vultr.com is a content scraper that I would like to remove from my site. They are persistent. Vultr.com seems to be the cloud offering from Choopa.
Observations:
108.61.166.139.vultr.com 108.61.164.0 – 108.61.167.255 108.61.164.0/22
108.61.209.0 108.61.208.0 – 108.61.209.255 108.61.208.0/23
45.32.77.194.vultr.com 45.32.0.0 – 45.32.255.255 45.32.0.0/16
108.61.218.239.vultr.com 108.61.218.0/24
104.238.156.96.vultr.com 104.238.128.0 – 104.238.191.255 104.238.128.0/18
104.156.230.231.vultr.com 104.156.230.231 104.156.224.0 – 104.156.255.255
108.61.157.0 108.61.157.0 – 108.61.157.127 108.61.157.0/25
Research:
108.61.213.1.vultr.com 108.61.212.0 – 108.61.213.255 108.61.212.0/23
bot , Tech ban , ban IP , bot , botnet , choopa , fregat.ua , internet security , ip address , login , pattern , research , strategy , vultr.com
fregat.ua is a bot from Russia. It was logged for ransomware , so you really don’t want them to try to break into your site. Quite bold, they are, trying to get my login and admin pages, so they are a definite security threat for trying to break into my site. Fregat.ua is an ISP with a web page.
Lead: 128.146.dynamic.pppoe.fregat.ua
Research:
54.146.dynamic.PPPoE.fregat.ua 91.210.146.54 91.210.144.0 – 91.210.147.255 91.210.144.0/22
bot , Tech ban , ban IP , bot , botnet , fregat.com , fregat.ua , internet security , ip address , login , pattern , ransomware , research , strategy
