Bad bot alert: Rankcrawler

Looks like a bot has been scouring my website without properly identifying itself. I noticed that my older posts were getting a lot of unexplained hits. I checked the logs, looked up the IPs, and discovered the visitors were bots from the rankcrawler.com domain. The bots don’t properly identify themselves in their user agent field, as good bots should do:

Some of the bots came from these IPs (though there may be others):
87.98.249.75
87.98.133.249
91.121.26.45
94.23.152.34
94.23.153.8

As you can see, Rankcrawler prefers to disguise itself as a regular browser. This is a no-no.

87.98.249.75 – – [29/May/2009:23:56:09 -0400] “GET /page/2/ HTTP/1.0” 200 34160 “-” “Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.6) Gecko/2009011913 Firefox/3.0.6”
87.98.249.75 – – [30/May/2009:00:11:16 -0400] “GET /2006/07/ HTTP/1.0” 200 41171 “-” “Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.6) Gecko/2009011913 Firefox/3.0.6”

91.121.26.45 – – [29/May/2009:20:47:22 -0400] “GET / HTTP/1.0” 200 34467 “-” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)”
91.121.26.45 – – [30/May/2009:00:01:23 -0400] “GET /2008/05/ HTTP/1.0” 200 27858 “-” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)”

Continue reading

N&O omits rival paper’s name in print, mentions it online

The News and Observer ran a story this morning about rival newspaper The Carrboro Citizen asking for a small business loan from the Town of Carrboro. In the online version of the story, the newspaper’s name is mentioned (emphasis mine):

The Carrboro Citizen’s plans buck two trends. Across the U.S., newspapers are printing fewer copies as circulation and advertising revenues decline. At the same time, many recoil at the suggestion of government aid such as that granted to other industries.

Continue reading

Car warranty scammers busted, but are they the right ones?

I learned today that last week the Federal Trade Commission filed suit against a telemarketing company and a car warranty company allegedly involved in the car warranty robocalls. According to the FTC press release:

The complaints were filed in the U.S. District Court for the Northern District of Illinois on May 14, 2009. The complaint against the robocaller names as defendants a Florida-based company called Voice Touch Inc., and two of its principals, James and Maureen Dunne. It also names an Illinois-based company affiliated with Voice Touch called Network Foundations, LLC and a principal in that company, Damian Kohlfeld. The second complaint names a Florida-based company called Transcontinental Warranty Inc., which sells extended auto warranties, and the company’s president and CEO, Christopher D. Cowart.

That’s all fine and good, but these names do not match up with the documents sent to me by people who were unlucky enough to purchase the warranties. Those documents clearly say “Great Atlantic Warranty.” So, while some enforcement is better than none, I’m afraid there are some bandits still to be rounded up.

NY Times visits MT.Net

This morning I noticed my work against car warranty scammers has garnered the attention of readers of the New York Times blog. Apparently, Senator Chuck Schumer (D-NY) has been getting the calls as well. Schumer is calling for a national investigation.

For Schumer and any others who may be interested, I have collected a lot of evidence regarding these calls (browse my Meddling category for examples). I have also tried to get the North Carolina Attorney General’s office interested as well as the Florida Attorney General’s office. The result has been absolutely no action. No response, nothing. It seems that no one cares. Meanwhile there are plenty of little old ladies who have been bilked $3000 for a car warranty that in some cases exceeds the worth of their cars.

Should you be visiting my site for the first time and are in a position to actually do something about these shady calls, contact me and I’ll give you enough information to gain a warrant or subpoena.

Kintiskton

I found a bunch of web hits from a subnet belonging to an organization called Kintiskton. Their server was spidering my blog without identifying itself as a bot or a spider:

65.208.151.113 – – [23/Apr/2009:07:50:24 -0400] “GET /wp-content/uploads/2009/03/amazon.gif HTTP/1.1” 403 362 “http://www.markturner.net/category/Musings/” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)”
65.208.151.116 – – [23/Apr/2009:07:50:29 -0400] “GET /2009/01/06/interview-day/ HTTP/1.1” 403 350 “http://www.markturner.net/category/Musings/” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)”
65.208.151.114 – – [23/Apr/2009:07:50:33 -0400] “GET /2008/06/ HTTP/1.1” 403 333 “http://www.markturner.net/category/Musings/” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)”

Bad spider! Bad!

Here is the whois record:
Continue reading

Sun and Oracle

Farewell, Sun. What a pioneer you were. Oracle will keep Sun alive and possibly even treat it well, but it will never be the same.

The upside of this is that there should be a spate of start-ups soon as Sun folks (and some Oracle folks) head for the exits and try their own thing. The other upside is that Red Hat avoided Oracle’s clutches. Oracle can’t make a move for Red Hat now without raising antitrust concerns. Will IBM continue shopping?

Something’s afoot in the City of Raleigh

mystery-invitation-smallI got a mysterious email invitation this afternoon from the City of Raleigh. It reads:

The City of Raleigh invites you to enjoy your coffee break Tuesday, April 14, celebrating a local partnership that is producing a significant “FIRST IN THE U.S.A.”

10 A.M., Tuesday, April 14
Raleigh Convention Center
Salisbury Street and Lenoir Street

I understand a different invite went to the city councilors that read:

The City of Raleigh and the Transit Authority invite you to enjoy your coffee break Tuesday, April 14 celebrating a local partnership that is producing a technological “FIRST IN THE USA!”

Please join us at 10 a.m., Tuesday, April 14 at the Raleigh Convention Center’s Salisbury Street and Lenoir Street plaza.

As you can see, the second one mentions the “Transit Authority” and “technological first.” I wonder what this means.

  • A GPS bus locator? No, that’s old hat. Been done already.
  • WiFi on city buses? Certainly possible, but what’s the local partnership angle?.
  • Mobile digital TV on city buses? This one makes more sense.

Capitol Broadcasting (home of WRAL) has been tinkering with mobile digital TV and has some devices built.

Capitol’s new mobile technology spinoff company is called News Over Wireless and is certainly local. But would transit passengers be forced to watch all-WRAL, all the time, or would other stations also be available?

On the other hand, it could have nothing to do with TV and could be some sort of other transit innovation. A Prius-branded bus? Electric vehicle recharging stations? Again, what would be the local partnership angle, and what about this would be worthy of such subterfuge?

This is all speculation at this point, as I haven’t gleaned any more insights. I do hope to be around for Tuesday’s unveiling of Whatever It Is.

Robtex

When I noticed a store’s webserver was unreachable, I decided to find out why. With a little sleuthing I found that its nameservers were not resolving.

Normally when this happens there’s no trace of the company left on the Internet, but The Google took me to the robtex DNS tool. Thanks to this site, I was able to find the missing nameservers’ IP addresses and verify that these servers were indeed offline.

I consider it poor system administration to host your domain nameservers entirely in your own namespace for just this reason. If you make a mistake in a zone with your own nameserver, your whole foo.com site becomes invisible to the Internet.

I hope this major store gets itself back on the web soon!

Patrick Chan, I presume?

Isn’t this exciting? I’m going to get $12.5M !

Date: Thu, 9 Apr 2009 07:06:17 -0400 (EDT)
From: PATRICK CHAN innocent.emailaddress@someuniversity.fake
Subject: Contact email: pat.ch01@8u8.com
To: undisclosed-recipients:;

I’m Mr Patrick Chan, i have a proposal of $12.5M,please contact me by email: pat.ch01@8u8.com

Employment offer!

Gosh, this sounds like my dream job!!11!1!!

From: “John Erskine” g.galtier@orange .fr
Subject: Employment offer
Date: Sat, 28 Mar 2009 14:38:13 -0800

Dear Sir/Madam,

Global sources limited is a registered group of business agency, that deals on trade merchandize, we have a wide range of clientele across the world, we are experts in trade distribution and product marketing, having scored a distinction as to earn the much revered title, “Asian trade giants”.

Distributed products as follows;

Electronics, A/V Care, Accessories & Services • Audio Equipment • Personal/Office • Furnishings • Furniture • Health & Medical • Household Supplies • Kitchenware • Beauty Products & Cosmetics • Jewelry • Men’s & Women’s Shoes & Accessories • Watches &
Continue reading