phx.gbl visitor to my site?

Has anyone else noticed this "visitor" to your site?

From what I could find this is related to MSN searchbot????

Any info would be appreciated.

Thanks,
Tina

I am a webmaster for an online store using OSCommerce and captured the following visitor information just from today alone! My research led me to the following site: http://artific.com/articles/2005/12/27/a_practically_u/. On the aforementioned page there is reference to Turkish hackers with a homemade pbx naming convention. This page further elaborated that one of the presumed hackers use a cookie exploit to access php sql driven sites to insert his own admin information, while the table was easy enough to truncate and remake a super admin. Apparently, he has affected over 40 websites.

I simply went to http://www.countryipblocks.net/index.php and blocked all CIDR's from Turkey; plain and simple. I could care less if a single sale comes from Turkey. ;)

bl1sch4084016.phx.gbl
bl1sch4090920.phx.gbl
bl1sch4084216.phx.gbl
bl1sch4090305.phx.gbl
bl1sch4090801.phx.gbl
bl1sch4083807.phx.gbl
bl1sch4090905.phx.gbl
bl1sch4084013.phx.gbl
bl1sch4090506.phx.gbl
bl1sch4083812.phx.gbl
bl1sch4084012.phx.gbl
bl1sch4090719.phx.gbl
bl1sch4083909.phx.gbl
bl1sch4084409.phx.gbl
bl1sch4084609.phx.gbl
bl1sch4084220.phx.gbl
bl1sch4084607.phx.gbl
bl1sch4083720.phx.gbl
bl1sch4090907.phx.gbl
bl1sch4090806.phx.gbl
bl1sch4090407.phx.gbl
bl1sch4084318.phx.gbl
bl1sch4084211.phx.gbl
bl1sch4090308.phx.gbl
bl1sch4090802.phx.gbl
bl1sch4083702.phx.gbl
bl1sch4090805.phx.gbl
bl1sch4090203.phx.gbl
bl1sch4090906.phx.gbl
bl1sch4084612.phx.gbl
bl1sch4090502.phx.gbl
bl1sch4090401.phx.gbl
bl1sch4084605.phx.gbl
bl1sch4084116.phx.gbl
bl1sch4084613.phx.gbl
bl1sch4084010.phx.gbl
bl1sch4090404.phx.gbl
bl1sch4084620.phx.gbl
bl1sch4083711.phx.gbl
bl1sch4084120.phx.gbl
bl1sch4090103.phx.gbl
bl1sch4084518.phx.gbl
bl1sch4090713.phx.gbl
bl1sch4090215.phx.gbl
bl1sch4083710.phx.gbl
bl1sch4090904.phx.gbl
bl1sch4090417.phx.gbl
bl1sch4084209.phx.gbl
bl1sch4084413.phx.gbl
bl1sch4083813.phx.gbl
bl1sch4084110.phx.gbl
bl1sch4083919.phx.gbl
bl1sch4090617.phx.gbl
bl1sch4090406.phx.gbl
bl1sch4084516.phx.gbl
bl1sch4090119.phx.gbl
bl1sch4090311.phx.gbl
bl1sch4083914.phx.gbl
bl1sch4083706.phx.gbl
bl1sch4090818.phx.gbl
bl1sch4091008.phx.gbl
bl1sch4090212.phx.gbl
bl1sch4084316.phx.gbl
bl1sch4084203.phx.gbl
bl1sch4083903.phx.gbl
bl1sch4084503.phx.gbl
bl1sch4084416.phx.gbl
bl1sch4090508.phx.gbl
bl1sch4084215.phx.gbl
bl1sch4091018.phx.gbl
bl1sch4084514.phx.gbl
bl1sch4090702.phx.gbl
bl1sch4084603.phx.gbl
bl1sch4084118.phx.gbl
bl1sch4090815.phx.gbl
bl1sch4090420.phx.gbl
bl1sch4090901.phx.gbl
bl1sch4090411.phx.gbl
bl1sch4084512.phx.gbl
bl1sch4083905.phx.gbl
bl1sch4083901.phx.gbl
bl1sch4084311.phx.gbl
bl1sch4084418.phx.gbl
bl1sch4090213.phx.gbl
bl1sch4084411.phx.gbl
bl1sch4090809.phx.gbl
bl1sch4090114.phx.gbl
bl1sch4084320.phx.gbl
bl1sch4090720.phx.gbl
bl1sch4090718.phx.gbl
bl1sch4083811.phx.gbl
bl1sch4083719.phx.gbl
bl1sch4084314.phx.gbl
bl1sch4084109.phx.gbl
bl1sch4090507.phx.gbl
bl1sch4090201.phx.gbl
bl1sch4083704.phx.gbl
bl1sch4084111.phx.gbl
bl1sch4091010.phx.gbl
bl1sch4084019.phx.gbl
bl1sch4090207.phx.gbl
bl1sch4090317.phx.gbl
bl1sch4090318.phx.gbl
bl1sch4090220.phx.gbl
bl1sch4090111.phx.gbl
bl1sch4083915.phx.gbl
bl1sch4090206.phx.gbl
bl1sch4084419.phx.gbl
bl1sch4090914.phx.gbl
bl1sch4090811.phx.gbl
bl1sch4084212.phx.gbl
bl1sch4083802.phx.gbl
bl1sch4083703.phx.gbl
bl1sch4090102.phx.gbl
bl1sch4090707.phx.gbl
bl1sch4090316.phx.gbl
bl1sch4090814.phx.gbl
bl1sch4084214.phx.gbl
bl1sch4090912.phx.gbl
bl1sch4090705.phx.gbl
bl1sch4090602.phx.gbl
bl1sch4090703.phx.gbl
bl1sch4084304.phx.gbl
bl1sch4083717.phx.gbl
bl1sch4090909.phx.gbl
bl1sch4091009.phx.gbl
bl1sch4090715.phx.gbl
bl1sch4090402.phx.gbl
bl1sch4084412.phx.gbl
bl1sch4084619.phx.gbl
bl1sch4090120.phx.gbl
bl1sch4091016.phx.gbl
bl1sch4083906.phx.gbl
bl1sch4084017.phx.gbl
bl1sch4090216.phx.gbl
bl1sch4084011.phx.gbl
bl1sch4090918.phx.gbl
bl1sch4084614.phx.gbl
bl1sch4090313.phx.gbl
bl1sch4084101.phx.gbl
bl1sch4090820.phx.gbl
bl1sch4090208.phx.gbl
bl1sch4091006.phx.gbl
bl1sch4090314.phx.gbl
bl1sch4090819.phx.gbl
bl1sch4084505.phx.gbl
bl1sch4090919.phx.gbl
bl1sch4083814.phx.gbl
bl1sch4084102.phx.gbl
bl1sch4084204.phx.gbl
bl1sch4090905.phx.gbl
bl1sch4090919.phx.gbl

On the aforementioned page there is reference to Turkish hackers with a homemade pbx naming convention.

THANKS SOOOOOO MUCH FOR THE INFO! :hug:

GUESS WHO'S GETTING BLOCKED THRU .HTACCESS ON MY SITES????

TINA

Follow up for anyone interested:

I added the codes from previous post to my .htaccess and the little booger was back again!

I have now added the IP 65.55.109.204 to my .htaccess to see if that stops him/her!

I also did a DNS search and have a screen print - if anyone is interested and wants to take a look, holler!

Tina