Alden Bates' Weblog

I have one spammer who has a comment spamming script which regularly pounds on my site. This script hits from four IP addresses sending up to 40 requests per second and despite only getting 403 access denied responses, has not given up. The IP addresses are:

• 195.226.230.58 - owned by the Hard Rock Cafe in Kuwait.
• 82.114.68.194 - owned by the Kujtesa Network in Kosova.
• 62.150.35.230 - owned by "Lebanese Besources for Car Spare parts Co.", part of QualityNet Kuwait.
• 62.150.40.142 - Same ownership as 62.150.35.230

I attempted to communicate with the owners of the IP addresses to try to get this sorted:

• The cafe in Kuwait: They don't have a web page, and their email address on the Hard Rock Cafe web site bounces with a "not a valid mailbox" error. I got another email address from the HRC site's customer care team... which bounced with "mailbox unavailable".
• Kujtesa Network: No response yet.
• QualityNet Kuwait: The email address on the RIPE whois bounced with the error "Over quota". I forwarded it to their support email address from their site. No response yet.

Another spammer (or possibly the same one) is also trying to spam from an IP address from rbnnetwork.com (see also Spacesquad Anti-Spam service). An email to their abuse address I sent on the 1st remains unanswered.

So where does that leave me? At least these spammers are using a small number of consistent IP addresses, so perhaps my last resort is to ask my web host whether I can get them blocked at the firewall level...