Kintiskton

I found a bunch of web hits from a subnet belonging to an organization called Kintiskton. Their server was spidering my blog without identifying itself as a bot or a spider:

65.208.151.113 – – [23/Apr/2009:07:50:24 -0400] “GET /wp-content/uploads/2009/03/amazon.gif HTTP/1.1” 403 362 “http://www.markturner.net/category/Musings/” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)”
65.208.151.116 – – [23/Apr/2009:07:50:29 -0400] “GET /2009/01/06/interview-day/ HTTP/1.1” 403 350 “http://www.markturner.net/category/Musings/” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)”
65.208.151.114 – – [23/Apr/2009:07:50:33 -0400] “GET /2008/06/ HTTP/1.1” 403 333 “http://www.markturner.net/category/Musings/” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)”

Bad spider! Bad!

Here is the whois record:

CustName: Kintiskton LLC
Address: PO BOX 7360
City: MOUNTAIN VIEW
StateProv: CA
PostalCode: 94037-7360
Country: US
RegDate: 2008-07-30
Updated: 2008-07-30

NetRange: 65.208.151.112 – 65.208.151.119
CIDR: 65.208.151.112/29
NetName: UU-65-208-151-112-D1
NetHandle: NET-65-208-151-112-1
Parent: NET-65-192-0-0-1
NetType: Reassigned
Comment: Addresses within this block are non-portable.
RegDate: 2008-07-30
Updated: 2008-07-30
RTechHandle: OA12-ARIN
RTechName: UUnet Technologies, Inc., Technologies
RTechPhone: +1-800-900-0241
RTechEmail: help4u at verizonbusiness. com

OrgAbuseHandle: ABUSE3-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-800-900-0241
OrgAbuseEmail: abuse-mail at verizonbusiness. com

OrgNOCHandle: OA12-ARIN
OrgNOCName: UUnet Technologies, Inc., Technologies
OrgNOCPhone: +1-800-900-0241
OrgNOCEmail: help4u at verizonbusiness. com

OrgTechHandle: SWIPP-ARIN
OrgTechName: swipper
OrgTechPhone: +1-800-900-0241
OrgTechEmail: swipper at verizonbusiness. com

OrgTechHandle: JHU140-ARIN
OrgTechName: Huffines, Jody
OrgTechPhone: +1-703-886-6093
OrgTechEmail: Jody.Huffines at verizonbusiness. com

After Googling a bit on the company and the IP addresses, I found stories that made choose not to share my web content with Kintiskton. I first added the subnet to my .htaccess rules but decided to add it to my firewall rules. That took care of that.

Should you get web traffic from the 65.208.151.112/29 subnet, I suggest you ban it as well.