UESPWiki:Bad Addresses

This page contains a list of IP/addresses that have exhibited 'bad behavior' at some point (spamming, sucking bandwidth, exploits, hacking, etc...). Daveh is using it as a reference to know which sites have done what and the actions taken. Users that are currently blocked from editing can be viewed from Special:Ipblocklist.

Address	Actions
141.44.198.187 wh59-807.st.Uni-Magdeburg.DE	DaveH 12:00, 10 April 2006 (EDT) – Banned via iptables for using half the sites bandwidth over an extended period. Looks like they were downloading every single page/link on the Wiki in consecutive order. Not a terribly big deal but I was trying to track down performance issues at the time so decided to ban them temporarily. Will remove in a few days.
72.82.81.39 pool-72-82-81-39.nrflva.east.verizon.net.	Daveh 21:03, 4 March 2007 (EST) - Sudden site unavailability traced to large increase of connections from this address. Blocked at the server level with iptables.
80.97.12.164 wl36.idilis.net	Daveh 08:58, 22 March 2007 (EDT) - Repeatably downloading content so as to make site unavailable. Blocked at the server level with iptables.
69.241.197.132 c-69-241-197-132.hsd1.fl.comcast.net.	Daveh 21:28, 5 April 2007 (EDT) - Multiple connections that were monopolizing the site's bandwidth. Blocked at the server level with iptables.
88.148.207.181 129-181.adsl.lpoy.dnainternet.fi.	Daveh 16:38, 12 April 2007 (EDT) - Multiple connections that were monopolizing the site's bandwidth. Blocked at the server level with iptables.
165.228.129.12 pad-cache2-1.cache.telstra.net.	Daveh 19:58, 12 April 2007 (EDT) -- Multiple connections that were monopolizing the site's connections. Blocked at the server level with iptables.
Daveh 20:54, 12 April 2007 (EDT) -- Removed all server level iptable blocks (addition of mod_limitipconn should prevent most of the issues). Keep the above IP addresses for future reference.
71.139.193.120 ppp-71-139-193-120.dsl.snfc21.pacbell.net.	Daveh 15:48, 12 June 2007 (EDT) -- Continually requesting a search page which began to slow the server down. Blocked at the server level with iptables.
90.176.147.237 237.147.broadband9.iol.cz.	Daveh 15:32, 23 July 2007 (EDT) -- Monopolizing connections by requesting pages in alphabetical order. Tweaked Apache DOS settings and left to monitor.
213.147.99.121 No reverse DNS from comm.emporion.hr.	Looks like a link bot following and downloading all content. Left alone in order to tweak server settings.
213.147.99.121	Daveh 14:03, 20 August 2007 (EDT) -- Banned with iptables due to continual link following resulting in site performance issues (still unsure how exactly).
Daveh 11:41, 25 January 2008 (EST) -- Removed all server level blocks after switching to Squid cache.
91.149.131.206 leased-line-gomel-91-149-131-206.telecom.by.	20+ lingering attempts for the same page (banned with iptables) -- Daveh 15:20, 8 February 2008 (EST)
78.96.81.75	100+ concurrent connections, banned with iptables on squid1 -- Daveh 11:54, 10 March 2008 (EDT)
97.73.64.148	~50 concurrent connections, banned with iptables on squid1 -- Daveh 19:19, 24 February 2009 (EST)
213.158.199.67	~200 concurrent connections (mim_low.zip), banned with iptables on squid1. MAXCONN settings on squid obviously not working. -- Daveh 20:11, 25 February 2009 (EST)
71.233.232.133	Banned with iptables on content1 due to multiple connections related to the forums. --
Removed all server level iptable blocks from content1 and squid1. -- Daveh 19:23, 31 May 2009 (EDT)
67.103.28.84	Banned with iptables on content3 due to spamming concurrent connections. -- Daveh 02:30, 24 November 2010 (UTC)

Addresses are checked using DNS Stuff.