Strange IP's

[Skylar]

150.70.84.22 -- last night had about 100 of the same IP on my site, and today the same thing.. Any clue what the IP is for and what I should do about it? I have never had this issue before.

 

[[JSH]John]

I'm not sure what this is, the only thing I can tell you is that it's a Japanese IP. It may be a proxy since if you search for the IP on google it brings up a lot of results.

Is this causing any problems for you or are you just annoyed that the same IP is on your site a lot?

 

[Skylar]

Well it is messing with my live support as it DINGS each time some new IP is on the site, which it does every other second when their IP's are there, and it likes to mess with the FireFox for some reason.

Its nothing major, just more irritating and I was a bit shocked to see so many IP's on my site at one given time.

 

[Secret]

Do you think it's a search engine bot?

 

[finehost-in]

If you have access to raw logs, you can figure out what the IP address is doing on your site. If it is not friendly - block it using htaccess or any option that your ISP provides.
The IP itself didn't provide any clue though

 

[Skylar]

it goes away for a few hours, then it comes back. Its rather odd.

 

[.Andy]

It could be a client. I left screens open for days before. Try and invite him / her into livehelp.

 

[Decker]

Sounds like theres a server process operating, mentioned by users of Firefly Media Server on their forums.

 

[Skylar]

It isn't a user, as it is over 50 connections at the same time, and it seems to target all of my websites on the server... odd.,

 

[Decker]

Have you checked running processes for any oddities?

 

[deny]

It seems that 150.70.84.22 belong to Japan and that is not listed as suspicious, harvesters, comment spammers or any combination.
If you have problem with ip address then single block it from accessing your server/site.
------------------------------------

150.70.84.22
Host unreachable

150.26.0.0 - 150.100.255.255

Japan
Japan Network Information Center

Japan Network Information Center
Kokusai-Kougyou-Kanda Bldg 6F, 2-3-4 Uchi-Kanda
Chiyoda-ku, Tokyo 101-0047, Japan
phone: +81-3-5297-2311
fax: +81-3-5297-2312
hostmaster@nic.ad.jp

Japan Network Information Center
Kokusai-Kougyou-Kanda Bldg 6F, 2-3-4 Uchi-Kanda
Chiyoda-ku, Tokyo 101-0047, Japan
phone: +81-3-5297-2311
fax: +81-3-5297-2312
hostmaster@nic.ad.jp

JAPAN150
Updated: 24-Aug-2007 by hm-changed@apnic.net
Source: whois.apnic.net

 

[serverorigin]

Just block the IP with a .htaccess or firewall rule. Simplest fix

 

[fnixws]

Dude your whole site has been down for over 4 hrs....

 

[Decker]

Dude your whole site has been down for over 4 hrs....

Who's? :confused4

 

[Jordan Mclay]

Thinks hes talking about skylars Ricky, Seen it was down in another topic

 

[DevilsHost]

Sounds like it could well be a proxy quite often with proxies you get the same ip coming up several times, i've had something similar before on one of my forums but they were uk ip's and nowhere near as many as 50.

 

[Decker]

Wish they would say that though :lol:

Oops - meant at the post before yours DevilsHost

 

[Jordan Mclay]

Yeah can be a tad confusing, when there is 20 odd hosts in one topic and they dont mention who its directed at.

 

[DevilsHost]

lol

If your using VBulletin there is a mod kicking around vbulletin.org which lets you know which ip's are proxies, allthough the catch is it doesn't detect anon proxies, which I think makes the mod a little on the pointless side as most people use anon proxies anyway, but could still be usefull i guess.

 

[Decker]

Still think it's something that's running that requests from it - Skylar any more info on the requests?

I'm hating myself as I'm now starting to get to interested in tracing it

Any log file lines, etc.
Pm them if your not comfy posting.

This one is now officially bugging me!