Injection Attempt From Microlink IPs

[keyplyr]

Injection attempt:

GET www.mydomain.com/[object Object]://www.bflix.info/worker/init.js HTTP/1.1" 403 520 "http://www.mydomain.com/page.html" "Mozilla/5.0 (Windows NT 6.0; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0"

Microlink Technologies Ltd
81.199.112.0 - 81.199.112.255
81.199.112.0/24

[dstiles]

81.199.0.0/16 is an odd range. Several sub-ranges are listed in DNS as UK but the one you give is Zambia. Ipplanet seems to own the block but its address is Israel, a particularly bad traffic source.

A while ago I had it banned, then released it, now it's banned again. It's quite probably broadband but it's too messy to play with.

[dupres01]

dstiles: are you blovking 81.199.0.0/16 or just 81.199.112.0/24?

[dstiles]

The full /16.