The anonymous, cowardly geek--with many 'handles' and names--and cohorts are a major source of spam and other unseemly Internet activity. Below is a recent post from a blogger who attempts to police such activity.
I've predicted this would happen for some time but have no clue how they managed to utilize and entire block of IPs from a HK cable company to scrape.
Look at the list below and not it's all in the same block, all 1-2 pages max, all the same user agent, and it flew right under the normal radar except my proximity alarm noticed this trend.
222.166.160.1 [cm222-166-160-1.hkcable.com.hk.] pages 2- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.10 [cm222-166-160-10.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.100 [cm222-166-160-100.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.101 [cm222-166-160-101.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.102 [cm222-166-160-102.hkcable.com.hk.] pages 2- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.103 [cm222-166-160-103.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.104 [cm222-166-160-104.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.105 [cm222-166-160-105.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.106 [cm222-166-160-106.hkcable.com.hk.] pages 2- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.108 [cm222-166-160-108.hkcable.com.hk.] pages 2- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.109 [cm222-166-160-109.hkcable.com.hk.] pages 2- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.11 [cm222-166-160-11.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.111 [cm222-166-160-111.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.113 [cm222-166-160-113.hkcable.com.hk.] pages 2- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.114 [cm222-166-160-114.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.115 [cm222-166-160-115.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.117 [cm222-166-160-117.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.118 [cm222-166-160-118.hkcable.com.hk.] pages 2- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.12 [cm222-166-160-12.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.120 [cm222-166-160-120.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.121 [cm222-166-160-121.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.123 [cm222-166-160-123.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) 222.166.160.124 [cm222-166-160-124.hkcable.com.hk.] pages 1- Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) . . .The list goes on forever, mercifully I will cut it here; if you want to view it all, click the link below.
When I reviewed the physical log entries you can see the data being accessed was sequential.
Not sure if there are other ranges of IP in the HK Cable Company to be concerned with, but 222.166.160.* is definitely one to block for now.
I now understand the source of a number of strange invasions and occurrences on my e-mail accounts (and elsewhere on this computer) all of which started at the same time this sick geek first began assaulting the comments functions of these pages and WOW late last summer.
