[drupal-support] hackers? dumb bots?

[Adam Gaffin]

I've been getting those for weeks. I think it's related to some
pay-per-click fraud being run out of the Beijing area (although I see the IP
address you cited is in Korea) - for awhile, my bandwidth usage shot through
the roof because the guy was using my site's banner somehow (so you might
want to check to see if you're getting unusually high numbers of page
requests for one particular graphic). I originally thought it was something
specific to Drupal because the only domain of mine that was getting hit was
the one where I was only running Drupal, but maybe I just got unlucky. 

Adam Gaffin
Executive Editor, Network World Fusion
agaffin at nww.com / (508) 490-6433 / http://www.nwfusion.com 
"I programmed my robotic dog to bite the guy who delivers the electronic
mail." -- Kibo  

> 
> on a fairly new and unpublicized site, we're getting this in the logs
> 
> Type httpd
> Date
> Friday, January 21, 2005 - 16:15
> 
> User Anonymous
> Location
> http://hpcgi1.nifty.com:80/trino/ProxyJ/prxjdg.cgi
> 
> Message 404 error: trino/ProxyJ/prxjdg.cgi not found.
> Hostname
> 211.200.8.200
> 
> several times a day, these show up as often as one or more a minute, 
> but are sometimes a couple minutes  apart.
> 
> nifty.com is apparently a Japanese ISP, based on a few scattered 
> English words on their site.