Bad behavior from Microsoft?
Attention Bad Behavior users. I’ve received several reports of strange accesses from an IP address range traced to Microsoft Corporation. And I need your help to investigate this.
If you are using verbose logging (it’s on by default) then please check your bad_behavior_log for any accesses from the 131.107.x.x address range. (In phpMyAdmin, Search for `ip` REGEXP '^131.107.' and that will bring it up, then hit Export, in SQL format.) If you find anything, please send it to me at badbots@ioerror.us.
Thank you!
8 Comments
Sorry, the comment form is closed at this time.
About
Copyright © 2005-2006 Michael Hampton. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.
Help contribute directly to Bad Behavior development:
Or indirectly by shopping at:
If you need web hosting, a VPS in the U.S. or Europe, or a dedicated server:
You got mine. What are the odds that this is MS Live connected?
I’m not sure, I try this
SQL query:
SELECT `wp_bad_behavior_log`.`ip`
FROM wp_bad_behavior_log
WHERE (
`wp_bad_behavior_log`.`ip` REGEXP ‘^131.107.’
)
LIMIT 0 , 5000
The result is:
MySQL returned an empty result set (i.e. zero rows). (Query took 0.0227 sec)
theo, that means you have nothing, so that’s fine. Many people won’t find anything.
Thanks Michael, I “speak” mysql like I speak english 🙂
I’m in Italy, maybe MS is looking for USA/Canada blog for now?
From the security log of a router, here in Italy:
2005/11/08 23:38:48
Source IP:207.46.19.60 Port:80
Dest IP:xx.xx.xx.xx Port:1243
207.46.19.60 is MS 😐
theo, that looks like a typical perfectly normal access from msnbot, and is definitely NOT the sort of behaviour I’m looking for. 🙂
MSNbot scan every IP? It’s an adsl with a not static IP (and without a webserver) 😐
it looks like MSN bot to me