[Coco] ** Forum spammer is among us **
Diego Barizo
diegoba at adinet.com.uy
Sat Feb 10 16:21:56 EST 2007
A recent spammer appears to be coming from 24.236.128.77 and nearby
addresses. 24.236 was the prefix to 2 spam IPs. Either that or some
original valid member posts from the same IP address was injected
with the spam, causing the original honest IP address to still appear.
I believe that the person at 24.236.x.x may be an honest CoCo user
who has an infected computer that is running some kind of session
hijacker. This user has also browsed through the CoCo gallery and
main website looking at specific CoCo files.
He also came to the site from a Google search for "make dsk in
windows", meaning he is a CoCo emulator user. This person has also
visited www.sclaudia.net which is a CoCo website. How do I know
this? Because that website tries to link directly to my CoCo logo
which produces a Hot Link error on my server, showing up in my logs
what IP tried to view a site picture without being on my site. The
spammer at the above IP address was linked to the Hot Link activity
which means he was on the sclaudia.net CoCo site.
The sclaudia.net site is mine, and I have a subdomain coco.sclaudia.net with my coco website.
I'll check my IP when I get home, but I haven't done that google search...
Diego
More information about the Coco
mailing list