Had a chance to look for more possible Picscout crawling activity in another block of bezeqint.net IP's and found a rash of activity. Some was definitely bot activity, others had a fairly small sample and nothing was definitive except the crawl speed which can also be explained away by pre-fetch technology.
Here's a definitive bot in that range:
88.152.15.7 Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)Just another garden variety scraper or is Picscout sharing IP's with bezinqint's other customers?
About 20 others set off alarms but nothing quite as aggressive as that one IP listed asking for about 50+ pages in increments of 5-10 seconds apart, and that was after they were being challenged so it's a bot to be sure.
Who the bot belongs to is the question.
I'm considering blocking this range considering the number of alarms that were set off.
inetnum: 88.152.170.0 - 88.152.255.255
netname: ADSL-CUSTOMER-CONNECTION
role: BEZEQINT NETWORKING TEAM
route: 88.152.176.0/20
Not that everyone should block the whole thing, but the one IP address referenced was definitely a problem child.
So much data, so little time...
No comments:
Post a Comment