19 февр. 2010 г.

ITVA,ITVA:2006-42,ITVA

Чёзанах в заголовке?
***
Этот пост я начал писать на новогодние праздники, но отложил в ожидании самопрояснения. Не полегчало. Публикую.
***
Вот и я уже давно и неоднократно наблюдаю это ITVA в логах сервера.
Наверно я и не обратил бы на это внимание, но мои скрипты пишут в файлики кивордики, по которым приходят на мои сайтики посетители. Что вы можете сказать про почетителя вот с таким реферером:

http://www.google.com/search?sourceid=navclient&ie=UTF-8&
amp;rls=ITVA,ITVA:2006-42,ITVA:en&q=%E0%E2%F2%EE%EC%E8%F0

Можете не спешить расколдовывать %E0%E2%F2%EE%EC%E8%F0, это "автомир", а ещё бывают другие русские очень конкурентные и денежные словечки:
=переезд=;
=мицубиси=;
=игры=;
=поздравление=;
=салатов=;
=фирм=;
=франция=;

Дальше веселее:
1. Эти заходы с московских IP, я так понял, что это Datahouse.ru.
2. Это заходы на забаненую гуглом полгода назад аптеку и не на одну и не только на забаненую.
3. Аптека(и) англоязычная, но она стала появляться в выдаче яндекса, сейчас там 23000 страниц.
4. Запросы только русские.
5. Реферер только google.com.

На всякий случай я спросил у info@itva.eu, что это значит:
"
Hello Integrated TV & Video Association.
I have visitors on my website with refferer
http://www.google.com/search?sourceid=navclient&ie=UTF-8
&rls=ITVA,ITVA:2006-42,ITVA:en&q=%E0%E2%F2%EE%EC%E8%F0
Your organization is related to the line "rls=ITVA,ITVA:2006-42,ITVA:en" in refferer?
Regards, Bobby.
"
Ответа не последовало.

Вот я и думаю, что это - парсинг конкурентов? проверка гуглом на клоаку? тайное общество почитателей яндекса? Это дело продолжается и сейчас, портит мне файлы с кивордами, лазит и по живым сайтам, не только по забаненым. Сцыкотно, а вдруг после этого ITVA приходит гугл-бан и яндекс-10000-индекс? Мне такого не надо :)

Шепните тайну, если кто знает. Спасибо за внимание.


***
Под катом куски логов и хуизов. Пhошу прощения у тех, кто читает меня через бомжеленту, но в ридер нужно отдавать полный текст поста :)




2010-01-05 13:56:39=81.177.37.24=cushylips/cinnabon-lip-balm.html=http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%EF%E5%F0%E5%E5%E7%E4=;
2010-01-06 04:12:47=81.177.37.24=skinbrightener/eucerin-skin-renewel.html=http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%EC%E8%F6%F3%E1%E8%F1%E8=;
2010-01-08 11:52:27=217.65.8.94=alli/pics-of-round-yellow-weight-loss-pill.html=http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%E8%E3%F0%FB=;
2010-01-08 23:30:54=217.65.8.94=alli/pics-of-round-yellow-weight-loss-pill.html=http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%EF%EE%E7%E4%F0%E0%E2%EB%E5%ED%E8%E5=;
2010-01-11 10:36:13=217.65.8.94=alli/pics-of-round-yellow-weight-loss-pill.html=http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%F1%E0%EB%E0%F2%EE%E2=;
2010-01-11 13:43:02=217.65.8.94=alli/pics-of-round-yellow-weight-loss-pill.html=http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%F4%E8%F0%EC=;
2010-01-11 23:31:22=217.65.8.94=alli/pics-of-round-yellow-weight-loss-pill.html=http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%F4%F0%E0%ED%F6%E8%FF=;

81.177.37.24 IP address location & more:
IP address [?]: 81.177.37.24 Copy [Whois] [Reverse IP]
IP country code: RU
IP address country: ip address flag Russian Federation
IP address state: Moscow City
IP address city: Moscow
IP address latitude: 55.7522
IP address longitude: 37.6156
ISP of this IP [?]: RTComm.RU
Organization: JSC Search Technologies
Host of this IP: [?]: pget.ru [Whois] [Trace]

netname: DH-COL-NET
descr: DH-CBL002
remarks: ====================
remarks: Datahouse.su
remarks: ...perfect home
remarks: for your's servers
remarks: ====================
country: RU
admin-c: CNOC8-RIPE
tech-c: CNOC8-RIPE
status: ASSIGNED PA
mnt-by: HOSTER-RIPE-MNT
source: RIPE # Filtered

role: Citytelecom Network Operations Center
address: 115184 Russia Moscow
address: 5/7,9 Nignyaya Syromatnicheskaya

phone: +7 495 3630542
fax-no: +7 495 6637742
remarks: ==========================================================
remarks: Citytelecom NOC contacts:
remarks: ----------------------------------------------------------
remarks: NOC engineers available 24x7
remarks: ----------------------------------------------------------
remarks: Routing and peering issues: **************
remarks: ==========================================================
admin-c: CKAT-RIPE
admin-c: DVS50-RIPE
admin-c: VNO10-RIPE
tech-c: CKAT-RIPE
nic-hdl: CNOC8-RIPE
mnt-by: HOSTER-RIPE-MNT
source: RIPE # Filtered

inetnum: 217.65.5.0 - 217.65.8.255
netname: DH-COL-NET
descr: DH-CBL002
remarks: ====================
remarks: Datahouse.su
remarks: ...perfect home
remarks: for your's servers
remarks: ====================
country: RU
admin-c: CNOC8-RIPE
tech-c: CNOC8-RIPE
status: ASSIGNED PA
mnt-by: HOSTER-RIPE-MNT
source: RIPE # Filtered

role: Citytelecom Network Operations Center
address: 115184 Russia Moscow
address: 5/7,9 Nignyaya Syromatnicheskaya
address: Datahouse.ru
e-mail: ************************
phone: +7 495 3630542
fax-no: +7 495 6637742
remarks: ==========================================================
remarks: Citytelecom NOC contacts:
remarks: ----------------------------------------------------------
remarks: NOC engineers available 24x7
remarks: ----------------------------------------------------------
remarks:


81.177.37.24 - - [05/Jan/2010:13:56:59 -0800] "GET /index.css HTTP/1.1" 200 10794 "http://cushylips.herbaltron.com/cinnabon-lip-balm.html" ";"
81.177.37.24 - - [05/Jan/2010:13:57:00 -0800] "GET /javascript.js HTTP/1.1" 200 17495 "http://cushylips.herbaltron.com/cinnabon-lip-balm.html" ";"
81.177.37.24 - - [05/Jan/2010:13:57:01 -0800] "GET /jquery.js HTTP/1.1" 200 29846 "http://cushylips.herbaltron.com/cinnabon-lip-balm.html" ";"
66.249.68.138 - - [05/Jan/2010:13:57:02 -0800] "GET /sitemap.xml HTTP/1.1" 200 464 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
81.177.37.24 - - [05/Jan/2010:13:57:37 -0800] "GET /cinnabon-lip-balm.html HTTP/1.1" 200 46867 "http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%EF%E5%F0%E5%E5%E7%E4" ";"

81.177.37.24 - - [06/Jan/2010:04:13:08 -0800] "GET /index.css HTTP/1.1" 200 14340 "http://skinbrightener.herbaltron.com/eucerin-skin-renewel.html" ";"
81.177.37.24 - - [06/Jan/2010:04:13:09 -0800] "GET /jquery.js HTTP/1.1" 200 27147 "http://skinbrightener.herbaltron.com/eucerin-skin-renewel.html" ";"
81.177.37.24 - - [06/Jan/2010:04:13:09 -0800] "GET /main.js HTTP/1.1" 200 2004 "http://skinbrightener.herbaltron.com/eucerin-skin-renewel.html" ";"
66.249.68.200 - - [06/Jan/2010:04:13:12 -0800] "GET /robots.txt HTTP/1.1" 200 436 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.68.200 - - [06/Jan/2010:04:13:12 -0800] "GET /sitemap.xml HTTP/1.1" 200 474 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
81.177.37.24 - - [06/Jan/2010:04:13:30 -0800] "GET /eucerin-skin-renewel.html HTTP/1.1" 200 37875 "http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%EC%E8%F6%F3%E1%E8%F1%E8" ";"


217.65.8.94 - - [30/Dec/2009:05:16:01 -0800] "GET /default.js HTTP/1.1" 200 1524 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [30/Dec/2009:05:16:01 -0800] "GET /javascript.js HTTP/1.1" 200 3829 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [30/Dec/2009:05:16:02 -0800] "GET /index.css HTTP/1.1" 200 24142 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [30/Dec/2009:05:16:02 -0800] "GET /jquery.js HTTP/1.1" 200 27147 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [30/Dec/2009:05:16:02 -0800] "GET /jquery_001.js HTTP/1.1" 200 80249 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [30/Dec/2009:05:16:03 -0800] "GET /pics-of-round-yellow-weight-loss-pill.html HTTP/1.1" 200 50475 "http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%F1%EE%E1%E0%EA" ";"
217.65.8.94 - - [30/Dec/2009:05:46:22 -0800] "GET /pics-of-round-yellow-weight-loss-pill.html HTTP/1.1" 200 50476 "http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%F4%E8%F2%ED%E5%F1" ";"
217.65.8.94 - - [30/Dec/2009:05:46:25 -0800] "GET /javascript.js HTTP/1.1" 200 3829 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [30/Dec/2009:05:46:25 -0800] "GET /default.js HTTP/1.1" 200 1524 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [30/Dec/2009:05:46:25 -0800] "GET /index.css HTTP/1.1" 200 24142 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [30/Dec/2009:05:46:25 -0800] "GET /jquery.js HTTP/1.1" 200 27147 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [30/Dec/2009:05:46:26 -0800] "GET /jquery_001.js HTTP/1.1" 200 80249 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [31/Dec/2009:08:35:23 -0800] "GET /default.js HTTP/1.1" 200 1524 "http://alli.herbaltron.com/strength-training-exercises-with-weights-for-weight-loss.html" ";"
217.65.8.94 - - [31/Dec/2009:08:35:24 -0800] "GET /index.css HTTP/1.1" 200 24142 "http://alli.herbaltron.com/strength-training-exercises-with-weights-for-weight-loss.html" ";"
217.65.8.94 - - [31/Dec/2009:08:35:24 -0800] "GET /javascript.js HTTP/1.1" 200 3829 "http://alli.herbaltron.com/strength-training-exercises-with-weights-for-weight-loss.html" ";"
217.65.8.94 - - [31/Dec/2009:08:35:25 -0800] "GET /jquery.js HTTP/1.1" 200 27147 "http://alli.herbaltron.com/strength-training-exercises-with-weights-for-weight-loss.html" ";"
217.65.8.94 - - [31/Dec/2009:08:35:26 -0800] "GET /jquery_001.js HTTP/1.1" 200 80249 "http://alli.herbaltron.com/strength-training-exercises-with-weights-for-weight-loss.html" ";"
217.65.8.94 - - [31/Dec/2009:08:36:15 -0800] "GET /strength-training-exercises-with-weights-for-weight-loss.html HTTP/1.1" 200 50458 "http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%E7%E0%F9%E8%F2%E5" ";"
217.65.8.94 - - [31/Dec/2009:10:25:24 -0800] "GET /index.css HTTP/1.1" 200 10794 "http://cushylips.herbaltron.com/sitemap-1.html" ";"
217.65.8.94 - - [31/Dec/2009:10:25:24 -0800] "GET /javascript.js HTTP/1.1" 200 17495 "http://cushylips.herbaltron.com/sitemap-1.html" ";"
217.65.8.94 - - [31/Dec/2009:10:25:25 -0800] "GET /jquery.js HTTP/1.1" 200 29846 "http://cushylips.herbaltron.com/sitemap-1.html" ";"
217.65.8.94 - - [31/Dec/2009:10:25:55 -0800] "GET /sitemap-1.html HTTP/1.1" 200 53376 "http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%EF%F0%E0%E7%E4%ED%E8%EA%EE%E2" ";"
217.65.8.94 - - [08/Jan/2010:11:52:48 -0800] "GET /default.js HTTP/1.1" 200 1524 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [08/Jan/2010:11:52:49 -0800] "GET /javascript.js HTTP/1.1" 200 3829 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [08/Jan/2010:11:52:49 -0800] "GET /index.css HTTP/1.1" 200 24142 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [08/Jan/2010:11:52:50 -0800] "GET /jquery.js HTTP/1.1" 200 27147 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [08/Jan/2010:11:52:51 -0800] "GET /jquery_001.js HTTP/1.1" 200 80249 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [08/Jan/2010:11:55:58 -0800] "GET /pics-of-round-yellow-weight-loss-pill.html HTTP/1.1" 200 50478 "http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%E8%E3%F0%FB" ";"
217.65.8.94 - - [08/Jan/2010:23:31:17 -0800] "GET /default.js HTTP/1.1" 200 1524 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [08/Jan/2010:23:31:18 -0800] "GET /javascript.js HTTP/1.1" 200 3829 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [08/Jan/2010:23:31:18 -0800] "GET /index.css HTTP/1.1" 200 24142 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [08/Jan/2010:23:31:18 -0800] "GET /jquery.js HTTP/1.1" 200 27147 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [08/Jan/2010:23:31:19 -0800] "GET /jquery_001.js HTTP/1.1" 200 80249 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [08/Jan/2010:23:31:29 -0800] "GET /pics-of-round-yellow-weight-loss-pill.html HTTP/1.1" 200 50477 "http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%EF%EE%E7%E4%F0%E0%E2%EB%E5%ED%E8%E5" ";"
217.65.8.94 - - [11/Jan/2010:10:36:34 -0800] "GET /default.js HTTP/1.1" 200 1524 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [11/Jan/2010:10:36:35 -0800] "GET /javascript.js HTTP/1.1" 200 3829 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [11/Jan/2010:10:36:35 -0800] "GET /index.css HTTP/1.1" 200 24142 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [11/Jan/2010:10:36:35 -0800] "GET /jquery.js HTTP/1.1" 200 27147 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [11/Jan/2010:10:36:36 -0800] "GET /jquery_001.js HTTP/1.1" 200 80249 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [11/Jan/2010:10:37:02 -0800] "GET /pics-of-round-yellow-weight-loss-pill.html HTTP/1.1" 200 50477 "http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%F1%E0%EB%E0%F2%EE%E2" ";"
217.65.8.94 - - [11/Jan/2010:13:43:09 -0800] "GET /pics-of-round-yellow-weight-loss-pill.html HTTP/1.1" 200 50476 "http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%F4%E8%F0%EC" ";"
217.65.8.94 - - [11/Jan/2010:13:43:09 -0800] "GET /default.js HTTP/1.1" 200 1524 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [11/Jan/2010:13:43:09 -0800] "GET /javascript.js HTTP/1.1" 200 3829 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [11/Jan/2010:13:43:10 -0800] "GET /index.css HTTP/1.1" 200 24142 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [11/Jan/2010:13:43:10 -0800] "GET /jquery.js HTTP/1.1" 200 27147 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [11/Jan/2010:13:43:12 -0800] "GET /jquery_001.js HTTP/1.1" 200 80249 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [11/Jan/2010:23:31:43 -0800] "GET /default.js HTTP/1.1" 200 1524 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [11/Jan/2010:23:31:43 -0800] "GET /javascript.js HTTP/1.1" 200 3829 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [11/Jan/2010:23:31:43 -0800] "GET /index.css HTTP/1.1" 200 24142 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [11/Jan/2010:23:31:43 -0800] "GET /jquery.js HTTP/1.1" 200 27147 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [11/Jan/2010:23:31:44 -0800] "GET /jquery_001.js HTTP/1.1" 200 80249 "http://alli.herbaltron.com/pics-of-round-yellow-weight-loss-pill.html" ";"
217.65.8.94 - - [11/Jan/2010:23:31:56 -0800] "GET /pics-of-round-yellow-weight-loss-pill.html HTTP/1.1" 200 50477 "http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%F4%F0%E0%ED%F6%E8%FF" ";"
217.65.8.94 - - [12/Jan/2010:06:32:16 -0800] "GET /index.css HTTP/1.1" 200 14340 "http://skinbrightener.herbaltron.com/natural-sea-beauty-skin-cream.html" ";"
217.65.8.94 - - [12/Jan/2010:06:32:17 -0800] "GET /main.js HTTP/1.1" 200 2004 "http://skinbrightener.herbaltron.com/natural-sea-beauty-skin-cream.html" ";"
217.65.8.94 - - [12/Jan/2010:06:32:17 -0800] "GET /jquery.js HTTP/1.1" 200 27147 "http://skinbrightener.herbaltron.com/natural-sea-beauty-skin-cream.html" ";"
217.65.8.94 - - [12/Jan/2010:06:32:47 -0800] "GET /natural-sea-beauty-skin-cream.html HTTP/1.1" 200 38399 "http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=ITVA,ITVA:2006-42,ITVA:en&q=%E0%E2%F2%EE%EC%E8%F0" ";"


1 комментарий:

Unknown комментирует...

у меня такаяже херня была, заметил также в статистике запросов. только это был последний запрос после чего мне заблочили аккаунт на сервере где лежал сайт на который перешли по такому запросу. причины блокировки еще не выяснил так как оказалось что техподдержка оооочень тупая и я просто не дожидаясь ответов сменил хостинг.