Log spam from tecrep-inc.net

chinese log spammers

[davidof]

Has anyone else seen log spam from various domains under: tecrep-inc.net

It is all stuff like student loans, how to play poker. My logs are not publically visible so I'm not sure what the point is. Every day I get more traffic from these guys. If you go to any of the domains you get a message saying the site has been suspended due to abuse, you are then invited to enter your complaint and URL. Is this just a front to gather URLs?

The whole thing is hosted by some Chinese outfit. I run content targetted advertising and also wondered if they were involved in click-fraud?

Anyway check your logs and see what you find,

David

[geekay]

A Google search with that domain as search term in quotes gives 13 000 hits, and an inurl: search 38 hits. All 38 are to start pages of "suspended accounts". The wording of the explaining text is like "The Following strange point is now being canceled" (sic!) etc., but the exact wording is different on all the 38 pages. No duplicate content there.

[davidof]

Yes they do seem to be prolific spammers. But why continue spamming with accounts that have been suspended?

[balam]

> My logs are not publically visible so I'm not sure what the point is.

Obviously there's no point in your case, but there's (tens/hundreds of?) thousands of log files that are out there being crawled each day by the SEs.

> But why continue spamming with accounts that have been suspended?

Ah, but are they really suspended? Don't forget, we're dealing with the logic of spammers, and who knows what their ulterior motives are.

[walkman]

> But why continue spamming with accounts that have been suspended?

soon he'll go to another $4.95 host and the links will stil be there. It doesn't matter.

[Brett_Tabke]

> account suspended

It hasn't been suspended. It is a classic link pop scheme and if you do link checks you see they are more into blog/guestbook spam than log spam. Most webmasters click back and see the acc suspended and never complain. Even the form on the home page is a scheme to prevent hosting complaints.

Same crew that is doing the web ripping [webmasterworld.com]?

<added>
looks like Google removed them?
</added>

Here are about a 1000 more just like it:
[google.com...]

The majority of those are not actually closed accounts - just link pop builders.

[MsCantBWrong]

This is exactly the one I am trying to ban!

My message on this thread:
[webmasterworld.com...]

[davidof]

> soon he'll go to another $4.95 host and the links will stil be there. It doesn't matter.

Yes that's true. Although I agree with the comment that who knows what spammers are thinking. Today he seems to have moved on to the learntoplay.com domain which has the same enter URL form.

Unfortunately banning through mod-rewrite, IP address or whatever is a great solution. It take admin time and puts extra load on the server as each request has to go through a load of logic before it is served.