161 [mail.hooterslv.com.] requested 29 pages as "Java/1.4.2_06"
I don't think these are a coincidence as it's starting to look like a botnet of some sort, perhaps spambot scrapers, no clue what they're looking for at this point.

No comments: