Given that my blog is relatively low traffic, it’s remarkable just how many spam comments and hacking attempts I log daily. A good 50% or more of all the spam comments I get originate from the same place: Ubiquity Server Solutions/Nobis Technology Group, who share a couple of overlapping IP ranges and are somewhat notorious if my brief Googling is anything to go by. I’m a big fan of Hanlon’s Razor, but in this case I’m really not sure either way.
So, as of today, their entire ranges are blacklisted:
Deny from 173.208.100.0/22 #Ubiquity Server Solutions Deny from 108.62.0.0/16 #Nobis Technology Group
I don’t like having to block entire /16 ranges because I know there are bound to be false positives in there somewhere, but frankly it’s the only way to make things manageable right now.
I expect to see my error.log grow exponentially over the next few days.
Update: And another range of theirs that was still spamming me…
Deny from 173.234.0.0/16 #Nobis Technology Group
Update: And yet another…
Deny from 23.19.0.0/16 #Nobis Technology Group
Update: Guess who…
Deny from 64.120.0.0/17 #Nobis Technology Group
Update: Right, let’s make this simple; courtesy of ARIN’s WHOIS Database
#All Nobis/Ubiquity ARIN Netblocks Deny from 70.32.32.0/20 Deny from 67.201.48.0/23 Deny from 72.37.145.0/24 Deny from 173.208.0.0/17 Deny from 69.174.60.0/22 Deny from 174.34.128.0/18 Deny from 173.234.0.0/16 Deny from 108.62.0.0/16 Deny from 72.37.224.0/21 Deny from 23.19.0.0/16 Deny from 72.37.237.0/24 Deny from 72.37.218.0/23 Deny from 72.37.222.0/23 Deny from 72.37.221.0/24 Deny from 67.201.0.0/21 Deny from 72.37.242.0/23 Deny from 67.201.40.0/24 Deny from 72.37.246.0/23 Deny from 216.6.224.0/20 Deny from 72.37.204.0/24 Deny from 69.147.224.0/23 Deny from 64.120.0.0/17
Update: My complete comment spam blocklist is now available here.
Thank you. That was helpful – I just blocked everything. Here’s a litter on my machine right now:
1 206.180.176.209
1 206.180.176.235
1 206.180.176.68
1 206.180.177.126
1 206.180.177.156
1 206.180.177.203
1 206.180.177.41
1 206.180.177.5
1 206.180.177.82
1 206.180.178.192
1 206.180.178.212
1 206.180.178.229
1 206.180.178.244
1 206.180.178.251
1 206.180.178.88
1 206.180.179.106
1 206.180.179.107
1 206.180.179.145
1 206.180.179.148
1 206.180.179.165
1 206.180.179.177
1 206.180.179.186
1 206.180.179.193
1 206.180.179.250
1 206.180.179.42
1 206.180.179.75
1 206.180.179.80
1 206.180.179.9
Some Ncs Datacom. Ring any bell?