Unknown IP address assaulting my site

Anyone know this IP?

[coburn]

I'm loathe to just ban an IP without knowing whether it's a bot temporarily gone wild or a rogue rogue.

The following IP assaulted my site's /image/ directory - repeatedly GETting 4 files for 41 minutes solid: 211.135.XXX.224

If anyone is expert enough to tell me more about them or about how to find out more, I'd be in your debt.

Puzzled
Calum

[edited by: webdiversity at 11:00 pm (utc) on June 19, 2004]
[edit reason] No specific IP's please [/edit]

[inwebsys]

inetnum: 211.135.XXX.0 - 211.135.XXX.255
country: JP
source: JPNIC

That's probably as much as you're going to get. I'd say block the IP.

[edited by: webdiversity at 11:02 pm (utc) on June 19, 2004]
[edit reason] No specific details please [/edit]

[coburn]

Thx inwebsys! Great info!

If the method you used to get this info is public domain, please share either via sticky mail or in the forum.

Thanks again!
Calum

[coburn]

Bad news, my host has informed me that a similar script would only work for .asp pages and not the jpg/gif files being downloaded. The assault has now shifted to other IP addresses. I can only think that a competitor doens't like our niche market success.

If anyone has or can suggest a script to boot off IP addresses that repeatedly download a handful of gif/jpg files, I'd be indebted to your helpful expertise. It's a Windows 2003 server.

In hope - Calum

[Leosghost]

sorry double post ...my fault :(

[edited by: Leosghost at 3:04 pm (utc) on July 3, 2004]

[Leosghost]

Belongs to
Hokusetsu Cable Network Company..as does the block ...if you want the contact details to mail them to ask what they are up to sticky me ..

BTW ..their server didn't like being asked who it was ..500 ( pings agressive little thing it is )in under 60 secs ..