8 8
8 8

Techie Question? What is this IP doing?

by
Michael Mayhew
Michael Mayhew
Profile picture of Michael Mayhew
Michael Mayhew
Posts: Threads: Thanks: Account age: less than a second
6 replies
Everyday almost on the hour I get a visit like this

Referer: http://88.198.7.221/?xurl=88.198.7.2...automation.com

3 different IP's, all everyday.

Just trying to figure out the purpose?
#question #techie
  • Profile picture of the author Farish
    Farish
    Farish
    Profile picture of Farish
    Farish
    Posts: Threads: Thanks: Account age: less than a second
    Trying to figure out it's purpose from your link is hard. What you need to do is look over your logs and see exactly what the referrer is trying to access. They are basically using a proxy service if that is what you were wondering about. Read this post on how to disable people using an xurl to come over. You may want to read that whole thread.

    http://www.warriorforum.com/main-int...ml#post5162802
  • Profile picture of the author Lloyd Buchinski
    Lloyd Buchinski
    Lloyd Buchinski
    Profile picture of Lloyd Buchinski
    Lloyd Buchinski
    Posts: Threads: Thanks: Account age: less than a second
    At least the ip isn't in the spam database I checked.

    If you treat the ip as a domain and do a whois, it looks like ripe.net has that whole range of ips.

    88.198.7.221 - Who.is

    It looks like it might be slightly related to your sig site, so maybe they are just keeping a check for new material.

    It doesn't really answer your question, but maybe some of that is useful, or could lead to other ideas.
    Signature

    Do something spectacular; be fulfilled. Then you can be your own hero. Prem Rawat

    The KimW WSO

  • Profile picture of the author arthurnyc
    arthurnyc
    arthurnyc
    Profile picture of arthurnyc
    arthurnyc
    Posts: Threads: Thanks: Account age: less than a second
    I have the same IP hitting us (starreviews dot com) but I think it is some sort of bot for posting comments. We use wordpress and I am trying to match up IPs with the Spam comments. Let you know.

    Arthur
  • Profile picture of the author automaton
    automaton
    automaton
    Profile picture of automaton
    automaton
    Posts: Threads: Thanks: Account age: less than a second
    Weird, searching with the operators inurl:"xurl" inurl:"xref" yields other examples.
    There are some Russian sites blocked by their hosting in those examples so I guess there is a high probability that nothing good is of these kind of requests.
  • Profile picture of the author williamk
    williamk
    williamk
    Profile picture of williamk
    williamk
    Posts: Threads: Thanks: Account age: less than a second
    Banned
    I think it is a spam bot too. Its better you change some comments to approval based. Its hard to tackle them.
    They are persistent.

Trending Topics