store | blogs | forums | twitter | facebook | wiki | mailing lists | downloads | support portal
Atomic Secure Linux
It is currently Wed May 22, 2013 12:23 pm

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic Share/Bookmark  [ 6 posts ] 
Author Message
 Post subject: Twenga and their bot
Unread postPosted: Tue May 25, 2010 4:03 pm 
Offline
Forum Regular
Forum Regular

Joined: Mon Apr 10, 2006 12:55 pm
Posts: 656
Has anyone heard of Twenga?
http://www.twenga.com/bot.html

I had to shut them off with the firewall because their infernal script was scrawling dozens of our sites at once.
IP list, if you're interested
94.75.199.211
94.75.247.195
94.75.247.197
94.75.199.212
85.17.226.92
95.211.113.74

_________________
"Its not a mac. I run linux... I'm actually cool." - scott


Top
 Profile  
 
 Post subject: Re: Twenga and their bot
Unread postPosted: Thu May 27, 2010 9:55 am 
Offline
Forum Regular
Forum Regular

Joined: Mon Apr 10, 2006 12:55 pm
Posts: 656
Ok, maybe they're trying to get back at me now. I had about 100 requests blocked last night like this

GET /sales-catalog/index/index/index/index/index/index/index/index/index/index/index/index/index/index/index/index/index/index/index/alert(this.getAttribute('title')); return false; HTTP/1.0
Host: www.mydomain.com
User-Agent: TwengaBot/1.1 (+http://www.twenga.com/bot.html)
Accept-Encoding: gzip
Cookie: PHPSESSID=vgdu7ao4ic8b2q62qnbff0a3i2; stat_marker=stat;
Accept-Language: en,en;q=0.5
Accept-Charset: utf-8,*;q=0.7

All from different IPs

_________________
"Its not a mac. I run linux... I'm actually cool." - scott


Top
 Profile  
 
 Post subject: Re: Twenga and their bot
Unread postPosted: Fri May 28, 2010 5:09 am 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3245
Location: Chantilly, VA
We added a rule into ASL yesterday to block this bot. If that doesnt work for some reason, please let us know.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: Twenga and their bot
Unread postPosted: Fri May 28, 2010 1:41 pm 
Offline
Forum Regular
Forum Regular

Joined: Mon Apr 10, 2006 12:55 pm
Posts: 656
I know. I was the one who filed the ticket ;)

We had (I kid you not) over 139 million hits from their infernal bot in a week. After the rule update it dropped our processor loads by half.

_________________
"Its not a mac. I run linux... I'm actually cool." - scott


Top
 Profile  
 
 Post subject: Re: Twenga and their bot
Unread postPosted: Fri May 28, 2010 4:24 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 7425
Location: earth
Wow. Thats pretty metal.


Top
 Profile  
 
 Post subject: Re: Twenga and their bot
Unread postPosted: Sun May 30, 2010 8:14 am 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3245
Location: Chantilly, VA
Quote:
After the rule update it dropped our processor loads by half.


ASL: Saving you CPU cycles from stupid bots since 2005.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic Share/Bookmark  [ 6 posts ] 

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group