Microsoft flooding sites with fake traffic

[Arc Riley]

Hey guys

Do yourselves a favor and search your logs for connections from 131.107.*
65.52.* 65.53.* 65.54.* and 65.55.*

I found a good % of traffic we got, not reported to Google Analytics so I
didn't see it sooner, was referred from http://search.live.com/ for search
queries involving pornography, cars, drugs, and random gibberish.  The
landing pages from these searches were subversion changesets, source code in
the Trac browser, and other places those search queries certainly don't
exist in.

All of it, well 97.2%, from the above two subnets, belonging to Microsoft.
It'd be humorous if I didn't just purchase a new colo server to handle the
large volume of traffic pysoy.org gets.  I can't tell if MS is trying to
skew the statistics in favor of MSIE/Live/etc or if it's conducting a denial
of service attack against free software project sites, perhaps both (two
birds with one stone?).

If you see the similar childish behavior in your logs, please join me in
blocking them and being very vocal as to why.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.gnhlug.org/mailman/private/gnhlug-discuss/attachments/20080220/383eab8a/attachment.html