Netdirect-net

When will this stop?

[blend27]

For the past 2 years we get traffic(junk) from these Hosting ranges that is simply nothing but attempts for a forum spam. We have no forums, period. Yet after sending several emails to abuse@ email, this hosting company refuses to respond and the junk has not stopped.

the common pages requested:

http:// www.example.com/guest-book/
http:// forum.example.com/
http:// forum.example.com/forum/index.php
http:// forum.example.com/phpbb/index.php
http:// forum.example.com/phpbb2/index.php
http:// forum.example.com/forums/index.php
http:// forum.example.com/board/index.php

they get 404's, yet it is not a problem for them to come back and do it again..

what gives? the people that do this(and bots), when asked a question.. What do you do for living, do they really answer ... I am a Comment Spammer?

[incrediBILL]

I would block that hosting range from your HTTP process before they find something vulnerable on your site and get lucky.

What happens in some cases is the scripts attacking your site use the search engines to locate sites and probably your domain name was a result for their search for whatever reason. In other cases, they just hit common configurations probing for forums which is what it looks like in this case.

Instead of a 404, maybe a 301 might be in order, give them someplace fun to try, perhaps their own hosting company?

[blend27]

Bill, I have tried almost every trick in my (evil) bag, but they just keep comming back no matter what; 403;301;404, no matter...

Another Hosting comany that has accumulated same pattern requests is NETNAME: DE-KEYWEB-II. Same Exact Story. Emails Sent to Abuse@, no response and even a few spam email to the account from where the complaint was filed thrue. At some point this must stop. KEYWEB range: 84.19.160.0/19

Over and out.

Blend27