|
||||
|
21 March 2015 Google Adsense Spying
A sends: GOOGLE ADSENSE SPYING --------------------- Publishers of websites who participate in Google's Adsense monetisation program should keep a close eye on visitor logs. Several covert IP addresses are used by Google's policy compliance investigators. If you see any of these visiting your web pages, you are about to get a nasty surprise. Your adverts are about to be disabled and possibly your whole Adsense account suspended too. At first look, IP range [213.155.151.232] thru [213.155.151.239] is apparently TeliaSonera AB of Sweden. But in recent years, Google has secretly acquired this block for covert spying. My contacts tell me that this block is now based in Dublin, Ireland. But they give the game away by also visiting the same web pages under investigation in close sequence from well known Google Bot addresses [66.249.*.*] at the same time. Just for good measure, Google's corporate IP blocks get in on the act too. These include [216.239.44.0] thru [216.239.45.255]. inetnum: 213.155.151.232 - 213.155.151.239 netname: SE-TSIC descr: TeliaSonera International Carrier AB org: ORG-TA45-RIPE country: GB admin-c: EVAO tech-c: JS7984-RIPE status: ASSIGNED PA mnt-by: TELIANET-LIR source: RIPE # Filtered organisation: ORG-TA45-RIPE org-name: TeliaSonera AB org-type: LIR address: TeliaSonera AB address: Eva Ornberg address: Visitors Marbackagatan 11 address: 123 86 address: Farsta-Stockholm address: SWEDEN phone: +46890100 fax-no: +4686047006 abuse-c: AR13670-RIPE mnt-ref: TELIANET-LIR mnt-ref: RIPE-NCC-HM-MNT mnt-by: RIPE-NCC-HM-MNT admin-c: EVAO admin-c: LF237-RIPE admin-c: AS32219-RIPE admin-c: ACA-RIPE admin-c: IC106-RIPE admin-c: JS7984-RIPE admin-c: PB8229-RIPE admin-c: TR889-RIPE admin-c: RH343-RIPE admin-c: LS483-RIPE admin-c: PJ2540-RIPE abuse-mailbox: abuse@telia.com source: RIPE # Filtered person: Eva Ornberg address: 123 86 FARSTA address: SWEDEN address: ******************************** address: Abuse and intrusion reports should address: be sent to: abuse@telia.com address: ******************************** phone: +46 8 90100 fax-no: +46 8 6047006 nic-hdl: EVAO mnt-by: TELIANET-LIR source: RIPE # Filtered person: Jessica Schenstrom address: 123 86 FARSTA address: ******************************** address: Abuse & intrusion reports should address: be sent to: abuse@telia.com address: ******************************** phone: +46 8 90100 fax-no: +46-8-6047006 nic-hdl: JS7984-RIPE mnt-by: TELIANET-LIR source: RIPE # Filtered route: 213.155.128.0/19 descr: TELIANET-BLK origin: AS1299 Also look out for IP addresses in the range [83.70.152.112] thru [83.70.152.119] visiting your website at the same time. These belong to Arvato Finance Services. Never heard of them? They are the "AFS" in that strange line appearing on your bank statement when a Google Adsense payment check gets credited. "AFS RE GOOGLE". inetnum: 83.70.152.112 - 83.70.152.119 netname: ARVATOFINANCE descr: Eircom Customer Assignment country: IE admin-c: BM7861-RIPE tech-c: BM7861-RIPE status: ASSIGNED PA mnt-by: TE-MNT remarks: Please send spam and other abuse complaints to abuse@eircom.net source: RIPE # Filtered person: Bill McMahon address: Gilde House address: Eastpoint Business Park address: fairview, Dublin 3 phone: +353 1 7049407 mnt-by: TE-MNT nic-hdl: BM7861-RIPE source: RIPE # Filtered route: 83.70.0.0/15 descr: eircom, Ireland origin: AS5466
|
