Stupid Evil Bastard: What the fuck is China up to with my blogs?

What the fuck is China up to with my blogs?

Posted by Les on Monday, May 22, 2006 at 10:55 AM. Read 1643 times. Tags: blogging

Over the past week or two I’ve noticed some really strange activity showing up in my referrer log. Someone out there is hammering the hell out of SEB and the other blogs I host by jumping from one link to another inside the sites within mere seconds of each request from a variety of IP addresses such as 202.108.1.3 and 202.108.4.123. A lot of them are jumping from various entry pages to the index page for Jenkins Online, which is the base blog all the other blogs are hosted off of. It’s a bizarre pattern that doesn’t appear to have any purpose other than the possibility that they’re trying to suck down every page on the site. I did a WhoIs on the IP addresses and came up with CNCGROUP Beijing province network, which is how I know it’s someone in China.

As if that weren’t enough, around 3AM last night there was a lot of similar activity by someone at IP address 70.87.104.181 which traces back to an American company: ThePlanet.com Internet Services, Inc. out of Dallas Texas. According to Whois that’s some form of web hosting provider. From at least 3:14AM last night (probably even earlier as that’s the oldest record I have on hand) until 3:39AM they sucked down some 104 pages of the site. What the hell are these people doing?

Permalink · 16 Comments · · · · · · · · · · · ·

Comments:

Page 1 of 1 pages

tim gueguen

Posted on 05/22/2006 at 12:00 PM

So that’s why I haven’t had any hits today. They’re busy pestering you.

Actually I’ve only had a tiny handful of Chinese hits so far. I assume I don’t mention China enough to attract Chinese attention.

Manzabar

Posted on 05/22/2006 at 12:34 PM

Sounds like a badly written spider. I’ve seen that sort of behavior once before from some company based out of Texas. I ended up banning their IP addresses, as otherwise their spider would have used up all my alloted bandwidth for the month.

Signature

Oh my God! Who touched Sasha?!?!?
- Heavy Weapons Guy: TF2

elwedriddsche

Posted on 05/22/2006 at 12:49 PM

Les, I can either unconditionally 403 or packet-filter them. Go?

Signature

Science is answers that must always be questioned.
Philosophy is questions that may never be answered.
Religion is answers that must never be questioned.
Politics is answers that lobbyists pay for.

LuckyJohn19

Posted on 05/22/2006 at 01:06 PM

LES; What the hell are these people doing?

Fuck’em.
Santana @ 5am is just to good to give a F..K. x

Signature

I’ve discovered that it all boils down to brain wiring: your brain is wired to worship magic or it isn’t, either it’s wired to utilize logic or it isn’t, either it’s analytical of myths or it isn’t.

TheJynXeD

Posted on 05/22/2006 at 07:50 PM

The China traffic is common, as that could just be a PRC webspider trying to log your content for further review (probably so they can have cause to censor you). On the other hand, everyone knows PCs in China are favorite relays for DDoSers and spammers looking for sites/servers to exploit.

ThePlanet.com though, that is odd. Possibly someone trying to see if you have any exploits open, or possibly one of their webspiders archiving your sites.

Or maybe Pres. Bush has taken a keen interest in your site all of the sudden and is having one of his kids make every page of yours “Available Offline” :D

Signature

“I like your Christ, I do not like your Christians. Your Christians are so unlike your Christ.“

-Mahatma Ghandi

Lucifer

Posted on 05/22/2006 at 08:11 PM

China is also an favorite for anonymous web proxies. I use them quite often for Limewire.

Doctor M

Posted on 05/22/2006 at 08:36 PM

You know what they’re doin’?
Being fucking douches, thats what. We oughta head on over to China and whip them with the You-Just-Got-An-Atheist-Whippin! stick.

(Which is totally nonexistant, but its a good idea, isn’t it?)
**heads out to Pop’s toolshop and works on fashioning the aforementioned whipping stick..**

Sadie Jane

Posted on 05/22/2006 at 10:35 PM

Doc M.: You know what they’re doin’?
Being fucking douches, thats what.

That would be my suspicion as well.

Signature

Thinking is the best way to travel.

Les

Posted on 05/23/2006 at 06:18 AM

Elwed, whichever route you think would be best to keep the pounding on the server to a minimum. That’s my only real concern.

Signature

Agnostics are just atheists without balls. - Stephen Colbert

E.T

Posted on 05/23/2006 at 08:32 AM

What… didn’t they come from some “Railway” office in Beijing or Shanghai?

As curiosity firewall/router once blocked few contacts from addresses belonging to “Naval Undersea Warfare Center Division, Keyport (NUWCDK)“ and “DoD Network Information Center”.

MooseTrain

Posted on 05/23/2006 at 12:43 PM

Clearly, Les is the antagonist for the next season of 24. Careful or JAck Bauer will own you Les.

Les

Posted on 05/23/2006 at 01:25 PM

I’d make a particularly good villain for 24 I would think. I’ve got the laughing maniacally part down pat.

Signature

Agnostics are just atheists without balls. - Stephen Colbert

Posted on 05/23/2006 at 09:07 PM

Random, stoner drive-by trivia:

I’ve never watched 24 but my co-workers who do are all excited about the fact that the “CTU” is at the end of the street our office is on - that is, the stage they film it on, heh. My buds are plotting ways to sneak on set

Yes, Les… you’d make a great villain! BTW, I believe that maniacal laughter should be in everyone’s repertoire, IMO Handy, handy tool, it is!

Signature

Invisible friends are for children and psychopaths.

Moloch

Posted on 05/24/2006 at 01:09 AM

What about a “/robots.txt” file?
Robots link

Signature

Gimbatulûk, agh burzum-ishi krimpatul.

rob adams

Posted on 05/24/2006 at 10:56 AM

As someone said, these are, usually, spiders gathering content for censor-review. They sometimes hire/purchase-from Western firms that sell such infoservices to org’s that need uptodate website sample-content for various purposes.

Last_Hussar