We're currently seeing bursts of referrer spam from 82.3.32.77 (NTL Internet, UK) with all sorts of faked referrers, all of which contain affiliate IDs (details below). What's irritating is that we have logs of legit requests from that IP at least as far back as March. Either this IP address is shared (it may be a proxy, although the node name doesn't indicate it) or someone has thoroughly checked us out before he decided to spam us ...
The affiliate IDs used are aid=653455 (for a bunch of sites all registered to Ultra Herbal, LLC, e.g. attractmate.com), 142 and 474 (for prstorm.com, a "SEO" site), ref=caravelle (for hyipfunds.com, investment), and 594 (for prelaunchsecrets.com, some obscure "product launch" site).
Ultra Herbal, LLC has an affiliate scheme by the name of "Joe Bucks" and our friend here is spamming for at least 8 sites under that scheme. Their Terms Of Service do sound sane, disallowing email spam and such, but not referrer spam. However, this case here certainly counts as "inappropriate marketing", so I'll give them the benefit of doubt and shoot them an email ...
Comments (0)
Damn Spam!
http://spam.tinyweb.net/article.php/uk-affiliate-spam