| Damn Spam! |
|
|
What's RelatedStory OptionsTrackbackTrackback URL for this entry: http://spam.tinyweb.net/trackback.php/pills-and-drugs-spam Here's what others have to say about 'Pills and drugs, again':
Damn Spam! - Xoxa?
Damn Spam! - They don't care Another IP
Found another IP he's using: 209.123.8.179 - and this one belongs to the same company (Net Access Corporation) that's hosting hqfinder.net This IP seems to be spamming exclusively for hgh-.move.to (yes, it looks broken but works), which redirects to search.pluyck.com and uses what appears to be an affiliate id: said=v3hgh. And guess what - pluyck.com is also hosted with Net Access Corporation (on 64.21.174.199). Pills and drugs, again
Thanks, Dirk. Blocking these IP's cut down on this idiot's spam by quite a bit. Still some coming through though.
Any easy way to track back on the ones that are still coming. Tracing back to the supplied IP's turns up linkor.home.net.pl (62.129.240.10) and red-corp-201.130.128.131.telnor.net (201.130.128.131) as the end of the routes. Pills and drugs, again
Here are a couple other sources that appear suspicious:
adsl-208-190-252-29.dsl.wchtks.swbell.net host-148-244-150-52.block.alestra.net.mx (148.244.150.52) www.gympressbaum.ac.at 201.139.195.31 202.143.145.68 linkor.home.net.pl (62.129.240.10) Moving away from alestra.net.mx
Looks like he's starting to use other open proxies more and more. Instead of playing catch-up, I'd suggest the above-mentioned blocking by keywords. Looks like I forgot one drug, "carisoprodol", though. I've updated the list in the article now. Just copy and paste to your .htaccess. Drug Spam
Recieved the following email from fortune city in response to my abuse complaint.
Thanks for letting us know about this spam. Could you provide us with the specific domain names so we can delete those subdomain accounts? Thanks! Brian Marshall Brian Marshall Sales and Support Representative FortuneCity 322 8th Avenue New York, NY 10001 bmarshall@corp.fortunecity.com Visit us at www.fortunecity.com Drug Spam
Good! I hope you told them. I sent a complaint to V3 (which owns the move.to and pagina.de domains that this spammer uses) but haven't heard back and the sites are still online ... Pills and drugs, again
Well, surprisingly, FortuneCity.com seems to be interested in stopping the drug spam. Here is their reply to the list of spam domains that I sent them:
"The 29 domains we identified in your logs have been killed. Thanks!" The spam seems to have slowed almost immediately. These guys control all of the domains ending in .to, such as move.to, hey.to, etc. So if you see any spam from these domains, send the complete domain name to Brian Marshall <bmarshall(at)corp.fortunecity.com> --- Bill Pills and drugs, again
Excellent. Good work, Bill. Btw, I mangled that email address - we don't want him to get too many spam email now, don't we? Most redirects shut down
Looks like most of the redirect / subdomain accounts have been shut down by now, including the ones at splinder.com and superbikeclub.com. Only the one at pagina.de (that's also Fortunecity / V3) is still working. Of course, that doesn't stop our "friend" here from still spamming for them ... Search Engine Ranking
My search engine ranking for Sharpened.net plummeted as soon as I started
getting all this spam traffic from the hqfinder.net sites. Is there anything I can
do to recover from this or reverse this frustrating process?
|
||||||||||
| Copyright © 2010 Damn Spam! | Powered by Geeklog |