Has anyone noticed this one IP 141.85.3.130

we have been slammed by this IP

[cornerstone]

This IP 141.85.3.130 has been all over our server along with some of our clients servers..... anybody know what this IP is about? I am new here so be gentle please.

this IP also shows up with these referrers:

<snip>

I have blocked them until I find out they are friendly.

thanks again

cornerstone

[edited by: Brett_Tabke at 12:35 am (utc) on Nov. 18, 2003]
[edit reason] lets not go there :-) [/edit]

[Shannon Moore]

Type that IP into your browser's address bar -- it resolves to a site.

In cases where the IP doesn't resolve to a site, just look for a "reverse IP lookup" tool and type the IP in.

PS: URLs are generally not permitted in these forums, to avoid self-promotion and the like. If folks need to see 'em, you can send them a "StickY Mail" via your WebmasterWorld control panel.

{edited for grammar... "Stick Mail"?! I need to slow down!)

[edited by: Shannon_Moore at 1:29 am (utc) on Nov. 18, 2003]

[cornerstone]

oops sorry bout that....
I guess it is some sorta search engine,
it concerned me because when I went to the referrers I viewed source and there was some adult webcam link in there.... anyways, thank you for posting back so quickly

cornerstone

[Edouard_H]

These sites are bogus blogs. Related thread [webmasterworld.com] - there's a link my second post there with more information.

[privacyman]

i too had found kwlablog.com as referrer, ip 141.85.3.130

lookup 141.85.0.0 - 141.85.255.255 is Bucharest RO

apparently they're using blogger (program enabling quick "memos" to be placed online on sites, eg it sounds like one could use blogger for basis of a chat board)

that's the best I could figure out having followed to the kwlablog.com site plus other posts at WebmasterWorld

decided that I don't need audience at RO so I added
deny from 141.85

[jim_w]

I banned them as well. They were spamming my log even though I don't allow outside access to my log, and their user agent was just 'MSIE 6.0' which is incorrect.

[cornerstone]

well I thought I was doing good when I blocked there IP but they just changed it to another IP address 217.73.164.106 with the referrer showing other blog sites...hmmm any ideas?

[moltar]

Check out this thread: [webmasterworld.com...]

[jim_w]

deny from 217.73.164.
deny from 217.73.165.

I had that one blocked before the 141.****.xxx.xx

I just wonder if it is even worth ones while to block them if your lof is not shown?

I do it based on the fact that it ticks me off that they are doing it.

[cornerstone]

I blocked both the IP's which when you type them into your browser they show up as two different search engines in Romania .... anyways, I haven't had anymore hits since I blocked them both :) maybe they got the hint?

Vivian

[bull]

Blatant logspamming from this Romania thingy ISP, permanently, different "referers". Seems my host denied them on his level as I don't see them anymore in my logs after I reported them :)