bo2 Feb 11 2009 at 03:29

Таинственный Firefox на FreeBSD с Рамблера

4 min

517

На один из моих сайтов регулярно по несколько раз в день заходит странный посетитель с разных адресов из сети Рамблера, смотрит одну страницу и уходит на несколько часов. Причем в REFEREК у него стоит пустой запрос со страницы поиска Рамблера, он загружает картинки, стили и скрипты.

Кто это?

81.19.79.141 - - [08/Feb/2009:09:48:47 +0300] "GET /info.php?id=33243 HTTP/1.1" 200 7798 "http://www.rambler.ru/srch?words=" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:09:48:53 +0300] "GET /common.css HTTP/1.1" 200 10208 "http://terms.monomed.ru/info.php?id=33243" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:09:48:53 +0300] "GET /lib/jquery-1.2.6.pack.js HTTP/1.1" 200 31033 "http://terms.monomed.ru/info.php?id=33243" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:09:48:54 +0300] "GET /img/title_term.png HTTP/1.1" 200 2962 "http://terms.monomed.ru/info.php?id=33243" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:09:48:56 +0300] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:10:33:11 +0300] "GET /info.php?id=9789 HTTP/1.1" 200 10712 "http://www.rambler.ru/srch?words=" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:10:33:12 +0300] "GET /common.css HTTP/1.1" 200 10208 "http://terms.monomed.ru/info.php?id=9789" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:10:33:12 +0300] "GET /lib/jquery-1.2.6.pack.js HTTP/1.1" 200 31033 "http://terms.monomed.ru/info.php?id=9789" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:10:33:13 +0300] "GET /img/title_term.png HTTP/1.1" 200 2962 "http://terms.monomed.ru/info.php?id=9789" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:10:33:17 +0300] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:11:37:07 +0300] "GET /info.php?id=14865 HTTP/1.1" 200 10986 "http://www.rambler.ru/srch?words=" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:11:37:07 +0300] "GET /common.css HTTP/1.1" 200 10208 "http://terms.monomed.ru/info.php?id=14865" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:11:37:07 +0300] "GET /lib/jquery-1.2.6.pack.js HTTP/1.1" 200 31033 "http://terms.monomed.ru/info.php?id=14865" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:11:37:08 +0300] "GET /img/title_term.png HTTP/1.1" 200 2962 "http://terms.monomed.ru/info.php?id=14865" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:11:37:10 +0300] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:12:12:14 +0300] "GET /info.php?id=42260 HTTP/1.1" 200 14341 "http://www.rambler.ru/srch?words=" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:12:12:16 +0300] "GET /common.css HTTP/1.1" 200 10208 "http://terms.monomed.ru/info.php?id=42260" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:12:12:16 +0300] "GET /lib/jquery-1.2.6.pack.js HTTP/1.1" 200 31033 "http://terms.monomed.ru/info.php?id=42260" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:12:12:16 +0300] "GET /img/title_term.png HTTP/1.1" 200 2962 "http://terms.monomed.ru/info.php?id=42260" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"
81.19.79.141 - - [08/Feb/2009:12:12:18 +0300] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070204 Firefox/1.5.0.9"

Tags:

Hubs:

Lumber room