no-ptr.as20860.net Comment Spammer: Research, Ban

no-ptr.as20860.net is a dual Ip spammer with a twist. The originating IP hostname lookup returns three IPs! You’ll need to ban all three, but there’s a lot more. They use IOMart, GB as their ISP.

It seems like this hostname also morphs to numerous IP addresses, making them difficult to track down.

Observation:
no-ptr.as20860.net hostname lookup 62.128.193.135 84.22.161.172 50.97.43.3

Method:
no-ptr.as20860.net not only uses the dual ip spammer strategy, but also changes its host name through many ip addresses, making it double difficult to ban.

I do not know what they do, but they seem to not be an ISP, so ban ranges could work. You might ban a lot of iomart customers.

Research:
62.128.193.135 62.128.192.0 – 62.128.207.255
62.128.197.58
62.128.197.62
62.128.200.181
62.128.204.154
62.128.204.158
62.128.207.178
62.128.210.233 62.128.208.0 – 62.128.223.255
62.128.211.137
62.128.213.128
62.128.218.2
62.128.219.211
62.128.221.193
62.128.222.193
62.128.223.69
62.128.223.70

62.233.64.132 62.233.64.0 – 62.233.127.255
62.233.64.160
62.233.77.57
62.233.80.37
62.233.82.136
62.233.83.218
62.233.84.13
62.233.95.183
62.233.108.134
62.233.108.196
62.233.109.126
62.233.118.230
62.233.120.63
62.233.120.72
62.233.121.4
62.233.127.253

84.22.161.25 84.22.160.0 – 84.22.191.255
84.22.162.192
84.22.167.1
84.22.167.60
84.22.168.20
84.22.170.176
84.22.173.180
84.22.178.191
84.22.180.89
84.22.181.61
84.22.181.152
84.22.166.61
84.22.181.249

212.38.162.3
212.38.186.140

Leave a Reply

Your email address will not be published. Required fields are marked *