Marcus posted on July 22, 2013 14:34

I’ve been leaving parts of my blog open to comments as a simple Honeypot to catch comment spam and identify where all the crap is coming from. So far I have gathered around 50 unique IP addresses and will update this list over the next weeks and months.

(.. or until I lose interest Winking smile)

Posting this will probably not have any effect whatsoever, and the value of this list to someone else might be questionable too, but the nice thing about having a blog is that I can go off on a rant and vent a little.

Obviously IP addresses can be spoofed, but since this blog uses a CAPTCHA – and I seriously doubt the CAPTCHA has been broken – my guess is we’re looking at a “human CAPTCHA resolver”, meaning a bunch of (likely low paid) individuals in some overseas center tasked with entering their various “pharmaceutical extension products” into blogs and forums.

In addition, some IP addresses trace back to reputable organizations, which indicates that either the hoster or CoLo center is  not paying attention to what their customers are doing (bad) or we’re looking at compromised systems (worse).

For most IP addresses I have contacted either the ISP or the registered Netblock owner and reported apparent abuse and I’m sorry to say I have not received a single response from any of them.

So, without further ado – here’s the Wall of Shame.

IP Address Location** ISP or Netblock Owner*** RDNS (if applicable)
5.135.30.138*
5.135.30.144*
5.135.86.69*
France OVH Systems  
5.254.143.123
Sweden Netalia AB
Portlane Networks AB
vpntunnel.se
46.29.254.246 Sweden Deepak Mehta FIE  
46.246.17.225*
46.246.19.190
178.73.206.192*
Sweden Portlane Networks AB anonymous.at.anonine.com
46.37.187.82*
46.37.165.210*
United Kingdom BurstNET Limited srvlist.ukfast.net
50.115.165.96
198.175.124.57
199.180.128.2

United States Dnsslave.com  
50.117.46.44 United States EGIHosting  
69.175.84.91
96.127.135.146
173.236.54.101
184.154.153.211
198.20.70.38*
United States SingleHop vpn999.com
69.181.227.56 United States Comcast Cable hsd1.ca.comcast.net
74.221.219.45 United States DME Hosting LLC  
88.80.21.125 Sweden PeRiQuito AB cust.prq.se
89.42.27.65 Romania SC Net4All Grup SRL  
89.74.127.131* Poland UPC Polska Sp. z o.o. dynamic.chello.pl
91.237.249.50* Russia Telecom Tekhpodderzhka  
94.132.152.208 Portugal ZON TV Cabo cpe.netcabo.pt
166.78.161.49 United States Rackspace  
176.31.155.125 United Kingdom OVH Systems  
178.208.255.123* Russia Metroset metronv.ru
188.208.0.41*
188.208.0.106
188.208.2.98
Romania Sc Rados Impex Srl  
192.110.163.53 United States Input Output Flood LLC  
193.105.171.73 United States FOP Kutcevol Maksum Mukolaevich  
193.234.166.13 Sweden Resilans AB  
198.50.229.129* Canada OVH Hosting
Private Customer Network
 
198.143.144.139 United States ITOCHU Technology vpn999.com
199.223.253.24* United STates Turnkey Internet static.turnkeyvps.com
216.131.69.47 United States Reliablehosting.com dyn.strong-sf59.reliablehosting.com
216.231.140.22 United States Continuum Data Centers, LLC. chi1.vm.bitvps.com
217.195.202.10*
217.195.202.11*
Turkey Teklan Internet Erisim Hizmetleri Komunikasyon Ele fibersunucu.com.tr

* indicates repeated comment spam submissions
** Geo-location by Maxmind
*** ISP/Netblock by ARIN, RIPE, APNIC etc.


Posted in: Marcus's Space  Tags: ,

Add comment

  Country flag

biuquote
  • Comment
  • Preview
Loading

Disclaimer
The opinions expressed herein are personal opinions and do not represent any employer's view in anyway.

Please note this: Disclaimer

© Copyright 2014 Geeks & Guitars