Repeated website hits from the same IP address

[asounddesign]

I've noticed lately in my website statistics that I'm getting a lot of hits from an IP address
212.113.137.13

These all say that the entry point to the site was something like ?kw=westernunion added at the end of the URL.

I assume that this is an SEO company or someone doing research into keywords but each time I get one of these hits it always end up with them going to my Contact Page. So I think "uh oh. Here comes a load of spam!" But no spam, no texts, no calls.

Has anyone had a similar experience with this IP address or others? I have the option to block the IP but at the moment there seems to be little point as it's not doing anything, or so it seems. I'm just curious to know if it is a robot or something that I should be aware of in case it is spam related. Thanks.

 

[hussainsheikh]

You can try whois search on this ip which will give you more information or hints on that

 

[CMS Medical]

IP info:

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '212.113.137.0 - 212.113.137.255'

% Abuse contact for '212.113.137.0 - 212.113.137.255' is '[email protected]'

inetnum: 212.113.137.0 - 212.113.137.255
netname: G-CUS-SF02-1
descr: Serverforce Ltd
country: GB
admin-c: GAT1-RIPE
admin-c: GAT1-RIPE
tech-c: GAT1-RIPE
status: ASSIGNED PA
mnt-by: GYRON-MNT
mnt-lower: GYRON-MNT
mnt-routes: GYRON-MNT
created: 2010-06-30T09:32:08Z
last-modified: 2010-06-30T09:32:08Z
source: RIPE Filtered

role: Gyron Admin Team
address: Gyron Internet Ltd
address: 3 Centro
address: Boundary Way
address: Hemel Hempstead
address: HP2 7SU
address: United Kingdom
phone: +44 (0) 844 826 4000
fax-no: +44 (0) 844 826 4001
abuse-mailbox: [email protected]
admin-c: RB30-RIPE
tech-c: RB30-RIPE
tech-c: BPM1-RIPE
tech-c: TE
admin-c: BPM1-RIPE
nic-hdl: GAT1-RIPE
mnt-by: GYRON-MNT
remarks: -- Please use this abuse contact in preference to
remarks: -- any others that may be listed in the RIPE
remarks: -- database - [email protected]
created: 2003-08-03T20:29:38Z
last-modified: 2014-04-09T08:55:42Z
source: RIPE Filtered

% Information related to '212.113.128.0/19AS29017'

route: 212.113.128.0/19
descr: GYRON-AGG Gyron Internet Ltd AS29017
origin: AS29017
mnt-by: GYRON-MNT
created: 2008-07-02T16:23:35Z
last-modified: 2008-07-02T16:23:35Z
source: RIPE Filtered

% This query was served by the RIPE Database Query Service version 1.79.2 (DB-1)

 

[asounddesign]

Thanks, but I'm well aware of what I can do to find out where it comes from. I'm just curious to see if anyone else has had the same and if it is malicious, benign or other.

 

[Paul Featherstone]

I have had serious problems with semalt spam mainly, they crawl your site and drive clicks via google analytics. Damn spam!!

 

[pudbwmsc]

I wouldn't worry about it. You could filter out in Google Analytics if it's skewing your stats.