More offenders
I got a comment relayed through a CERN server used by the Heavy Ion Physics in Nuclear Physics Institute, Czech Republic.
I got a spammy comment from a new spammer, and a referrer spam from the 161.58.59.8 spammer.
What’s unusual about that one, is that it appends a little string to the UA. Making it abundantly clear it’s a proxy…
E-mail sent.
———–
I got a comment spam from 24.7.129.127, on Comcast. I couldn’t find any indications on Google that it’s a proxy, but I did find some complaints about that IP number doing something a certain group considered unethical. I wouldn’t be surprised if this is someone who’s spamming from their own machine?
The MO is to post a newsworthy link to a blog. One not related to the spam. Something most people would think cool. The spammy link is in the URL field, where most commenters would post the link to their blog.
The website is hosted and registered by ESTHOST, a known spam haven.
———
207.253.255.220
Doesn’t respond as a webserver, but is on open proxy lists. It’s in Canada
It’s trying comment spam, and the referrer spam is pointing to 161.58.59.8
———
209.94.209.179
Doesn’t respond as a webserver, but is on open proxy lists. It’s in Trinidad and Tobago
It’s trying comment spam, and the referrer spam is pointing to 161.58.59.8