{"id":92,"date":"2003-11-18T23:15:42","date_gmt":"2003-11-18T22:15:42","guid":{"rendered":"http:\/\/wp.devco.net\/?p=92"},"modified":"2009-10-09T17:32:10","modified_gmt":"2009-10-09T16:32:10","slug":"referer_log_spammers","status":"publish","type":"post","link":"https:\/\/www.devco.net\/archives\/2003\/11\/18\/referer_log_spammers.php","title":{"rendered":"Referer log spammers"},"content":{"rendered":"

I have been noticing in my referer log a couple of hits that looks to me like hits simply to spam my logs.
\n217.73.164.106 – – [13\/Oct\/2003:17:49:35 +0100] “GET \/ HTTP\/1.0” 200 21978 “http:\/\/www.kwmap.com\/” “MSIE 6.0”
\n217.73.164.106 – – [13\/Oct\/2003:17:49:35 +0100] “GET \/ HTTP\/1.0” 200 21978 “http:\/\/www.kwmap.com\/” “MSIE 6.0”
\n217.73.164.106 – – [14\/Oct\/2003:10:12:31 +0100] “GET \/ HTTP\/1.0” 200 21978 “http:\/\/www.kwmap.com\/” “MSIE 6.0”
\n217.73.164.106 – – [14\/Oct\/2003:10:12:31 +0100] “GET \/ HTTP\/1.0” 200 21978 “http:\/\/www.kwmap.com\/” “MSIE 6.0”
\n217.73.164.106 – – [04\/Nov\/2003:08:13:52 +0000] “GET \/ HTTP\/1.0” 200 26409 “http:\/\/www.websearchde.com\/” “MSIE 6.0”
\n217.73.164.106 – – [12\/Nov\/2003:22:42:50 +0000] “GET \/ HTTP\/1.0” 200 27410 “http:\/\/www.wr18.com\/” “MSIE 6.0”
\n217.73.164.106 – – [15\/Nov\/2003:10:41:49 +0000] “GET \/ HTTP\/1.0” 200 27053 “http:\/\/www.malixya.com\/” “MSIE 6.0”
\n141.85.3.130 – – [16\/Nov\/2003:21:34:49 +0000] “GET \/ HTTP\/1.0” 200 27053 “http:\/\/www.worldnewslog.com\/” “MSIE 6.0”
\n141.85.3.130 – – [17\/Nov\/2003:03:23:07 +0000] “GET \/ HTTP\/1.0” 200 27053 “http:\/\/www.mikesspot.com\/” “MSIE 6.0”
\n141.85.3.130 – – [17\/Nov\/2003:10:15:22 +0000] “GET \/ HTTP\/1.0” 200 27053 “http:\/\/www.a-b-l-o-g.com\/” “MSIE 6.0”
\n141.85.3.130 – – [17\/Nov\/2003:17:12:02 +0000] “GET \/ HTTP\/1.0” 200 27360 “http:\/\/www.teoras.com\/” “MSIE 6.0”
\n217.73.164.106 – – [18\/Nov\/2003:04:10:25 +0000] “GET \/ HTTP\/1.0” 200 27323 “http:\/\/www.websearchus.com\/” “MSIE 6.0”
\n217.73.164.106 – – [18\/Nov\/2003:22:25:51 +0000] “GET \/ HTTP\/1.0” 200 27323 “http:\/\/www.saulem.com\/” “MSIE 6.0”
\nThe thing that makes me think they are spam bots is that all they ever do is ask for the main page, none of my images, CSS or anything like that – and the obvious fake user agent.
\nI looked a bit at the IP addresses in various databases and they are from Romanian educational networks and all the sites being advertised are from Romania.
\nSo I think it is time I add user_agent = “MSIE 6.0” to my deny lists.<\/p>\n","protected":false},"excerpt":{"rendered":"

I have been noticing in my referer log a couple of hits that looks to me like hits simply to spam my logs. 217.73.164.106 – – [13\/Oct\/2003:17:49:35 +0100] “GET \/ HTTP\/1.0” 200 21978 “http:\/\/www.kwmap.com\/” “MSIE 6.0” 217.73.164.106 – – [13\/Oct\/2003:17:49:35 +0100] “GET \/ HTTP\/1.0” 200 21978 “http:\/\/www.kwmap.com\/” “MSIE 6.0” 217.73.164.106 – – [14\/Oct\/2003:10:12:31 +0100] “GET […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","footnotes":""},"categories":[6],"tags":[52,39,29],"_links":{"self":[{"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/posts\/92"}],"collection":[{"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/comments?post=92"}],"version-history":[{"count":1,"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/posts\/92\/revisions"}],"predecessor-version":[{"id":895,"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/posts\/92\/revisions\/895"}],"wp:attachment":[{"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/media?parent=92"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/categories?post=92"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.devco.net\/wp-json\/wp\/v2\/tags?post=92"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}