Research, Ban

      No Comments on Research, Ban

This is part of the, Semalt Botnet that spread to other South American hosts, but they have changed the referrer name slightly to This host is tricky because they only provide the last 2 octets of the IP address, leaving me to guess the first two.

Here is my clue:

There are clues to the same pattern used by, using a variety of new 2 initial octets combined with the last 2 from the host name. While I only have this one IP as a content scraper, their reputation is one of an email spammer. I guess they moved into a newer but related business model.

Research: – 177.242.246 – 1 – 177.224/13 – – – –

Others not using this pattern

Leave a Reply

Your email address will not be published. Required fields are marked *