ericd.net version 7.0

Friday, August 31, 2007

I was taking a leisurely stroll through my Urchin 5 webstats and I wanted to see what browsers people were using. I checked Browsers By Sessions and after Firefox (yay!) I saw "Microsoft URL Control 6.00.8862" @ 9%. Hmm, wtf is that. So after googling a bit I saw some conflicting reports on this thing, but it seems like it could be a spider looking for email scripts, etc. I put in a web ticket to ask (mt) about it and whether it could be blocked or not. Is someone using my scripts to send their emails? etc. I just don't what this is or how to block it on my own. Anyone have any insight, has this appeared in your logs?

3 Comments:

Claus Wahlers said...: “1. Look up what IP ranges hammer your site with "Microsoft URL Control". In my case that was 80.253.80.* and 80.253.81.*
2. Put a .htaccess file in your web root:
order allow,deny
deny from 80.253.80
deny from 80.253.81
allow from all”; September 1, 2007 3:45 AM
e.dolecki said...: “Thank you - I will check the IP(s) and edit the .htaccess file I already created for my custom 404.”; September 1, 2007 7:09 AM
Andreas Gabler said...: “"Microsoft URL Control" is a harvester. He collects email addresses
from web sites and adds them to spam mailing lists.

He visited our web page www.abx.de/error.php
on 20th April 2007 at 13:39 CEST.
We showed him a new email address generated only for him.
We received the first spam for this email address on
22nd March 2008.

His IP address: 80.253.81.61

This IP belongs to the letterbox company Jeftex in Malaysia.
The company Nexlink in Brugg, Switzerland is responsible
for 80.253.80.1 till 80.253.81.254. A couple of harvesters
works on this IPs.

Nexlink is a provider in Switzerland. You can send
spam directly from his servers, in the middle of Europe.

Andreas.”; March 25, 2008 12:56 PM

Links to this post:

<$BlogBacklinkTitle$>: <$BlogBacklinkSnippet$>
posted by <$BlogBacklinkAuthor$> @ <$BlogBacklinkDateTime$>

Create a Link

gotoAndStop( topOfPage );