Is this Just Spam - or More?

[Mort-lemur]

Hi,

 

I have started getting annoying Spam type emails from one of my stores contact us page, the text is a load of links as follows:

 

Message from: zddpjotrn

Date Sent: 19 Oct 2010 13:29:38

 

At IP: 216.225.158.65.

 

Enquiry:

K3xTlA a hrefhttp:jpcskwtiodcd.comjpcskwtiodcda urlhttp:pxlfyxnwipfg.compxlfyxnwipfgurl linkhttp:kzmeoctezzjc.comkzmeoctezzjclink http:utfbxtfsdide.com

 

The code has been sanitised thanks to Sams Anti Hacker Account Mods etc.

 

My question is - is this just spam? or are they trying to do something else?

 

Thanks

[Wayne Weedon]

I have seen those too, and I'm sure a couple more shop owners have too.

 

One thing for certain it's not Innocent behaviour..

 

Look at your apache logs, extract the relevent lines and forward to that IP's isp with a complaint.([email protected])

 

It's a US based ISP. so just maybe they will be responsible and look into it.

 

Wayne...

[♥kymation]

It's just comment spam. They are trying to post links to pages that are automatically updated in order to game Google. You can ignore it, or use one of several methods to block bots from your comment form. I believe that one of these has been included in the 2.3 release, so you could download that page from Github.

 

Regards

Jim

[Wayne Weedon]

I do wonder what the original form of the message was though.

 

In the past I've ignored these and also more sinister Log entries but more so recently I'll find the couple minutes it takes to fire off a quick email to the abuse@ addresses. Most often the ISP is responsive. Likewise I'll always report banking Phishing emails when the Bank bothers to make their reporting email address easily found! Cos if no-one does some sucker will fall for it.

 

Not so sure Turk Telekom will be though! What is it with the number of Turkish hack attempts? Had my first couple attempts from China too this week.

[Mort-lemur]

Hi again,

 

The spam kept coming....so I have amended the code of the recaptcha contribution to make it compatible with the contact us form of Sams Anti Hacker Account mods contribution.

 

That should stop the automated spam from contact us? (Fingers crossed)

 

Contribution is HERE

 

Thanks