Voxility has been scraping me for a while and I’ve banned their hostnames, but I could not look up lh27033.voxility.net, so this started the research.
Observation:
Research:
lh17088.voxility.net 39.41.114.93
bot , Tech ban , ban IP , blazingfast.io , bot , content scraper , internet security , ip address , research , spam , strategy , voxility.net
hosted-by.blazingfast.io spammed me, so I looked them up. They are an orderly shop.
Observation:
Research:
185.11.145.4 185.11.145.0 – 185.11.148.255 185.11.145.0/22
185.61.136.34 185.61.136.0 – 185.61.139.255 185.61.136.0/22
185.62.188.3 185.62.188.0 – 185.62.191.255 185.62.188.0/22
188.209.49.34 188.209.49.0/24
188.209.52.34 188.209.52.0/24
Permanent link to this post (82 words, 0 images, estimated 20 secs reading time)
bot , Tech ban , ban IP , blazingfast.io , bot , content scraper , customer.clientshostname.com , hosted-by.blazingfast.io , internet security , ip address , research , spam , strategy
client.yota.ru spammed me so I did research. This Russian spammer makes it difficult to track them down. They are prolific. They also have the host name wimax-client.yota.ru that they also use to spam.
Observations:
bot , Tech ban , ban IP , bot , client.yota.ru , content scraper , internet security , ip address , research , spam , strategy , wimax-client.yota.ru , yota.ru
customer.clientshostname.com scraped me, and the name is very generic, so I thought to research it. clientshostname.com has a lot of customer names prepended to it, so this excludes all their names. Three IP ranges should do you.
Observed:
Research:
Permanent link to this post (82 words, 0 images, estimated 20 secs reading time)
bot , Tech ban , ban IP , bot , clientshostname.com , content scraper , customer.clientshostname.com , internet security , ip address , research , spam , strategy
c8fb265ea92a.softphone.blizoo.bg scraped me, but this one is tough.
Observation:
Research:
c8fb265ea1a7.softphone.blizoo.bg 130.204.57.130 130.204.0.0 – 130.204.255.255 130.204.0.0/16 BLIZOO Bg
Permanent link to this post (52 words, 0 images, estimated 12 secs reading time)
bot , Tech ban , ban IP , blizoo.bg , bot , content scraper , internet security , ip address , key , research , softphone , spam , strategy
host671420043112.direcway.com is a whisper bot that content scraped me. They are unique in that their hostname is somewhat ambiguous, making machine reading more difficult. All octets can be 2 or 3 digits long, allowing for much ambiguity.
whisper is a very much hated botnet that continues to attack my site, one ip at a time, small but relentless.
Observation:
Pattern:
bot , Tech ban , ban IP , bot , content scraper , direcway.com , internet security , ip address , research , spam , strategy , whisper , whisper botnet
network-consulting.fr had content spammed me, so I looked them up. They are interesting with its host name usage. if they spam me again i will be ready.
79.98.16.0 – 79.98.23.255 Network Consulting Fr
Observation:
Pattern:
From this pattern they can go up to “H”
Research:
Permanent link to this post (104 words, 0 images, estimated 25 secs reading time)
bot , Tech ban , ban IP , bot , content scraper , internet security , ip address , network-consulting , network-consulting.fr , research , spam , strategy
ns1648.ztomy.com has spammed me, but it has been difficult to track down and ban. The ips jump around like mexican jumping beans.
Observations:
bot , Tech ban , ban IP , bot , botnet , content scraper , internet security , ip address , research , spam , strategy , ztomy.com
You never know what you will find in your travels. dynamic-ip-181500198200.cable.net.co was content scraping me, so I decided to target it. It is part of the large Semalt botnet that started with keywords-monitoring-your-success.com and free-video-tool.com and then continued with fix-website-errors , with a sprinkling of buttons-for-websites thrown in.
Its host name is unique in that it is numerically very long. I could see remnants of a decimal IP address, but there was something odd.
Their pattern is not as predictable as required by a computer but that is precisely the point: They want to fool anti-bot software, but allow their admin staff to figure it out. If staff have a couple of errors it is no problem.
bot , Tech ban , ban IP , bot , botnet , buttons-for-website , buttons-for-website.com , cable.net.co , content scraper , entity resolution , free-video-tool.com , internet security , ip address , key , keywords-monitoring-success , keywords-monitoring-your-success.com , problem , recognition , research , Semalt , spam , strategy
unassigned.psychz.net spammed me, so I tracked them down. They use a lot of various IP ranges.
They have a hostname lookup of host 199.15.112.8 199.15.112.0 – 199.15.119.255 199.15.112.0/21 but this hostname has been used for so many more IPs.
Research:
45.35.1.10 45.34.0.0 – 45.35.255.255 45.34.0.0/15
66.249.75.140
74.117.56.250 74.117.56.0 – 74.117.63.255 74.117.56.0/21
107.160.192.167
108.171.240.170 108.171.240.0 – 108.171.255.255 108.171.240.0/20
173.224.209.59 173.224.208.0 – 173.224.223.255 173.224.208.0/20
174.132.240.146
192.168.10.202 192.168.0.0 – 192.168.255.255 192.168.0.0/16
This is a preview of
unassigned.psychz.net Comment Spammer: Research, Ban .
Read the full post (145 words, 0 images, estimated 35 secs reading time)
bot , Tech ban , ban IP , internet security , ip address , key , psychz.net , research , spam , strategy , unassigned.psychz.net
