torkell: (Default)
Thomas ([personal profile] torkell) wrote2007-01-01 10:47 pm

Ban Hammer!™

The following IP address have been larted with the Ban Hammer™ on my gallery, for excessive and frankly stupid spammage (my gallery does not use bbcode):

IPrDNSWhois
85.255.119.13185.255.119.131-xbox.dedi.inhoster.comInhoster hosting company
85.255.119.7485.255.119.74-xbox.dedi.inhoster.comInhoster hosting company
195.225.177.3noneNetcatHosting
195.225.177.46noneNetcatHosting

Interesting that these are all web hosts, as opposed to compromised computers. And, if my reading of the rDNS is correct, the first two are dedicated servers. All but the last run web servers, which return identical empty html documents. Some key headers are identical as well (though the ETag is different):

Server: Apache/1.3.36 (Unix) PHP/4.4.2
Last-Modified: Tue, 07 Feb 2006 12:06:58 GMT

The fourth address has nothing running on port 80. Hmm.