Comments on: Calling out bad crawlers: the Kintiskton nuisance

By: Uknowit

Uknowit — Thu, 13 Oct 2011 23:22:41 +0000

Over 2 years and Kintiskton’s business IP’s / servers are still allowed to run amok and do damage (abuse team at their NOC / ISP does nothing about reports of malicious activity).

They’re running a script that will try to DDOS any site that hosts photo galleries and/or PHP scripts that offer “demo” accounts. VERY malicious attacks occured on my photo gallery demo site for so long that I finally stopped “temp” blocking them and implemented the real solution.

To block the malicious illegal activity from Kintiskton and their IP’s such as 65.208.151.112 I simply did this:

Went into my hosting cPanel and set their ENTIRE IP RANGE to Deny:

65.208.151.112/29

Just set 65.208.151.112/29 as blocked in your cPanel (or .htaccess , or ask your host to do it) and the problem is solved.

Still can’t believe a major ISP will ignore so many abuse reports about 65.208.151.112 and Kinikston and allow them to continue to operate / perpetrate illegal activity!

But ever since blocking 65.208.151.112/29 in my .htaccess and cPanel , no problems anymore. If everyone starts blocked the entire range 65.208.151.112/29 then eventually the ISP will have no choice but to take action. Until then, us “little guys” can easily just brush them off now…

By: Rick

Rick — Wed, 17 Aug 2011 14:34:13 +0000

I’ve compiled a list of the IP addresses that I have found to come from these clowns. It sounds like someone who is trying to find people to sue under the guise of “The World Internet Authority”. LMAO, they even have a facebook fan page. Just go to kintiskton.com and see for yourself.

Anyway, here’s the IP’s that I have banned because they all come back as registered to Kintiskton, LLC.

Hope it helps…
63.114.61.170
65.200.47.0-65.200.47.29
65.200.90.160-65.200.90.175
63.110.158.29-63.110.158.48
65.208.151.29-65.208.151.112
65.208.151.112-65.208.151.119
63.110.148.48-63.110.158.55
65.200.47.0-65.200.47.7

By: 65.208.151.118

65.208.151.118 — Thu, 11 Nov 2010 08:48:19 +0000

you can find a good opinion about that ip address on here http://www.technonsense.com/2010/11/65-208-151-118/

By: Freya

Freya — Sat, 06 Nov 2010 13:34:47 +0000

It is still very active so reporting the abuse to Verizon was useless. I just blocked it.

By: Brinley Ang

Brinley Ang — Thu, 12 Aug 2010 07:38:24 +0000

It even parses urls in JavaScript code without correctly executing the code itself and ended up hitting my site with 404s.

By: Tony

Tony — Tue, 13 Jul 2010 13:25:26 +0000

They were just crawling my site pretty heavily but I was watching in real time my site traffic, so they done a bit of crawling until I made an htaccess file with:

deny from 65.208.151.

And it stopped them within seconds

I chose to deny the the whole range (1-255) because no doubt they will use new ip’s soon enough but they should only change their server ip’s (meaning only that last number will change).

If anyone wants to stop them crawling, simply make a text file, and write in it:

deny from 65.208.151.

and save it. Then upload the txt file to your web hosting and rename it .htaccess and its done

You can’t rename your text file to .htaccess in windows you have to do it in your ftp when the file hits your web server because windows FORCES you to put something before a . in a file name. Linux/UNix web servers do not.

By: bob3160

bob3160 — Sat, 12 Jun 2010 14:52:45 +0000

Just blocked them. Wondered what was making my server so busy.

By: canuck

canuck — Wed, 17 Jun 2009 14:25:53 +0000

Hi. They came on to my site and I received over 600 hits from them in approx half an hour. I was able to exempt my statcounter.com from logging their IP address, but that doesn’t mean they can no longer access my site.

I use blogger. Is there a place in my Template where I can insert info that would deny them even loading my page? I am computer not-too-smart and so if you can help in kid language, that would be ideal

Cheers & thanks.

By: Julian Perry

Julian Perry — Fri, 15 May 2009 07:10:56 +0000

I am getting very similar activity from cuil.com.
Direct hits from 216.129.119.16.
Google Adsense shows the hits as page impressions for one day then they’re gone the next.

By: Kintiskton « Mark Turner Dot Net

Kintiskton « Mark Turner Dot Net — Thu, 23 Apr 2009 16:45:22 +0000

[...] that made choose not to share my web content with Kintiskton. I first added the subnet to my .htaccess rules but decided to add it to my firewall rules. That took care of [...]