A massive wave of referrer spam for all those fancy drugs and pills started over night and is still going on as I type this. This one provides yet another reason why it's a good idea to block those well-known open proxies at alestra.net.mx, since that's where most of the spam comes through:
148.244.150.57
148.244.150.58
207.248.240.118
207.248.240.119
He's also using another open proxy at 203.112.194.81, which belongs to BTTB, an ISP in Bangladesh.
The spamvertized URLs are from all sorts of redirecting services (move.to, esp.cc, etc.) and, AFAICS, all redirect to hqfinder.net, hosted at 66.246.178.76 (Net Access Corporation, NJ) and registered to
Vistakka
Jonny Bravo (jobravo@yandex.ru)
CO Bogota LA blvd. 230143
Bogota
Nariņo,562727
CO
Tel. +571.3152296
Of course, the names of all those pills also make nice filter criterions:
RewriteEngine On
# some generic keywords: pills spam
RewriteCond %{HTTP_REFERER} adipex [NC,OR]
RewriteCond %{HTTP_REFERER} buy-ambien [NC,OR]
RewriteCond %{HTTP_REFERER} buy-soma [NC,OR]
RewriteCond %{HTTP_REFERER} carisoprodol [NC,OR]
RewriteCond %{HTTP_REFERER} cialis [NC,OR]
RewriteCond %{HTTP_REFERER} diazepam [NC,OR]
RewriteCond %{HTTP_REFERER} diet-pill [NC,OR]
RewriteCond %{HTTP_REFERER} effexor [NC,OR]
RewriteCond %{HTTP_REFERER} fioricet [NC,OR]
RewriteCond %{HTTP_REFERER} human-growth-hormone [NC,OR]
RewriteCond %{HTTP_REFERER} hydrocodone [NC,OR]
RewriteCond %{HTTP_REFERER} levitra [NC,OR]
RewriteCond %{HTTP_REFERER} meridia [NC,OR]
RewriteCond %{HTTP_REFERER} pharmacy [NC,OR]
RewriteCond %{HTTP_REFERER} pharmacies [NC,OR]
RewriteCond %{HTTP_REFERER} pharmsearchonline [NC,OR]
RewriteCond %{HTTP_REFERER} phentermine [NC,OR]
RewriteCond %{HTTP_REFERER} prozac [NC,OR]
RewriteCond %{HTTP_REFERER} soma-online [NC,OR]
RewriteCond %{HTTP_REFERER} tramadol [NC,OR]
RewriteCond %{HTTP_REFERER} viagra [NC,OR]
RewriteCond %{HTTP_REFERER} weight-loss [NC,OR]
RewriteCond %{HTTP_REFERER} xanax [NC,OR]
RewriteCond %{HTTP_REFERER} xenical [NC]
RewriteRule .* - [L,F] Comments (0)
Damn Spam!
http://spam.tinyweb.net/article.php/pills-and-drugs-spam