Why would a crawler coming from Google netblock show up as malevolent?

  • Playing with snort and get this:

    Detection of a Network Scan
    Dest IP X.X.X.X Port 80
    1:2015527 ET WEB_SERVER Fake Googlebot UA 2 Inbound

    But it seems that this space in 66.249.x.x is a known Google block.

    I am using Community & Emerging

  • Banned

    Disable the broken rule. And while at it, disable 1:2015526, same idiocy.

Log in to reply