Welcome to WebmasterWorld Guest from 50.19.190.144

Forum Moderators: Ocean10000 & incrediBILL

Message Too Old, No Replies

news bot

prateh.ru

     
8:47 pm on Aug 9, 2012 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:5795
votes: 64




UA: Mozilla/5.0 (compatible; news bot /2.1)
Referrer: http://prateh.ru/
robots.txt: no

BSB-SERVICE Dedicated Server Hosting
85.25.129.0 - 85.25.153.255
8:20 pm on Aug 10, 2012 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month

joined:May 14, 2008
posts:3089
votes: 2


85.25.0.0/16 - serverloft DE. Block the lot. :)
12:36 am on Aug 11, 2012 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:5795
votes: 64




Seems there are many server farms inside 85.25.0.0/16 including Hurricane.
6:55 pm on Aug 11, 2012 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month

joined:May 14, 2008
posts:3089
votes: 2


Although I have the range tagged since May 2010 as serverloft it now appears to belong to PlusServer and managed by Intergenia (same company?).

Hadn't noticed hurricane but a lot of US companies are using RIPE services now. Part of the world take-over bid, I suppose. :)
6:09 pm on Aug 12, 2012 (gmt 0)

Preferred Member

10+ Year Member

joined:Mar 10, 2004
posts: 386
votes: 8


I have mostly garbage in that range (most of it is blocked). 85.25.176.x and 85.25.138.x I have legit users from.
7:31 pm on Aug 12, 2012 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month

joined:May 14, 2008
posts:3089
votes: 2


I assume those users are bots from servers? Taking an IP at random at 176.88 I got three open ports including http, ftp and something called mythtv. In my book, that's a server.
7:47 pm on Aug 12, 2012 (gmt 0)

Preferred Member

10+ Year Member

joined:Mar 10, 2004
posts: 386
votes: 8


From two long time and respected members of one of my forums with hundreds of posts each. Out of the dozens of IPs they've each used over the years, those are listed. I have no *recent* data, so it may have been a proxy at some point in the past they used.

I show nothing in my logs from either of those IPs from the last 60 days so its probably a safe bet to block the IPs.
8:04 pm on Aug 13, 2012 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month

joined:May 14, 2008
posts:3089
votes: 2


Proxy IPs would be a good bet if the servers' users were that way inclined. If you have specific IPs then run a port check of them (I use linux umit) to see if there are any open ports that could be used for any purpose such as http, ftp. If so, it's a fair bet they could also be used as proxies.

I monitor all proxies that hit my servers (check the headers). Many are harmless and are let through, others are blocked.
 

Join The Conversation

Moderators and Top Contributors

Hot Threads This Week

Featured Threads

Free SEO Tools

Hire Expert Members