211.117.61.68

[Froggyman]

Anybody have info on this spider? Seems to come from Germany but I'm having a tough time connecting it with a source.

IP: 211.117.61.68 - resolves to RNE00

Hits about 3 pages a second (jeez...!)

Thanks!

[mnw]

Hmmm... looks like it resolves to a Korean site:

Search the APNIC Whois database

Search results for '211.117.61.68'

inetnum 211.104.0.0 - 211.119.255.255
netname KRNIC-KR-25
descr KRNIC
descr Korea Network Information Center
country KR
admin-c WK1-AP, inverse
tech-c SL119-AP, inverse
remarks KRNIC Allocation Block
remarks Authoritative Information regarding assignments and
remarks allocations made from within this block can also be
remarks queried at whois.nic.or.kr
mnt-by APNIC-HM, inverse
mnt-lower MNT-KRNIC-AP, inverse
changed [e-mail] 20000414
source APNIC

person Weon Kim, inverse
address Korea Network Information Center (KRNIC)
address **************** Important Notice **********************
address KRNIC is the National Internet Registry.
address If you want to find detail assignment information
address about above IP address, please use "http://whois.nic.or.kr"
address *****************************************************
address Narajongkeum B/D 14F, 1328-3, Seocho-dong, Seocho-Ku
address Seoul, 137-070, Republic of Korea
phone [phone]
fax-no [phone]
country KR
e-mail [e-mail], inverse
nic-hdl WK1-AP, inverse
mnt-by MNT-KRNIC-AP, inverse
changed [e-mail] 20000927
source APNIC

person Seung-Min Lee, inverse
address Korea Network Information Center (KRNIC)
address **************** Important Notice **********************
address KRNIC is the National Internet Registry
address If you want to find detail assignment information
address about above IP address, please use "http://whois.nic.or.kr"
address *****************************************************
address Narajongkeum B/D 14F, 1328-3, Seocho-dong, Seocho-Ku
address Seoul, 137-070, Republic of Korea
phone [phone]
fax-no [phone]
country KR
e-mail [e-mail], inverse
nic-hdl SL119-AP, inverse
mnt-by MNT-KRNIC-AP, inverse
changed [e-mail] 20000927
source APNIC

Hope this help a little. I got lost when I went to [whois.nic.or.kr....]

/edit/ Actually, trying again, I found:

# ENGLISH

IP Address : 211.117.61.0-211.117.61.255
Connect ISP Name : HANANET
Connect Date : 20000615
Registration Date : 20000708
Network Name : HANANET-NGENE

[ Organization Information ]
Orgnization ID : ORG126663
Name : HANARO Telecom
State : SEOUL
Address : 1445-3 Seocho-Dong Seocho-Ku
Zip Code : 137-728

[ Admin Contact Information]
Name : Chanwoong Park
Org Name : HANARO Telecom
State : SEOUL
Address : 1445-3 Seocho-Dong Seocho-Ku
Zip Code : 137-728
Phone : [phone]
Fax : [phone]
E-Mail : [e-mail]

[ Technical Contact Information ]
Name : Seungchul Hwang
Org Name : HANARO Telecom
Address : 1445-3 Seocho-Dong Seocho-Ku
Zip Code : 137-728
Phone : [phone]
Fax : [phone]
E-Mail : [e-mail]

[Brett_Tabke]

What is the agent name when it visits?
(nice work mnw)

[Froggyman]

Thanks mnw.

Brett, the User Agent is: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)

nslookup 211.117.61.68
Canonical name: RNE002
Addresses: 211.117.61.68

I've been getting slammed by Korean spiders since early January. All beginning with IP's starting with "211.117.61."

I'm going to ban them from now on. 3 pages per second is pretty bad.