Traumwind - Whatis ostest.ru?

Whatever it is, it's BLOCKED now... I've been seeing over 2400+ request from IP 207.44.184.101 with various agent-strings, but all claiming to refer from www.ostest.ru in one way or the other...

[update: now 4400+ and counting... all 403, but still]

this is a rundonw of the requests

www.ostest.ru
	1371 x	/blog/rss.php
	1162 x	/blog/
	596 x	/kunst/cdCovers/
	220 x	/
	191 x	/soap/
	150 x	/kunst/zeichnungen/
	116 x	/kunst/digital/batmond.html
	107 x	/kunst/zeichnungen/ninja.html
	89 x	/kunst/zeichnungen/succubus.html
	80 x	/kunst/digital/
	76 x	/blog/impressum.html
	75 x	/kunst/
	75 x	/computer/
	74 x	/kunst/farbe/
	68 x	/soap/TGGoogleBrowser.php
	67 x	/blog/trw_colormatch.html
	65 x	/kunst/zeichnungen/luci.html
	61 x	/soap/tggb.php
	59 x	/kunst/miniaturen/
	55 x	/kunst/farbe/birgit.html
	49 x	/kunst/digital/feenMuse.html
	49 x	/kunst/zeichnungen/mercenary.html
	49 x	/kunst/zeichnungen/dryade.html
	48 x	/kunst/zeichnungen/kleine_fee.html
	48 x	/kunst/digital/lady_harlequin_color.html
	47 x	/geschichten/
	47 x	/kunst/zeichnungen/gutScheinFee.html
	39 x	/kunst/photos/
	38 x	/kunst/zeichnungen/lady_harlequin.html
	29 x	/blog/colormath.js

it's using these agent-strings:

Mozilla/5.0 (Slurp/cat; slurp@inktomi.com; http://www.inktomi
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)
Googlebot/2.1 (+http://www.googlebot.com/bot.html)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1
Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)
Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; DT)

but always comes from one IP, and claims to have a referer like these:

	9x  	http://www.ostest.ru/order17.html
  	9x  	http://www.ostest.ru/order12.html
  	8x  	http://www.ostest.ru/order16.html
  	7x  	http://www.ostest.ru/order08.html
  	7x  	http://www.ostest.ru/order13.html
  	7x  	http://www.ostest.ru/order20.html
  	7x  	http://www.ostest.ru/order18.html
  	7x  	http://www.ostest.ru/order10.html
  	6x  	http://www.ostest.ru/order04.html
  	6x  	http://www.ostest.ru/order11.html
  	5x  	http://www.ostest.ru/order01.html
  	5x  	http://www.ostest.ru/order19.html
  	5x  	http://www.ostest.ru/order02.html
  	5x  	http://www.ostest.ru/order06.html
  	5x  	http://www.ostest.ru/order05.html
  	5x  	http://www.ostest.ru/order14.html
  	5x  	http://www.ostest.ru/order09.html
  	4x  	http://www.ostest.ru/order03.html
  	4x  	http://www.ostest.ru/order15.html
  	4x  	http://www.ostest.ru/order07.html

5201+ and counting

[ by Martin>] [permalink] [similar entries]

similar entries (vs):

ranking-charts.de is referer-spamming! (# 27%)
Mozilla deutsch / Mozilla German (# 11%)
Some numbers? (# 9%)
transition to php5 (# 8%)

similar entries (cg):

what kind of advertising it THAT? (# 34%)
aus der Reihe: Traumwind 'stupid but entertaining PihÄhtschPih tricks'™ (# 25%)
ranking-charts.de is referer-spamming! (# 23%)

nbsp (7.6)
x (6)
msie (5.5)
http (4.9)
compatible (4.7)
mozilla (4)
nt (3.7)
slurp (3.4)
windows (3.2)
counting (2.9)
agent (2.8)
ip (2.8)
www (2.7)
refer (2.2)
claims (2.2)
digext (2.2)
rundonw (2.2)
clr (2.2)
dt (2.2)
ostest (2.2)
googlebot (2)
claiming (1.9)
these (1.8)
blocked (1.7)
whatis (1.7)
requests (1.6)
request (1.6)
referer (1.5)
whatever (1.4)
from (1.4)
various (1.4)
seeing (1.4)
net (1.3)
comes (1.3)
win (1.2)
but (1.2)
now (1.2)
update (1.2)
always (1.1)
all (1.1)
one (1.1)
over (1)
it (0.9)
still (0.9)
been (0.9)
using (0.9)
other (0.9)
way (0.8)
and (0.8)
is (0.7)
like (0.7)
or (0.7)
a (0.6)
to (0.6)
have (0.6)
the (0.6)
with (0.5)
this (0.5)
in (0.4)
i (0.4)
of (0.4)
martin (0.2)
(0)