Spam my blog and I report your site to Google for banning. You've been warned!
« A few new proxies | Main | Straining log files »
January 15, 2005
A few more offenders
Ady sent me a few entries from her log. I had visits from some of her visitors, but not all.
Here's one I haven't seen yet:
211.92.108.205
China United Telecommunications Corporation
This one doesn't respond like a webserver. Possibly a trojaned machine.
I have no experience with abuse departments in China. So far I have better experience with smaller ISP's and owners of webservers. Not sure I'll send anything to these. But if any of you guys would like to, I'll write a stock letter, if you're interested?
The spamvertized domain is from 161.58.59.8
--------------
This one is also fram Ady's log:
212.97.10.162
www.simonyisuli.hu
(from Hungary)
Apache-AdvancedExtranetServer/2.0.48 (Mandrake Linux/6.3.100mdk)
The referrer spam points to 161.58.59.8
E-mail sent to the webhost, or something like it. Hungarian isn't exactly my language, so I'm guessing...
--------
148.223.48.226
customer-148-223-48-226.uninet-ide.com.mx
It's reallocated from Uninet S.A. de C.V.
Mexico
Microsoft-IIS/5.0
It has a 302 to http://www.guadalupe.gob.mx which is at another IP number.
The referrer spam points to 161.58.59.8 in the entry from Ady's log, and in mine it tried the comment script.
E-mail sent
---------
I also found a wireless network with a trojaned machine. I can imagine that would be very hard to run down, so I won't include the details here.
Posted by Ann at January 15, 2005 02:49 PM
Trackback Pings
TrackBack URL for this entry:
http://www.annelisabeth.com/blog/mt-tb.cgi/83
Comments
Ah, somebody else watching that IP.
161.58.59.8 is very familiar to me and there has been a steady increase in referral spam/attempted comment spamming on my site that is getting annoying. Past week and a bit is particularly bad...nothing getting through...it's just annoying.
FWIW I've never sent an abuse note to a Chinese contact because I don't believe ir would be acted upon.
Posted by: Gary at January 15, 2005 06:35 PM