| 9:14 pm on Dec 11, 2012 (gmt 0)|
I have the following PlusServer ranges blocked...
220.127.116.11 - 18.104.22.168
22.214.171.124 - 126.96.36.199
188.8.131.52 - 184.108.40.206
220.127.116.11 - 18.104.22.168
| 12:32 am on Dec 12, 2012 (gmt 0)|
Thanks, didn't have 2 of those
| 12:37 am on Dec 12, 2012 (gmt 0)|
I've got a note under that identical IP that says "makes page thumbnails". Don't know if it came from someone here or something in raw logs. Was over a year ago, so raw logs aren't immediately accessible. Processed logs say they first picked up the front page, and later got the front page with all images.
Either for that reason or something else, I too have a block on 85.25. Cumulative effect, probably.
| 3:07 am on Dec 12, 2012 (gmt 0)|
Don't know what kind of thumbnails they make, but caught them snagging images. Man I'm now addicted to Wireshark LOL.
| 1:05 pm on Dec 13, 2012 (gmt 0)|
A heads up:
I have known legit users at:
(All single IPs, I can stickymail the exact IPs if someone needs them)
Know they are legit users because they are long time posting (not spammers) members of an established forum.
So there are corporate gateways in those ranges. I block some of them, just a finer level to avoid blocking real visitors.
| 8:26 pm on Dec 13, 2012 (gmt 0)|
There's collateral damage whenever a company offers multiple internet products along with hosting.
| 8:43 pm on Dec 13, 2012 (gmt 0)|
Yes, often there is, but I try when I can identify it to block around the user IPs because my user content driven sites (forums) depend on them. Often my most prolific posters are what we commonly call "post whores", who post all day long from their job. Their posts tend to drive many responses... hence I let them through.
Only legit users I block are those coming in through anonymous proxies because the same proxies also tend to bring comment spammers.