IPVNow.com Will Fool Anti-Bot Software

Fool, it would, an automated anti-bot system, because humans are more intelligent than bots. They are innovative, in their evil genius way. Computer security is all about the arms race. The better the methods, the better the counter measures, and then it repeats. No security measure is foolproof for very long.

IPVNow.com has a slew of host names that when you look them up, resolve successfully and all point to the same IP address, 103.224.182.241. This misdirection is what would fool the anti-bot software, because this IP is real and it points to a valid company, Trellian, which owns IPVNow.com. But banning this single IP does not stop the content scraping. Each host name has its own IP address that uses ISPs Ubiquity and Nobis. These are the IPs you need to ban.

173-208-103-109.ipvnow.com They all point to the same host IP 103.224.182.241, but this is fake and does not block them
173.208.103.109
UBIQUITY
173-208-91-12.ipvnow.com has a fake host lookup of 185.53.177.13
173.208.100.0 – 173.208.103.255
173-208-39-117.ipvnow.com
173-208-46-165.ipvnow.com
173-234-165-104.ipvnow.com 173.234.165.104
173-234-181-160.ipvnow.com
173-234-249-101.ipvnow.com
173-234-58-122.ipvnow.com
ns0.ipvnow.com 185.53.177.8 173.234.226.224 173.234.227.77

Hats off to the Aussies at Trellian for thinking up this method.

Leave a Reply

Your email address will not be published. Required fields are marked *