sl-reverse.com Content Scraper: Research, Ban

sl-reverse.com is a content spammer that is creeping into my site and I want it stopped. I’ll hunt them down and ban them. Sl-reverse also uses servers in Canada, Germany, Singapore, Japan and Italy, to name a few.

If they botnet my butt I will get more aggressive on them.

Observations:
fa.f7.a86c.ip4.static.sl-reverse.com 108.168.247.250

6.1f.5177.ip4.static.sl-reverse.com 119.81.31.6 119.81.31.0/24 SOFTLAYER
6.1f.5177.ip4.static.sl-reverse.com 119.81.31.6
59.7c.5177.ip4.static.sl-reverse.com 119.81.124.89
12.87.5177.ip4.static.sl-reverse.com 119.81.135.18
93.fa.5177.ip4.static.sl-reverse.com 119.81.250.147
39.f8.5177.ip4.static.sl-reverse.com 119.81.248.57
8b.f9.5177.ip4.static.sl-reverse.com 119.81.249.139
d6.fd.5177.ip4.static.sl-reverse.com 119.81.253.214

e6.96.089f.ip4.static.sl-reverse.com 159.8.150.230
d7.85.7a9f.ip4.static.sl-reverse.com 159.122.133.215 159.122.133.0/24 SOFTLAYER
d7.85.7a9f.ip4.static.sl-reverse.com 159.122.133.215
a6.48.caa1.ip4.static.sl-reverse.com 161.202.72.166
a.06.01a8.ip4.static.sl-reverse.com 168.1.6.10
d6.35.01a8.ip4.static.sl-reverse.com 168.1.53.214
70.17.01a8.ip4.static.sl-reverse.com 168.1.23.112
34.4b.01a8.ip4.static.sl-reverse.com 168.1.75.52
db.63.01a8.ip4.static.sl-reverse.com 168.1.99.219
fa.f7.a86c.ip4.static.sl-reverse.com 168.108.247.250
d8.00.39a9.ip4.static.sl-reverse.com 169.57.0.216
a0.67.b9d8.ip4.static.sl-reverse.com 216.185.103.160

Pattern:
The host name portion before the “.ip4.static” is the IP address, reversed, in hex. Fourth, third, then the 4 digit hex number are the first 2 octets reversed.