Kirjoittaja Aihe: Outo IP-osoite.. (vieraillut kotisivuillani erikoisen säännöllisesti)  (Luettu 2320 kertaa)

f0nzarelli

  • Käyttäjä
  • Viestejä: 9
    • Profiili
    • fonz.homelinux.com
Mua on jo hetken aikaa ihmetyttänyt 85.116.31.2 IP:stä tulevat vierailut. Ne ovat aina 4 peräkkäin ja 5 minuutin välein. Onkos muilla vastaavia vierailuita kyseisetä IP-osoiteesta? Voisko se olla joku porttiskanneri (ro)botti?  ???

Olen koittanut pingiä ja traceroutea tuohon osoitteeseen, mutta se plokkaa pingaukset...

Pieni pätkä logista (kyseisen IP:n osalta):
Koodia: [Valitse]
pvm        - klo   | IP              | kohde
-------------------------------------------------
22.12.2006 - 16:29 | 85.116.31.2     | /index.php   
22.12.2006 - 16:34 | 85.116.31.2     | /index.php   
22.12.2006 - 16:39 | 85.116.31.2     | /index.php   
22.12.2006 - 16:44 | 85.116.31.2     | /index.php   

23.12.2006 - 17:31 | 85.116.31.2     | /index.php   
23.12.2006 - 17:36 | 85.116.31.2     | /index.php   
23.12.2006 - 17:41 | 85.116.31.2     | /index.php   
23.12.2006 - 17:46 | 85.116.31.2     | /index.php   

27.12.2006 - 04:47 | 85.116.31.2     | /index.php   
27.12.2006 - 04:52 | 85.116.31.2     | /index.php   
27.12.2006 - 04:57 | 85.116.31.2     | /index.php   
27.12.2006 - 05:02 | 85.116.31.2     | /index.php   

28.12.2006 - 22:42 | 85.116.31.2     | /index.php   
28.12.2006 - 22:47 | 85.116.31.2     | /index.php   
28.12.2006 - 22:52 | 85.116.31.2     | /index.php   
28.12.2006 - 22:57 | 85.116.31.2     | /index.php   

30.12.2006 - 20:26 | 85.116.31.2     | /index.php   
30.12.2006 - 20:31 | 85.116.31.2     | /index.php   
30.12.2006 - 20:36 | 85.116.31.2     | /index.php   
30.12.2006 - 20:41 | 85.116.31.2     | /index.php

immoT

  • Käyttäjä
  • Viestejä: 435
    • Profiili
Lainaus
tommi@dsl-elmo:~/linuxdc/linuxdcpp$ whois 85.116.31.2
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% http://www.ripe.net/db/news/abuse-proposal-20050331.html
% for more details.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '85.116.31.0 - 85.116.31.3'

inetnum:        85.116.31.0 - 85.116.31.3
netname:        KEWLIO-QUAKENET
descr:          IRC Infrastructure
descr:          NOTE: 85.116.31.2 runs the 'PROXYSCANNER' for the
descr:          QuakeNet IRC Network.
descr:          It will only scan you if you connect to the IRC network.
descr:          For More Information see:
descr:          http://www.quakenet.org/openproxies.html
descr:          If you were scanned by that IP and believe you do not
descr:          connect to QuakeNet - We suggest you get your system
descr:          checked by a Virus/Trojan Scanner.

country:        GB
admin-c:        KDNL
tech-c:         KDNL
org:            ORG-KL14-RIPE
status:         ASSIGNED PA
mnt-by:         KEWLIO-MNT
mnt-irt:        IRT-KEWLIO
source:         RIPE # Filtered

organisation:   ORG-KL14-RIPE
org-name:       Kewlio.net Limited
org-type:       LIR
remarks:        Abuse complaints to abuse@kewlio.net
address:        21 Severn Drive
                Telford
address:        TF1 3JP
address:        Shropshire
address:        United Kingdom
phone:          +448450034120
fax-no:         +448454580544
admin-c:        DJA97
mnt-ref:        RIPE-NCC-HM-MNT
mnt-ref:        KEWLIO-MNT
mnt-by:         RIPE-NCC-HM-MNT
mnt-by:         RIPE-NCC-HM-MNT
source:         RIPE # Filtered

role:           Kewlio.net Limited Hostmaster
address:        21 Severn Drive
address:        Telford
address:        Shropshire
address:        TF1 3JP
address:        United Kingdom
phone:          +44 (0) 845 0034120 # UK/Europe
phone:          +1 231 538-3329 # USA
fax-no:         +44 (0) 845 458 0544
remarks:        trouble:      +------------------------------------+
remarks:        trouble:      | All abuse reports MUST be sent to: |
remarks:        trouble:      |                                    |
remarks:        trouble:      |          abuse@kewlio.net          |
remarks:        trouble:      |                                    |
remarks:        trouble:      |    and NOT to any other address    |
remarks:        trouble:      +------------------------------------+
org:            ORG-KL14-RIPE
admin-c:        DJA97 # Daniel Austin
tech-c:         DJA97 # Daniel Austin
nic-hdl:        KDNL
mnt-by:         KEWLIO-MNT
source:         RIPE # Filtered
abuse-mailbox:  abuse@kewlio.net

% Information related to '85.116.0.0/19AS3344'

route:        85.116.0.0/19
descr:        KDNL-RT
origin:       AS3344
mnt-by:       KEWLIO-MNT
mnt-routes:   KEWLIO-MNT
org:          ORG-KL14-RIPE
source:       RIPE # Filtered

organisation:   ORG-KL14-RIPE
org-name:       Kewlio.net Limited
org-type:       LIR
remarks:        Abuse complaints to abuse@kewlio.net
address:        21 Severn Drive
                Telford
address:        TF1 3JP
address:        Shropshire
address:        United Kingdom
phone:          +448450034120
fax-no:         +448454580544
admin-c:        DJA97
mnt-ref:        RIPE-NCC-HM-MNT
mnt-ref:        KEWLIO-MNT
mnt-by:         RIPE-NCC-HM-MNT
mnt-by:         RIPE-NCC-HM-MNT
source:         RIPE # Filtered
« Viimeksi muokattu: 30.12.06 - klo:21.37 kirjoittanut immoT »

f0nzarelli

  • Käyttäjä
  • Viestejä: 9
    • Profiili
    • fonz.homelinux.com
Tulipas (taas) todistettua se oma tyhmyys :P Quakenetin osotehan se oli......

Ei mul ollu mitään käryy tosta whois-käskystä..

Kiitos ja kumarrus  :)