Sep 29, 2006

static.theplanet.com kostanay spam

ThePlanet is offering internet access to businesses so we have to be carefull about banning that domain.

Verified robots list that need to be banned

70.86.137.162
a2.89.5646.static.theplanet.com


Update I am fed up with this bot its trying to place orders on my store using only a name and city. And is copying all the keys off the pages.
92.3f.5746.static.theplanet.com 70.87.63.146
name : alex
city : kostanay

So everything from static.theplanet.com is now banned.

name=ahmet
city=kostanay
mozilla/4.0 (compatible; msie 6.0; windows nt 5.1)
70.87.63.146 92.3f.5746.static.theplanet.com

9 comments:

JollyRoger said...

It's trying to do a RSS pull of my entire site. I just stopped it.

Don said...

somehow this got into my server and piggybacked on an update.php file to update a database table. Luckily it was denied, but now I am baffled and worried as to what to do, as my update no longer works.

Steve said...

Just banned it from one of my sites too. Been on there for about 6 hours 42 minutes raping my bandwidth. Much more of that and my hosting account would be limited before the end of the month.

For information, I just added "deny from static.theplanet.com" to a .htaccess file in my sites root and off it popped.

Anonymous said...

I've been having a problem with this "static.theplanet.com" thing too. I've been getting a "Bad Request error" on a forum that I'm a member of in some areas of the site.

This is mostly what shows up...
Bad Request

Your browser sent a request that this server could not understand.

72.6c.5646.static.theplanet.com Port 80

This is driving me nuts!

Anonymous said...

This robot/guy runs attempts on common names in /etc/passwd for about 20 minutes on a group of servers, at around 1am. I guess he hopes to go unnoticed. He had no success, but I blocked him anyway, obviously. All you guys should be sending emails to abuse@theplanet.com. Maybe we can at least make him relocate his op. emailing the Internet Crime Complaint Center couldn't hurt either. Maybe he was blocked by most of us, but he's bound to hurt someone. Anything we can do to slow him down would be worth it.

Rebecca

Anonymous said...

This site static.theplanet.com is up to no good. It appears to be taking sites that have good content and taking their traffic. It requires investigation by the FBI Cyber Crime Team. It may also have a link to Akamai... and the trail goes on... I was hacked by Akamai in Italy recently. Have the screen shot of Norton to prove it.

Also Check Live.com (Microsoft) - they don't appear to be sending any traffic to site images and pages they host. This is copyright theft. If they do send traffic its to the sites THEY want to promote!

Clean Up The Internet Before It falls Apart!

peanutbrittle said...

The site from IP 70.85.101.4 "4.65.5546.static.theplanet.com" has been repeatedly port scanning my WAN interfaces for days and is causing trouble. I do get port scans from time to time but this one is a frequent flyer. I was careful not to block the entire "theplanet.com" and be very specific but if they have other customers abusing the provider, then I will block them altogether.

Anonymous said...

Today I got a SPAM from 83.bc.1234.static.theplanet.com the IP was 67.18.188.131, I guess they have moved to a new block.

Anonymous said...
This comment has been removed by a blog administrator.