Purebot/1.1 - Malicious Content Scraper and Spam Agent

[miqrogroove]

Host: 174.133.177.66
Http Version: HTTP/1.1
Referer: -
Agent: Mozilla/5.0 (compatible; Purebot/1.1; +http://www.puritysearch.net/)

[AnthonyCea]

Well, you have these hackers pegged right because ProjectHoneyPot.org has this bot blacklisted as a rule breaker.

www.projecthoneypot.org/ip_174.133.177.66

Quote:

Project Honey Pot system has detected behavior from the IP address 174.133.177.66 that is consistent with that of a Rule Breaker.

[AnthonyCea]

Turns out these morons are running a PPC search engine, sort of like a domain landing page, one wonders why they need to scrape web content for that sort of thing, most likely they are using this fake search engine as a front to scan web content for other projects.

The guys over at WebmasterWorld have more dedicated hosting IP ranges used by these idiots listed in this hackerbot's history.

http://www.webmasterworld.com/search...rs/4033706.htm

174.133.177.66 42.b1.85ae.static.theplanet.com

OrgName: ThePlanet.com Internet Services, Inc.
OrgID: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US

ReferralServer: rwhois://rwhois.theplanet.com:4321

NetRange: 174.132.0.0 - 174.133.255.255
CIDR: 174.132.0.0/15
OriginAS: AS13749, AS21844, AS30315, AS36420
NetName: NETBLK-THEPLANET-BLK-15
NetHandle: NET-174-132-0-0-1
Parent: NET-174-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.THEPLANET.COM
NameServer: NS2.THEPLANET.COM
Comment:
RegDate: 2008-06-17
Updated: 2008-06-17

RAbuseHandle: ABUSE271-ARIN
RAbuseName: The Planet Abuse
RAbusePhone: +1-281-714-3560
RAbuseEmail: abuse@theplanet.com

RNOCHandle: THEPL-ARIN
RNOCName: The Planet NOC
RNOCPhone: +1-281-714-3555
RNOCEmail: noc@theplanet.com

RTechHandle: TECHN33-ARIN
RTechName: Technical Support
RTechPhone: +1-214-782-7800
RTechEmail: admins@theplanet.com

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: The Planet Abuse
OrgAbusePhone: +1-281-714-3560
OrgAbuseEmail: abuse@theplanet.com

OrgNOCHandle: THEPL-ARIN
OrgNOCName: The Planet NOC
OrgNOCPhone: +1-281-714-3555
OrgNOCEmail: noc@theplanet.com

OrgTechHandle: TECHN33-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-214-782-7800
OrgTechEmail: admins@theplanet.com

[orasis]

174.133.177.66 tried too many urls returning 404 error


Visit date: 2009-09-18 04:44:45
IP: 174.133.177.66
NS-Lookup: 42.b1.85ae.static.theplanet.com
System: Windows XP
Browser: Internet Explorer 6.0
Country: United States

[miqrogroove]

Host: 195.42.102.25
Agent: Agent: Mozilla/5.0 (compatible; Purebot/1.1; +http://www.puritysearch.net/)

This bot has become moderately aggressive and I have added it to my global ban list.