So, I have a pretty hefty log of people who’ve spammed my site with crap link to porn, morgage, or ED websites. It seems that they come and go in spurts. About 5 months ago there was a large increase of these bots, however lately (this past month) it has increased more than usual. Take a look at my ban log of all the people who’ve tried to spam my site, but were blocked.
Fri Dec 24 04:16:11 2004 – Access Banned because $REMOTE_ADDR matches 163.28.33.227
Tue Jan 11 14:37:49 2005 – Access Banned because $REMOTE_ADDR matches 192.115.106.236
Tue Jan 11 19:02:15 2005 – Access Banned because $REMOTE_ADDR matches 192.115.106.236
Sat Jan 15 23:18:04 2005 – Access Banned because $REMOTE_ADDR matches 193.251.169.174
Mon Jan 17 23:55:16 2005 – Access Banned because $REMOTE_ADDR matches 211.250.80.2
Wed Jan 19 05:12:59 2005 – Access Banned because $REMOTE_ADDR matches 148.223.194.250
Wed Jan 19 21:05:07 2005 – Access Banned because $REMOTE_ADDR matches 211.34.228.124
Thu Jan 20 09:03:07 2005 – Access Banned because $REMOTE_ADDR matches 200.141.76.227
Thu Jan 20 21:42:37 2005 – Access Banned because $REMOTE_ADDR matches 80.58.11.107
Thu Jan 20 21:42:37 2005 – Access Banned because $REMOTE_ADDR matches 200.141.76.227
Fri Jan 21 04:34:35 2005 – Access Banned because $REMOTE_ADDR matches 148.223.194.250
Fri Jan 21 08:16:49 2005 – Access Banned because $REMOTE_ADDR matches 200.141.76.227
Fri Jan 21 11:50:46 2005 – Access Banned because $REMOTE_ADDR matches 132.199.139.171
Sat Jan 22 11:41:37 2005 – Access Banned because $REMOTE_ADDR matches 200.135.71.145
Sat Jan 22 21:46:36 2005 – Access Banned because $REMOTE_ADDR matches 192.115.106.236
Sun Jan 23 00:47:45 2005 – Access Banned because $REMOTE_ADDR matches 148.223.194.250
Sun Jan 23 00:47:45 2005 – Access Banned because $REMOTE_ADDR matches 213.121.209.14
Sun Jan 23 00:47:45 2005 – Access Banned because $REMOTE_ADDR matches 148.244.150.58
Sun Jan 23 00:48:15 2005 – Access Banned because $REMOTE_ADDR matches 61.221.15.131
Sun Jan 23 17:14:43 2005 – Access Banned because $REMOTE_ADDR matches 132.199.139.171
Mon Jan 24 06:23:01 2005 – Access Banned because $REMOTE_ADDR matches 148.223.194.250
Mon Jan 24 06:31:00 2005 – Access Banned because $REMOTE_ADDR matches 66.250.69.7
Mon Jan 24 15:40:06 2005 – Access Banned because $REMOTE_ADDR matches 192.115.106.236
Mon Jan 24 15:40:25 2005 – Access Banned because $REMOTE_ADDR matches 80.58.14.42
Mon Jan 24 15:40:25 2005 – Access Banned because $REMOTE_ADDR matches 148.223.194.250
Mon Jan 24 22:19:06 2005 – Access Banned because $REMOTE_ADDR matches 61.221.15.131
Tue Jan 25 08:07:10 2005 – Access Banned because $REMOTE_ADDR matches 132.199.139.171
Tue Jan 25 18:16:29 2005 – Access Banned because $REMOTE_ADDR matches 209.173.10.229
Wed Jan 26 00:23:05 2005 – Access Banned because $REMOTE_ADDR matches 148.223.194.250
Wed Jan 26 03:03:32 2005 – Access Banned because $REMOTE_ADDR matches 148.223.194.250
Wed Jan 26 03:04:01 2005 – Access Banned because $REMOTE_ADDR matches 66.250.69.7
Wed Jan 26 03:04:12 2005 – Access Banned because $REMOTE_ADDR matches 61.221.15.131
Wed Jan 26 11:30:20 2005 – Access Banned because $REMOTE_ADDR matches 209.173.10.229
Wed Jan 26 16:59:04 2005 – Access Banned because $REMOTE_ADDR matches 148.223.194.250
Wed Jan 26 16:59:31 2005 – Access Banned because $REMOTE_ADDR matches 192.115.106.236
Wed Jan 26 16:59:32 2005 – Access Banned because $REMOTE_ADDR matches 216.126.204.22
Wed Jan 26 22:21:27 2005 – Access Banned because $REMOTE_ADDR matches 132.199.139.171
Wed Jan 26 22:41:39 2005 – Access Banned because $REMOTE_ADDR matches 148.223.194.250
Thu Jan 27 00:35:13 2005 – Access Banned because $REMOTE_ADDR matches 200.135.71.145
Thu Jan 27 00:35:13 2005 – Access Banned because $REMOTE_ADDR matches 148.244.150.58
Thu Jan 27 00:35:33 2005 – Access Banned because $REMOTE_ADDR matches 213.121.209.14
Thu Jan 27 00:35:40 2005 – Access Banned because $REMOTE_ADDR matches 61.221.15.131
Thu Jan 27 19:52:34 2005 – Access Banned because $REMOTE_ADDR matches 80.58.14.42
Fri Jan 28 18:02:15 2005 – Access Banned because $REMOTE_ADDR matches 148.223.194.250
Fri Jan 28 23:35:40 2005 – Access Banned because $REMOTE_ADDR matches 213.76.152.186
Sat Jan 29 03:21:11 2005 – Access Banned because $REMOTE_ADDR matches 209.173.10.229
Sat Jan 29 03:21:52 2005 – Access Banned because $REMOTE_ADDR matches 148.223.194.250
Sat Jan 29 03:22:02 2005 – Access Banned because $REMOTE_ADDR matches 148.244.150.58
Sat Jan 29 09:13:27 2005 – Access Banned because $REMOTE_ADDR matches 213.121.209.14
Sat Jan 29 12:49:48 2005 – Access Banned because $REMOTE_ADDR matches 148.223.194.250
Sat Jan 29 12:49:48 2005 – Access Banned because $REMOTE_ADDR matches 66.250.69.7
Sat Jan 29 12:49:54 2005 – Access Banned because $REMOTE_ADDR matches 66.250.69.7
Sat Jan 29 18:27:36 2005 – Access Banned because $REMOTE_ADDR matches 164.58.183.116
Sat Jan 29 20:01:38 2005 – Access Banned because $REMOTE_ADDR matches 148.223.194.250
Sat Jan 29 20:01:38 2005 – Access Banned because $REMOTE_ADDR matches 148.223.194.250
Sat Jan 29 20:01:40 2005 – Access Banned because $REMOTE_ADDR matches 66.250.69.7
Sat Jan 29 20:01:48 2005 – Access Banned because $REMOTE_ADDR matches 148.223.194.250
Sat Jan 29 20:01:49 2005 – Access Banned because $REMOTE_ADDR matches 80.58.14.42
Sat Jan 29 23:42:52 2005 – Access Banned because $REMOTE_ADDR matches 209.173.10.229
I hope your computing license gets banned.
~david
What exactly are these IP’s doing to your site?
I was viewing my logs and found thousands of requests from several IPs. Many of them match the ones on your list.
I also have a bunch of referrals from spam sites. When I go to those pages, they have no links to my site.
I have no idea, however, what if anything they are doing or what these log entries mean.
Thanks.
These are compromised machines all over the world that are under the command of some people and are used to spam sites. The referal spam you’re seeing is a technique that fools search engines that some bogus (http://www.spamsite.com) actually has content that your site has. For example, if I search for "david macias" the first hit might be my site, however if there are a lot of spam sites then the search engine index will think that the site with the most imformation about "david macias" is http://www.somespamsite.com. There is really nothing you can do about this.
Hope that helps,
~david macias