77.201.246.219 - Possible Bad Bot Alert

[Gillf]

Hi

This morning I checked the number of overnight visitors as I usually do and found it was up quite a bit so checked out the stats and found that I had repeated visits from 77.201.246.219 - all single page accesses.

I did an IP search and then a bit of Googling and found nothing good and some info to worry.

The IP goes back to: gaoland.net. There is no website for this domain name. Various Google results, a lot from chat rooms, about this co accessing sites and blogs including one string which said that it was a script trying to access/hack passwords. There was also a connection with SPAM.

So naturally I have blocked the address and thought I should share this event with everyone.

Have a great weekend

Gill

[petad]

Thanks for the heads-up Gill. On IP search, it appears to be a Paris based IP address.

[mikeyred]

Hi Guys,

Some may already have this but it is what we use at ICUK for quick refrencing on IP address while on the phone to a client. This will help you find basic information about your IP, email tracker, etc.

click the link http://whatismyipaddress.com/staticpages/index.php/lookup-ip and it will pop up with your IP in, use that to check if you are on any blacklist (doubtful) by clicking the button when your information is loaded up.... it gives you a full explanation on each page. Most will have a Proxy server so this will be the address shown, not your personal one.

You can then enter what you believe is an offending IP and check on the blacklist to see if it is already listed with one of the Anti-Spam companies.... if so, then it would be wise for you to block the IP. As you will see Gill 77.201.246.219 is listed with some of the A-S companies.

Like I say this is a basic investigation but very reliable for the level it works at and the forum is quite useful for those grey areas at times.... assuming you have time to troll through it ..... basically keeping it all inhouse so to speak.

Hope its of some benefit.