Tag: hn.kd.dhcp

hn.kd.dhcp Content Spammer: Research, Ban

hn.kd.dhcp is spamming my site, so I need to remove it. This guy has been around for quote a while and has a long list of IPs, but not so long a list of IP ranges. This spammer runs out of Henan Province, China, but has used Jilin, Chongqing, Guangdong, and Shanghai

These may be related: hn.kd.ny.adsl; hn.ly.kd.adsl; hn.kd.dhcp

Observation:
61.52.253.116 hn.kd.dhcp 2017-jan-04
61.54.208.158 hn.kd.dhcp
61.54.208.235 hn.kd.dhcp 2016-oct-06
61.54.209.51 hn.kd.dhcp

Research:
61.52.9.239 61.52.0.0 – 61.53.255.255 61.52.0.0/15 China Unicom Henan
61.52.28.157
61.52.53.10
61.52.74.18
61.52.100.71
61.52.168.1
61.52.198.139
61.52.207.172
61.52.232.29
61.53.1.241
61.53.5.165
61.53.25.9
61.53.65.52
61.53.64.37
61.53.64.37
61.53.65.54
61.53.65.54
61.53.65.54
61.53.67.14
61.53.73.0
61.53.86.244
61.53.92.65
61.53.143.179
61.53.143.179
61.53.143.179
61.53.152.179
61.53.153.90
61.53.153.90
61.53.160.28
61.53.185.170
61.53.193.169
61.53.194.0
61.53.203.0
61.53.235.197

hn.kd.ny.adsl: Research, Ban

This guy hn.kd.ny.adsl seems innocent enough, until I tried to look him up, only to find no positive IP address. Others have posted that they, too, cannot find his IP address in order to ban him. Hmmm, let me track him down.

This hacker is prolific in that he rarely repeats the third octet, making it harder to ban by a narrower range. You’ll need to go up to the second octet to cover his IP ranges. He uses predominantly China Unicom Henan. Only once did he go to China Unicon Fujian, which might just be an outlier data point.