Comments on: Tarred with the same brush http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/ Just another WordPress weblog Fri, 25 Jul 2008 17:50:20 +0000 http://wordpress.org/?v=2.0.7 by: Administrator http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-20335 Sat, 24 Jun 2006 09:43:33 +0000 http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-20335 Finding the corresponding IP address when using phpBB isn't easy, but it's doable. Most likely you'll find they use multiple IP addresses, but you could try running it down and blocking IP addresses. Finding the corresponding IP address when using phpBB isn’t easy, but it’s doable. Most likely you’ll find they use multiple IP addresses, but you could try running it down and blocking IP addresses.

]]> by: Diannah Morgan http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-20310 Sat, 24 Jun 2006 06:49:21 +0000 http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-20310 Hi, I'm new at this tracking thing. I'm having trouble with a guestbook type spammer that is not a bot. At least I don't think so as I have in place the graphic character type authentication active on the site. Once or twice a day they register as a user always leaving a link back to a Pilosoft held IP addr. It's always some kind of pills. I'm saving up approximate times and names hoping to troll through the logs and find a common IP source. I'm I crazy? Is this how it's done? Can you give me any hints on what I need to do. We're running a phpbbs. Hi,

I’m new at this tracking thing.

I’m having trouble with a guestbook type spammer that is not a bot.
At least I don’t think so as I have in place the graphic character type authentication
active on the site.
Once or twice a day they register as a user always leaving a link back to
a Pilosoft held IP addr. It’s always some kind of pills.

I’m saving up approximate times and names hoping to troll through the logs and find a common IP source. I’m I crazy? Is this how it’s done?

Can you give me any hints on what I need to do.
We’re running a phpbbs.

]]> by: Michael Pollitt http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-5676 Tue, 04 Apr 2006 07:34:20 +0000 http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-5676 Which IP did he use, Ellen? Please e-mail me or post it here. This spammer remains very active in guestbook spamming using my details - read my blog for more info. Which IP did he use, Ellen? Please e-mail me or post it here. This spammer remains very active in guestbook spamming using my details - read my blog for more info.

]]> by: Ellen R. Ashard http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-5627 Mon, 03 Apr 2006 19:56:39 +0000 http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-5627 Caught the IP today trying to spam our phpBB forum. So I guess it's not only guest books he's after. Can't give any info on which site he tried to spam, of course. Just using the old forum spammer way of trying to do some automated registration, but he failed. Anyway, he indeed is still at it. Caught the IP today trying to spam our phpBB forum. So I guess it’s not only guest books he’s after. Can’t give any info on which site he tried to spam, of course. Just using the old forum spammer way of trying to do some automated registration, but he failed. Anyway, he indeed is still at it.

]]> by: Michael Pollitt http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-5060 Tue, 21 Mar 2006 14:42:04 +0000 http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-5060 He's back - search-pharmacy-online.com this time - but using the same names (including mine) as before for spamming. More details in my blog. If anybody spots the spammer's IP in the guestbooks (I've not seen it so far), please let me know. I just reported the search-pharmacy site to EV1. The other site from the previous spam run, 1-800-pills.com, is now showing an empty directory list. He’s back - search-pharmacy-online.com this time - but using the same names (including mine) as before for spamming. More details in my blog. If anybody spots the spammer’s IP in the guestbooks (I’ve not seen it so far), please let me know. I just reported the search-pharmacy site to EV1. The other site from the previous spam run, 1-800-pills.com, is now showing an empty directory list.

]]> by: Michael Pollitt http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-4470 Mon, 13 Mar 2006 10:03:21 +0000 http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-4470 I'm pleased to report that following complaints to WV Fiber, the upstream provider to Inhoster.com, that the IP range above has been stopped from spamming. The 1-800.pills.com web site has moved to a US host and is currently returning a 403. I'm going to remain on this spammer's tail until I'm sure that he has stopped using other people's names for his spamming campaign. I’m pleased to report that following complaints to WV Fiber, the upstream provider to Inhoster.com, that the IP range above has been stopped from spamming. The 1-800.pills.com web site has moved to a US host and is currently returning a 403. I’m going to remain on this spammer’s tail until I’m sure that he has stopped using other people’s names for his spamming campaign.

]]> by: My0 http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-4121 Mon, 06 Mar 2006 01:14:56 +0000 http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-4121 This is interesting, I have been dealing with irritating blog spam as well for several months. I help maintain a high profile high trafficked blog; spam blogging needs to be treated like mail spamming. I report it best I can to the ISPs. Not sure what affect yet if any it has had. I have reported mostly the sites they spamvertise. I know of at least 1 instance where the spamvertised website was disabled, but I do not know if that was due to complaints to ISP abuse or some other reason. This is interesting, I have been dealing with irritating blog spam as well for several months. I help maintain a high profile high trafficked blog; spam blogging needs to be treated like mail spamming. I report it best I can to the ISPs. Not sure what affect yet if any it has had. I have reported mostly the sites they spamvertise. I know of at least 1 instance where the spamvertised website was disabled, but I do not know if that was due to complaints to ISP abuse or some other reason.

]]> by: Ajay D'Souza http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-3864 Tue, 28 Feb 2006 14:47:45 +0000 http://spamhuntress.com/2006/02/27/tarred-with-the-same-brush/#comment-3864 Thanks for the headsup on this. This is only on guestbooks or have you faced the same on the blog as well? Do you know of any guestbook to recommend? Thanks for the headsup on this.

This is only on guestbooks or have you faced the same on the blog as well?

Do you know of any guestbook to recommend?

]]>