[Oisf-users] [OT] Have search bots been poisoned?

[James Moe]

(I am asking this here since it seemed a likely place that would be
aware of the issue.)

Our website has been pelted with repeated requests for pages on the
website that have never existed at any time in its history. The page
name is constantly being modified by changing the numeric portions in a
random manner.

Thousands of requests have been made over the last 3 days resulting in a
long list of 404s. While this does not represent much of a burden,
several requests per minute, it is annoying since the pages being
requested are meaningless.

And the requests all originate from major search engines.

The page URL samples:
https://example.com/heling348628-h1819-746-be2dochmiacal-97a2-/6a465d7hll78i1/
https://example.com/condalia898.xml.gz

The networks involved:
66.249.0.0/16    Googlebot

157.55.0.0/16    MSN search / Bing
40.77.167.0/24
207.46.13.0/24

Has anyone else seen this behavior?


-- 
James Moe
jimoe at twosohnens dot us
Think.


-- 
James Moe
moe dot james at sohnen-moe dot com
520.743.3936
Think.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20190627/1881384c/attachment.sig>