Go play somewhere else
by Volker Weber
OK, I have a solution of sorts to referrer spam - I bounce it back to them. I have almost eliminated it, except for one from h*hproftclub who refuses to go away. To be really EVIL, I’ve redirected that spammers output alone to the signup page at www.webclipping.com/signup.html. Probably not entirely ethical but then we’re dealing with two unethical orgs - why not play them off against each other? (Yeah I know, two wrongs…)
It does mean more crap in my log file (the way I have it set up) but it’s fun. Now, my log file sees an attempt to access a page on my site, which is redirected. However, because of the way it is redirected the bot still thinks it is on MY site - so I also get to see the cgi request. For example:
207.248.240.119 - - [04/Mar/2005:06:19:37 -0600] "GET /cgi-bin/signup.cgi?cname=web+poker&caddress=+%3Ch1%3EYou+can+a...
So now webclippings are being auto-spammed by a spammer! We hate them both - now they can hate each other. And I think I am effectively hidden from this loop, thanks to how these redirects work. It just looks like h**hprofit is spamming them direct!
Ha ha ha! Death to the spammer…
Comments
Komisch, diese Art von stupidity häuft sich in den letzten Tagen - bei mir und einem Kommentar-Schreiber sind es zufälligerweise alles Schweizer User...
Absolutely the same situation here - same IP address hits my RSS feed, then tries to hit a malformed URL for each RSS'd blog entry in 1 second intervals. Go away, news.allresearch.com!
Tell them to go somewhere else. ;-)
The domain is registered to a guy in NY, the web site says their location is LA.
/k
Registrant:
SILVERMAN, NOAH (ALLRESEARCH4-DOM)
276 CANAL ST FL 7
NEW YORK, NY 10013-3531
US
Domain Name: ALLRESEARCH.COM
Administrative Contact, Technical Contact:
SILVERMAN, NOAH (NXS699) noah@webclipping.com
276 CANAL ST FL 7
NEW YORK, NY 10013-3531
US
212 965 1900 fax: 212 965 8733
Record expires on 12-Sep-2009.
Record created on 13-Sep-1998.
Database last updated on 8-Oct-2004 09:40:39 EDT.
Domain servers in listed order:
AUTH1.DNS.COGENTCO.COM 66.28.0.14
AUTH2.DNS.COGENTCO.COM 66.28.0.30
Tell them to go somewhere else. ;-)
Ok. That would be easy:
RewriteEngine OnRewriteCond %{REMOTE_ADDR} ^38\.144\.36\.16RewriteRule (.*) http://webmonster.de/ [F,L]
