IP 200.63.42.136 in massive blog spam run
By Brian Turner
September 5, 2008
IP 200.63.42.136 has been really hammering out the blog spam over the past week.
The reach is quite surprising - it’s taking it’s toll out on popular blogs but also little used blogs we monitor.
According to a WHOIS check, it appears 200.63.42.136 is assigned to Uruguay:
OrgName: Latin American and Caribbean IP address Regional Registry
OrgID: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
The fact that the blog spammer isn’t changing their IP, plus the massive reach being applied, suggests that some dumb toad is playing at amatuer blog spamming and aiming to annoy as many people as possible with it.
In addition, the following IP’s have also been involved in strong spam runs the past few days:
78.157.143.242 & 241 - Latvia
195.60.174.21 - Ukraine
Ones to watch out for and consider blocking as and if you need to.
I’m experiencing the same thing Eric is. This 1 IP is creating spam more than once a day, and blacklisting that IP stopped it immediately.
I hate how international laws can protect this.
We have been getting so much spam from 200.63.42.136 that it is shocking. The sender has a FrontPage form bot that send gibberish. For the life of me I cannot figure out what is the purpose other than to harass, vex and annoy.
We will solve the problem with capcha which we should have used in the first place, using a flash web form (which is an added layer of protection).
I have no relation to CoffeeCup software, but I have found their flash web form software to be pretty good since this problem started.