This is really stupid: someone (some people?) keep stuffing my logfiles with bogus HTTP_REFERER values: here’s today’s gem and the number of times it’s appeared.
[/home/paul]:: grep -c http://www.blowjob-pics.info/ /usr/local/weblogs/httpd-access.log
887
The only way anyone is going to see this is if they look at my stats pages (and no, I’m not going to put a link to them: they’re not hard to find, but why make things worse?). What a waste of time and bandwidth, so say nothing of disk and logfile.
And it’s coming 656 different hosts: I doubt there are 600+ people doing this, so is this some kind of worm, a la NIMDA? A lot of different useragents, too.
“Mozilla/4.0(compatible;MSIE4.01;Windows95)”
“Mozilla/4.0(compatible;MSIE4.01;Windows98)”
“Mozilla/4.0(compatible;MSIE4.01;Windows98;FREESERVE_IE4)”
“Mozilla/4.0(compatible;MSIE4.01;Windows98;formatpb)”
“Mozilla/4.0(compatible;MSIE5.01;Windows95)”
“Mozilla/4.0(compatible;MSIE5.01;Windows98)”
“Mozilla/4.0(compatible;MSIE5.01;Windows98;AT&T
“Mozilla/4.0(compatible;MSIE5.01;Windows98;EPTL
“Mozilla/4.0(compatible;MSIE5.01;Windows98;VZ_IE5)”
“Mozilla/4.0(compatible;MSIE5.01;Windows98;tmoeng)”
“Mozilla/4.0(compatible;MSIE5.01;Windows98;{Vizzavi052001};
“Mozilla/4.0(compatible;MSIE5.01;WindowsNT)”
“Mozilla/4.0(compatible;MSIE5.01;WindowsNT5.0)”
“Mozilla/4.0(compatible;MSIE5.01;WindowsNT5.0;
“Mozilla/4.0(compatible;MSIE5.0;AOL4.0;Windows
“Mozilla/4.0(compatible;MSIE5.0;AOL5.0;Windows
“Mozilla/4.0(compatible;MSIE5.0;AOL7.0;Windows
“Mozilla/4.0(compatible;MSIE5.0;AOL8.0;Windows
“Mozilla/4.0(compatible;MSIE5.0;MSN2.5;Windows
“Mozilla/4.0(compatible;MSIE5.0;Win3.1;ATHMWWW1.1;MSOCD;)”
“Mozilla/4.0(compatible;MSIE5.0;Windows95;DigExt;
“Mozilla/4.0(compatible;MSIE5.0;Windows98)”
“Mozilla/4.0(compatible;MSIE5.0;Windows98)Opera
“Mozilla/4.0(compatible;MSIE5.0;Windows98;DigExt)”
“Mozilla/4.0(compatible;MSIE5.0;Windows98;DigExt;
“Mozilla/4.0(compatible;MSIE5.0;Windows98;YComp
“Mozilla/4.0(compatible;MSIE5.0;WindowsXP)Opera
“Mozilla/4.0(compatible;MSIE5.5;AOL5.0;Windows
“Mozilla/4.0(compatible;MSIE5.5;AOL6.0;Windows
“Mozilla/4.0(compatible;MSIE5.5;AOL7.0;Windows
“Mozilla/4.0(compatible;MSIE5.5;AOL8.0;Windows
“Mozilla/4.0(compatible;MSIE5.5;CS20006.0;
“Mozilla/4.0(compatible;MSIE5.5;Windows95)”
“Mozilla/4.0(compatible;MSIE5.5;Windows95;Gateway2000)”
“Mozilla/4.0(compatible;MSIE5.5;Windows98)”
“Mozilla/4.0(compatible;MSIE5.5;Windows98;AT&T
“Mozilla/4.0(compatible;MSIE5.5;Windows98;BTopenworld)”
“Mozilla/4.0(compatible;MSIE5.5;Windows98;DT)”
“Mozilla/4.0(compatible;MSIE5.5;Windows98;DigExt)”
“Mozilla/4.0(compatible;MSIE5.5;Windows98;FREESERVE_IE5)”
“Mozilla/4.0(compatible;MSIE5.5;Windows98;Hotbar
“Mozilla/4.0(compatible;MSIE5.5;Windows98;SYMPA)”
“Mozilla/4.0(compatible;MSIE5.5;Windows98;Win
“Mozilla/4.0(compatible;MSIE5.5;Windows98;YComp
“Mozilla/4.0(compatible;MSIE5.5;WindowsNT4.0)”
“Mozilla/4.0(compatible;MSIE5.5;WindowsNT5.0)”
“Mozilla/4.0(compatible;MSIE5.5;WindowsNT5.0;
“Mozilla/4.0(compatible;MSIE6.0;AOL7.0;TargetAOL7.0;Windows
“Mozilla/4.0(compatible;MSIE6.0;AOL7.0;Windows
“Mozilla/4.0(compatible;MSIE6.0;AOL8.0;Windows
“Mozilla/4.0(compatible;MSIE6.0;MSNIA;Windows98;
“Mozilla/4.0(compatible;MSIE6.0;Windows98)”
“Mozilla/4.0(compatible;MSIE6.0;Windows98)Opera
“Mozilla/4.0(compatible;MSIE6.0;Windows98;(R1
“Mozilla/4.0(compatible;MSIE6.0;Windows98;.NET
“Mozilla/4.0(compatible;MSIE6.0;Windows98;AT&T
“Mozilla/4.0(compatible;MSIE6.0;Windows98;CDSource=storecd_01_03;
“Mozilla/4.0(compatible;MSIE6.0;Windows98;Compaq;
“Mozilla/4.0(compatible;MSIE6.0;Windows98;Cox
“Mozilla/4.0(compatible;MSIE6.0;Windows98;DUOMO
“Mozilla/4.0(compatible;MSIE6.0;Windows98;DigExt)”
“Mozilla/4.0(compatible;MSIE6.0;Windows98;EZN/PC)”
“Mozilla/4.0(compatible;MSIE6.0;Windows98;FREEI
“Mozilla/4.0(compatible;MSIE6.0;Windows98;Hotbar
“Mozilla/4.0(compatible;MSIE6.0;Windows98;MSN
“Mozilla/4.0(compatible;MSIE6.0;Windows98;PCQuest;
“Mozilla/4.0(compatible;MSIE6.0;Windows98;Q312461)”
“Mozilla/4.0(compatible;MSIE6.0;Windows98;Q312461;
“Mozilla/4.0(compatible;MSIE6.0;Windows98;Roadrunner)”
“Mozilla/4.0(compatible;MSIE6.0;Windows98;T312461;
“Mozilla/4.0(compatible;MSIE6.0;Windows98;Tiny
“Mozilla/4.0(compatible;MSIE6.0;Windows98;Win
“Mozilla/4.0(compatible;MSIE6.0;Windows98;YComp
“Mozilla/4.0(compatible;MSIE6.0;Windows98;ZFREECD1)”
“Mozilla/4.0(compatible;MSIE6.0;Windows98;sbcydsl
“Mozilla/4.0(compatible;MSIE6.0;Windows98;sureseeker.com)”
“Mozilla/4.0(compatible;MSIE6.0;Windows98;sureseeker.com;
“Mozilla/4.0(compatible;MSIE6.0;Windows98;yie6_SBCDSL;
“Mozilla/4.0(compatible;MSIE6.0;WindowsME)Opera
“Mozilla/4.0(compatible;MSIE6.0;WindowsNT)::ELNSB50::0000811003200258029e0173000000000507000900000000”
“Mozilla/4.0(compatible;MSIE6.0;WindowsNT)::ELNSB50::000081900400030002a001d4000000000507000900000000”
“Mozilla/4.0(compatible;MSIE6.0;WindowsNT4.0)”
“Mozilla/4.0(compatible;MSIE6.0;WindowsNT4.0;
“Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.0)
“Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.0)”
“Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.0;
“Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.1)
“Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.1)”
“Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.1;
“Mozilla/4.0(compatible;MSIE6.0;WindowsNT5.2;
“Mozilla/5.0(Macintosh;U;PPCMacOSX;
“Mozilla/5.0(Windows;U;Win98;en-US;rv:1.0.1)Gecko/20020823
“Mozilla/5.0(Windows;U;Win98;en-US;rv:1.0.2)Gecko/20030208
“Mozilla/5.0(Windows;U;Win98;pt-BR;rv:1.0.1)Gecko/20020823
“Mozilla/5.0(Windows;U;Win9x4.90;en-US;
“Mozilla/5.0(Windows;U;WindowsNT5.0;en-GB;
“Mozilla/5.0(Windows;U;WindowsNT5.0;en-US;
“Mozilla/5.0(Windows;U;WindowsNT5.1;de-AT;
“Mozilla/5.0(Windows;U;WindowsNT5.1;en-US;
“Mozilla/5.0(compatible;Konqueror/3;Linux)”
The fact that all the requests are for the same URI (/) further suggests this is bogus.