camfun2
I’ve got a spammer from Germany who keeps coming back. This time he’s on Arcor. Their abuse e-mail is: abuse at arcor-ip.de
He keeps spamming an affiliate ID directly, and the ID is camfun2
What’s interesting this time around (apart from doing it sparingly so to avoid detection), is that he’s using user agents that might be legit. They look ALMOST legit. Have a look:
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040413 Epiphany/1.2.
Yahoo-VerticalCrawler-FormerWebCrawler/3.9 crawler at trd dot overture dot com; http://www.alltheweb.com/help/webmaster/crawler
LEIA/3.01pr (LEIAcrawler; [SNIP])
Update June 12
He keeps coming.
Recent IP numbers:
84.60.204.29
84.60.196.23
84.60.197.58