Apparently I can't reply to this one any more. http://www.wilderssecurity.com/showthread.php?t=309308&page=2 So since the same problem is occurring, I wanted to continue to topic. I registered specifically to make this post, since it was the first result in google for 'reverse.lstn.net' who has been a very frequent brute force attacker to my server since I've kept track of reverseDNS details over the past 8 months, rather than just keeping an eye on IP address'. Clearly this webhost has an problem with the clients that use it and does little to stop it, since repeated attacks often occur month after month from the same IP address. All the IP's so far in the my recorded history are: 220.127.116.11 18.104.22.168 22.214.171.124 126.96.36.199 188.8.131.52 184.108.40.206 220.127.116.11 18.104.22.168 22.214.171.124 All resolve to a reverse DNS that resembles the below: 100-42-143-63.static.reverse.lstn.net If this continues I won't have much option but to do some pretty wide /16 blacklisting on my firewall. Since I'm starting to get a pattern lstn.net own, and thus operate from; 63.143.*.* 74.63.*.* 216.144.*.* Maybe more. As the referenced post, this happened also last year. Is anyone else experiencing this?