extendcp.co.uk had a user agent name of “-” so I thought to look them up and prepare if they attack me.
Observation:
web232.extendcp.co.uk 79.170.40.232
Pattern:
They use the last octet in their host name, but the first three can vary. Three or 4 ip ranges should do for banning.
Research:
web32.extendcp.co.uk 79.170.40.32 79.170.40.0 – 79.170.47.255 Heart Internet
web55.extendcp.co.uk 79.170.40.55
mail158.extendcp.co.uk 79.170.40.158
web227.extendcp.co.uk 79.170.40.227
web38.extendcp.co.uk 79.170.40.38
web95.extendcp.co.uk 79.170.44.95
mail39.extendcp.co.uk 79.170.44.39
web214.extendcp.co.uk 79.170.44.214
web170.extendcp.co.uk 79.170.40.170
web202.extendcp.co.uk 79.170.44.202
web75.extendcp.co.uk 79.170.44.75
mail42.extendcp.co.uk 79.170.44.42
Web93.extendcp.co.uk 79.170.44.93
web127.extendcp.co.uk 79.170.44.127
web26.extendcp.co.uk 176.32.230.26
web252.extendcp.co.uk 176.32.230.252
web62.extendcp.co.uk 217.199.187.62
web58.extendcp.co.uk 217.199.187.58
web59.extendcp.co.uk 217.199.187.59
Here are some odd ones:
web306.extendcp.co.uk 176.32.230.50
web226.extendcp.co.uk 79.170.42.3
web226.extendcp.co.uk 79.170.44.232