Forum Moderators: open

Message Too Old, No Replies

Faxobot/1.0

Figured out what it is!

         

djzooky

5:40 pm on Jan 31, 2005 (gmt 0)

10+ Year Member



i conned faxobot. created a page with the simple text "fax number: *MYFAXNUMBERHERE*"

and kept all other agents except for faxobot out.

sure enough, within 2 hours, i recieved my first piece of fax spam.

nobody else knew my fax number, and i had just set it up 2 days prior.

it's a fax number collector.

pendanticist

6:26 pm on Feb 1, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



...

[edited by: pendanticist at 6:28 pm (utc) on Feb. 1, 2005]

pendanticist

6:28 pm on Feb 1, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Well djzooky, there are a few folks around here that might be interested in this report...
[webmasterworld.com...]

Can you definitively say that your fax number wasn't discovered by an autodialer doing sequential calls?

You said you got a fax in two hours. Did you see Foxobot in your access_log files?

I admit the timing is in your favor and in retrospect, the term sure does fit the bot.

pendanticist

2:29 am on Feb 3, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



On a related note: I just got a piece of UCE/SPAM in one of my that promotes a website for sending UCE/SPAM via fax.

Got lots of coding on their homepage too...

<html></html> :)

idoc

10:09 pm on Feb 8, 2005 (gmt 0)

10+ Year Member



Today on another i.p. address... did ask for robots.

70.243.153.100 - - [08/Feb/2005:16:20:38 -0500] "GET /robots.txt HTTP/1.1" 200 162 "http://www.faxo.com" "Faxobot/1.0"
70.243.153.100 - - [08/Feb/2005:16:20:40 -0500] "GET / HTTP/1.1" 200 28799 "http://www.faxo.com" "Faxobot/1.0"

idoc

4:02 pm on Feb 18, 2005 (gmt 0)

10+ Year Member



And again now from here:

70.242.147.28 - - [18/Feb/2005:09:53:12 -0500] "GET /robots.txt HTTP/1.1" 200 196 "http://www.faxo.com" "Faxobot/1.0"
69.150.87.183 - - [18/Feb/2005:09:53:28 -0500] "GET / HTTP/1.1" 200 13072 "http://www.faxo.com" "Faxobot/1.0"

Whats with the changing ip's I wonder? Being stealthy or using several ISP's dhcp numbers... i.e. being insignificant.

idoc

10:27 pm on Feb 21, 2005 (gmt 0)

10+ Year Member



Yet another apparent dynamic host i.p. for this one:

68.94.95.150 - - [21/Feb/2005:15:23:02 -0500] "GET /robots.txt HTTP/1.1" 200 162 "http://www.faxo.com" "Faxobot/1.0"
68.94.95.150 - - [21/Feb/2005:15:23:05 -0500] "GET / HTTP/1.1" 200 28879 "http://www.faxo.com" "Faxobot/1.0"

bull

8:00 am on Feb 23, 2005 (gmt 0)

10+ Year Member



and
69.150.87.183

mrMister

1:01 pm on Feb 24, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Hehe, i have an idea.

Set up a load of premium rate phone numbers, cloak a page on your website that only faxobot will see and list the phone numbers in a way that makes faxobot think they're fax numbers. :-)

idoc

5:40 am on Feb 25, 2005 (gmt 0)

10+ Year Member



Also keep an eye for the FCC about July 1, the extension on the stay against stiffer rules for unsolicited faxes runs out June 30. Most folks don't realize that unsolicited faxes were made illegal since around 1991 I believe. The existing rules allow a loophole for those that "have an existing business relationship" with you. This is widely abused. The new rule will require "written authorization" before a company can send you a fax that contains any solcitation. Also, there are provisions to sue for actual damages (5 cents maybe) OR $500 whichever is greater per unsolicited fax received and provides treble damages for willful violation. That's $1500 per. The DMA is gong nuts trying to stop this. You might want to save the faxes from the more egregious faxers. That would teach them. Or, you could hide the fax numbers of law firms in your pages for the harvesters to find. That would be mean though. ;)