Comments on: How to block Spam Bot (Spider) from PSI (Performance Systems International) http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html Business in Information Technology & Biotechnology Fri, 29 Aug 2008 07:11:53 +0000 http://wordpress.org/?v=2.6.1 By: Meckanic http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-336 Meckanic Thu, 28 Aug 2008 23:07:55 +0000 http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-336 I have been watching PSI (out of the Washington DC area) in my logs and researching their footprint for some time (I think since August 2006). If I had to hazard a guess based on what I know and was involved in, this has a reasonable probability of being an alphabet company organization of the not so friendly kind, eg. CIA, NSA, etc. (you can look up what appears to be some rather suspicious information for yourself). Bad Santa may be checking/updating its list looking for security threats, real or imagined. You know, the kind that disagree with government policy. I highly doubt that the data is going into a ShopWiki... I have been watching PSI (out of the Washington DC area) in my logs and researching their footprint for some time (I think since August 2006). If I had to hazard a guess based on what I know and was involved in, this has a reasonable probability of being an alphabet company organization of the not so friendly kind, eg. CIA, NSA, etc. (you can look up what appears to be some rather suspicious information for yourself). Bad Santa may be checking/updating its list looking for security threats, real or imagined. You know, the kind that disagree with government policy. I highly doubt that the data is going into a ShopWiki…

]]> By: Jim Moore http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-329 Jim Moore Sun, 17 Aug 2008 18:06:44 +0000 http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-329 Here's my contribution. PSI has been on my case for some time, and since my site is sometimes critical of our governments shenanigans, I just assumed it was the HomeLand Security folks. I still suspect PSI is a Big Brother clone, but I no longer feel "special". Shucks! Jim Here’s my contribution. PSI has been on my case for some time, and since my site is sometimes critical of our governments shenanigans, I just assumed it was the HomeLand Security folks. I still suspect PSI is a Big Brother clone, but I no longer feel “special”. Shucks!
Jim

]]> By: J.D. http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-326 J.D. Wed, 06 Aug 2008 16:51:05 +0000 http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-326 I am late to this thread but, it is day 3 of seeing "Performance Systems Interantional Inc." on my statcounter stats. It updated every 20 seconds, making a new visit. I HATE THEM. So, I am an average mac user, personal blogger. Could they actually be accessing any of my files this way? What exactly is PSI DOING with this info? How can I block them from getting to my blogger? Thank you, I am late to this thread but, it is day 3 of seeing “Performance Systems Interantional Inc.” on my statcounter stats. It updated every 20 seconds, making a new visit. I HATE THEM.

So, I am an average mac user, personal blogger. Could they actually be accessing any of my files this way?

What exactly is PSI DOING with this info?

How can I block them from getting to my blogger?

Thank you,

]]> By: Heather http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-305 Heather Fri, 13 Jun 2008 19:56:36 +0000 http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-305 I've been trying to sort out a mess with e-newletter company Constant Contact. They are based in Waltham, MA, but lately I've received several emails from someone claiming to work there but the IP address of the emails is in Washington, DC not Waltham, MA. Yep, the imposter IP is registered to Performance Systems International. The emails asked me to call an 800 number that is not affiliated with Constant Constant. Of course, I did NOT call. I reported all of this to CC and they are looking into it. I’ve been trying to sort out a mess with e-newletter company Constant Contact. They are based in Waltham, MA, but lately I’ve received several emails from someone claiming to work there but the IP address of the emails is in Washington, DC not Waltham, MA. Yep, the imposter IP is registered to Performance Systems International. The emails asked me to call an 800 number that is not affiliated with Constant Constant. Of course, I did NOT call. I reported all of this to CC and they are looking into it.

]]> By: Pat http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-301 Pat Tue, 03 Jun 2008 23:13:29 +0000 http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-301 I sent a note to someone who has Aol. It came back read by Performance Systems International, Washington DC what does that mean? Thanks I sent a note to someone who has Aol. It came back read by Performance Systems International, Washington DC what does that mean?
Thanks

]]> By: D.F. Duck http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-248 D.F. Duck Thu, 01 May 2008 21:46:32 +0000 http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-248 Do a google on "Performance Systems International" and you will learn they have a long history of web site abuse and mass content theft. Notice in your httpd logs that most of the search spiders in this Class A IP range don't honor robots.txt, even ones that do indentify themselves like Gigablast. I deny the entire IP range from all my web sites and could care less about the few "good" search spiders that get blocked in the process. The benefits of not having my sites raped an pillaged far outweighs the benefits of allowing them. Deny from 38.0.0.0/8 Do a google on “Performance Systems International” and you will learn they have a long history of web site abuse and mass content theft. Notice in your httpd logs that most of the search spiders in this Class A IP range don’t honor robots.txt, even ones that do indentify themselves like Gigablast. I deny the entire IP range from all my web sites and could care less about the few “good” search spiders that get blocked in the process. The benefits of not having my sites raped an pillaged far outweighs the benefits of allowing them.

Deny from 38.0.0.0/8

]]> By: Jeff http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-233 Jeff Tue, 22 Apr 2008 18:34:16 +0000 http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-233 Yep, I to use it and just noticed these log entries since I re-enabled the snap plugin. I was also concerned, but thanks to this post, mystery solved! Thanks Sietse Logger! Yep, I to use it and just noticed these log entries since I re-enabled the snap plugin. I was also concerned, but thanks to this post, mystery solved!

Thanks Sietse Logger!

]]> By: Sietse Logger http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-230 Sietse Logger Fri, 11 Apr 2008 11:44:30 +0000 http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-230 I have contacted snap.com over this, and they confirmed to me that the 38.98.x.y. range is their "Cogent pipe", which they use for "crawling, and some serving". Since I don't mind the snap plugin working properly, I feel no need to maintain the block for my own pages. Snap is a site preview plugin that requires screenshots to be made for each page they crawl. So, that's mostly what they are doing. I have even noticed they go back to old pages, to take new snapshots. I have contacted snap.com over this, and they confirmed to me that the 38.98.x.y. range is their “Cogent pipe”, which they use for “crawling, and some serving”. Since I don’t mind the snap plugin working properly, I feel no need to maintain the block for my own pages. Snap is a site preview plugin that requires screenshots to be made for each page they crawl. So, that’s mostly what they are doing. I have even noticed they go back to old pages, to take new snapshots.

]]> By: Helen Davies http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-229 Helen Davies Thu, 10 Apr 2008 18:04:22 +0000 http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-229 This has got me worried folks! I am affraid to go out at night! Who are these PSI people and I feel like they are watching me from accross the street! I want to know how to protect myself? This has got me worried folks! I am affraid to go out at night! Who are these PSI people and I feel like they are watching me from accross the street! I want to know how to protect myself?

]]> By: Sietse Logger http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-227 Sietse Logger Sat, 05 Apr 2008 10:28:24 +0000 http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-227 I have blocked the entire IP range yesterday, and suddenly my Snap plugin shows the message "IP banned" when I browse over links to entries I posted today. Does anyone else who posted here before me have a Snap plugin? I have blocked the entire IP range yesterday, and suddenly my Snap plugin shows the message “IP banned” when I browse over links to entries I posted today. Does anyone else who posted here before me have a Snap plugin?

]]> By: spat http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-220 spat Tue, 25 Mar 2008 22:36:15 +0000 http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-220 Hi,folks! I recently installed PeerGuardian2 and was noticing a few IP no's in that range being blocked. PeerGuardian informs me they are being initiated by StarDock which is a desktop customizing tool. My weather tool was not updating with them blocked but works fine when unblocked. Not sure what to do now. I mean I have seen many negative or concerned comments from the formentioned IP range but no one in the StarDock community has mentioned any complaints that I know of. Hi,folks!

I recently installed PeerGuardian2 and was noticing a few IP no’s in that range being blocked. PeerGuardian informs me they are being initiated by StarDock which is a desktop customizing tool. My weather tool was not updating with them blocked but works fine when unblocked. Not sure what to do now. I mean I have seen many negative or concerned comments from the formentioned IP range but no one in the StarDock community has mentioned any complaints that I know of.

]]> By: 1-gb.net http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-218 1-gb.net Mon, 24 Mar 2008 17:16:27 +0000 http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-218 I'm thinking of blocking the whole IP range from my servers.. it seems they also 'host' cuill a 'stealth' search group.. not sure what's up with these PSI folks, but there a a LOT of bad log entries from their IP's and well its better to be safer then sorry.. anyone else? I’m thinking of blocking the whole IP range from my servers.. it seems they also ‘host’ cuill a ’stealth’ search group.. not sure what’s up with these PSI folks, but there a a LOT of bad log entries from their IP’s and well its better to be safer then sorry..

anyone else?

]]> By: denis long http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-206 denis long Sun, 23 Mar 2008 00:25:05 +0000 http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-206 sirs i play poker at pokerstars for over a year now. two weeks ago, i started to have big problems, getting to the tables to play. the program would hang. while doing a network status report, i discovered one of the hops was losing 30% of the packages. the hop's address--38.99.220.153 i.e PSI are they trying to stop gambling? denis sirs
i play poker at pokerstars for over a year now.
two weeks ago, i started to have big problems,
getting to the tables to play.
the program would hang.
while doing a network status report,
i discovered one of the hops was losing
30% of the packages.
the hop’s address–38.99.220.153 i.e PSI

are they trying to stop gambling?

denis

]]> By: zack http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-200 zack Mon, 03 Mar 2008 17:49:28 +0000 http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-200 hi today there was a visit by the IP 38.98.19.67. i found the following details from whois IP Whois Results: Connecting to whois.arin.net... OrgName: Performance Systems International Inc. OrgID: PSI Address: 1015 31st St NW City: Washington StateProv: DC PostalCode: 20007 Country: US NetRange: 38.0.0.0 - 38.255.255.255 CIDR: 38.0.0.0/8 NetName: PSINETA NetHandle: NET-38-0-0-0-1 Parent: NetType: Direct Allocation NameServer: NS.PSI.NET NameServer: NS2.PSI.NET Comment: Reassignment information for this block can be found at Comment: rwhois.cogentco.com 4321 RegDate: 1991-04-16 Updated: 2005-10-05 RTechHandle: PSI-NISC-ARIN RTechName: IP Allocation RTechPhone: 1-877-875-4311 RTechEmail: ipalloc@cogentco.com OrgAbuseHandle: COGEN-ARIN OrgAbuseName: Cogent Abuse OrgAbusePhone: 1-877-875-4311 OrgAbuseEmail: abuse@cogentco.com OrgNOCHandle: ZC108-ARIN OrgNOCName: Cogent Communications OrgNOCPhone: 1-877-875-4311 OrgNOCEmail: noc@cogentco.com OrgTechHandle: IPALL-ARIN OrgTechName: IP Allocation OrgTechPhone: 1-877-875-4311 OrgTechEmail: ipalloc@cogentco.com # ARIN WHOIS database, last updated 2008-03-02 19:10 # Enter ? for additional hints on searching ARIN's WHOIS database. some one let us know what is the purpose of their visit to our sites, are they trying to steal something, put some spyware in our webserver etc.. hi

today there was a visit by the IP 38.98.19.67. i found the following details from whois

IP Whois Results:

Connecting to whois.arin.net…

OrgName: Performance Systems International Inc.
OrgID: PSI
Address: 1015 31st St NW
City: Washington
StateProv: DC
PostalCode: 20007
Country: US

NetRange: 38.0.0.0 - 38.255.255.255
CIDR: 38.0.0.0/8
NetName: PSINETA
NetHandle: NET-38-0-0-0-1
Parent:
NetType: Direct Allocation
NameServer: NS.PSI.NET
NameServer: NS2.PSI.NET
Comment: Reassignment information for this block can be found at
Comment: rwhois.cogentco.com 4321
RegDate: 1991-04-16
Updated: 2005-10-05

RTechHandle: PSI-NISC-ARIN
RTechName: IP Allocation
RTechPhone: 1-877-875-4311
RTechEmail: ipalloc@cogentco.com

OrgAbuseHandle: COGEN-ARIN
OrgAbuseName: Cogent Abuse
OrgAbusePhone: 1-877-875-4311
OrgAbuseEmail: abuse@cogentco.com

OrgNOCHandle: ZC108-ARIN
OrgNOCName: Cogent Communications
OrgNOCPhone: 1-877-875-4311
OrgNOCEmail: noc@cogentco.com

OrgTechHandle: IPALL-ARIN
OrgTechName: IP Allocation
OrgTechPhone: 1-877-875-4311
OrgTechEmail: ipalloc@cogentco.com

# ARIN WHOIS database, last updated 2008-03-02 19:10
# Enter ? for additional hints on searching ARIN’s WHOIS database.

some one let us know what is the purpose of their visit to our sites, are they trying to steal something, put some spyware in our webserver etc..

]]> By: Noel http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-194 Noel Wed, 30 Jan 2008 22:05:58 +0000 http://www.my-whiteboard.com/business/performance-systems-international-inc-is-stealing-your-data-doing-nothing-good.html#comment-194 Symantec Endpoint block all efforts by these bots to access the net rendering them useless.So invest in it Symantec Endpoint block all efforts by these bots to access the net rendering them useless.So invest in it

]]>