Jump to content

Tracking Down The Trackback Spammer


Recommended Posts



You may just want to go ahead and ban all of Atrivo's network. I've had two from their network always picking on me, and after my "Master Spambot" post, I've received quite a few emails from others that claim other IPs on Atrivo are also master-bots but Atrivo won't do anything about it.



Link to comment
Share on other sites

I didn't complaing to Atrivo. If the spammer has abandoned that IP number, I thought it would be more worth my time to complain to ThePlanet. Still no reply. I'm giving them the benefit of the doubt since it's the weekend. But if there's no reply by Tuesday night I'm making some waves.


EDIT: Wow, you're one of the people I linked to. Amazing how you find related things on search engines or blog searches, then end up having a conversation with them here on TCH!

Link to comment
Share on other sites

I've been doing some tracking. I found that many of the IP number this particular spamming outfit is using, are webservers. Many of them unintended webservers. It's possible he's used open proxy lists, and it's also possible he's port scanned lots of IP numbers until he found ones that did work.


About half the IP numbers don't have webservers on them. Probably windows home computers that are virus infected. Zombies.


The rest are webservers. And they're both microsoft servers and Apache and even other types. One Lotus Domino, of all things.


What kind of program could work on ALL of those? Or is he just using them as proxies? Most likely, I suppose.


Check my blog for details, if you want to play around with this stuff. Click the smiley:




Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Unfortunately, your content contains terms that we do not allow. Please edit your content to remove the highlighted words below.
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Create New...