[Coco] ** Forum spammer is among us **

Diego Barizo diegoba at adinet.com.uy
Sat Feb 10 16:21:56 EST 2007


A recent spammer appears to be coming from 24.236.128.77 and nearby 
addresses.  24.236 was the prefix to 2 spam IPs.  Either that or some 
original valid member posts from the same IP address was injected 
with the spam, causing the original honest IP address to still appear.

I believe that the person at 24.236.x.x may be an honest CoCo user 
who has an infected computer that is running some kind of session 
hijacker.  This user has also browsed through the CoCo gallery and 
main website looking at specific CoCo files.

He also came to the site from a Google search for "make dsk in 
windows", meaning he is a CoCo emulator user.  This person has also 
visited www.sclaudia.net which is a CoCo website.  How do I know 
this?  Because that website tries to link directly to my CoCo logo 
which produces a Hot Link error on my server, showing up in my logs 
what IP tried to view a site picture without being on my site.  The 
spammer at the above IP address was linked to the Hot Link activity 
which means he was on the sclaudia.net CoCo site.
 
The sclaudia.net site is mine, and I have a subdomain coco.sclaudia.net with my coco website.
I'll check my IP when I get home, but I haven't done that  google search...

Diego



More information about the Coco mailing list