Very strange URL requests from Germany

I am getting a bunch of requests to one URL which is strange, as it is strickly used to count advertisment hits (only redirects to proper page depending on ad). All these requests seem to have the data for one ad that runs in google yet google is not showing them. These requests look all like direct calls and are all coming from three networks:

217.229
217.224
80.131

All of these seem to be german IPs:
http://dnsstuff.com/tools/whois.ch?ip=217.224
http://dnsstuff.com/tools/whois.ch?ip=217.229
http://dnsstuff.com/tools/whois.ch?ip=80.131

I sent them (abuse) an email inquiring, as it is strange that they have several hundred users requesting this one URL (no more). Very strange indeed.

They all tend to look like this (note they get 403 as I blocked these networks from my directory, not entire site).

217.224.50.152 - - [06/Feb/2004:19:59:40 -0500] "GET /directory/file.php?item1_id=7&item2_id=1&section=hospedaje HTTP/1.1" 403 866 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; i-NavFourF; .NET CLR 1.1.4322)"

Has anyone ever seen this? I read up that this:

i-NavFourF; .NET CLR 1.1.4322

May indicae a web crawler or spider, but why so many strange IPs? I should add that these request sare coming about one per 5 seconds or so.

 

 

 

 

Top