Strange spam posts not making sense
Posted
by
Paaland
on Pro Webmasters
See other posts from Pro Webmasters
or by Paaland
Published on 2011-03-14T07:50:50Z
Indexed on
2011/03/14
8:19 UTC
Read the original article
Hit count: 325
I'm running a web site with a forum where one small part is open for posting from unregistered users. The site uses captcha, but still some spam posts get through every day. Here is the thing. All of the messages follow the same pattern, but all also come from different IP's. That makes me thing this is some sort of automated scripted "attack" from a botnet of some sorts.
The strange thing is that all the messages start with six random characters and contains a couple of links. The words have no meaning and the domains in the links does not even exist.
Why would anyone use time and resources spreading these things? Below you can see two of these messages:
A5Zfs6 exrzvrbspntz, [url=http://nktqoqllnuab.com/]nktqoqllnuab[/url], [link=http://wtrenldadvsy.com/]wtrenldadvsy[/link], [http://rnlrqfgdvdot.com/]
O2oLpL nqeffxhryfdk, [url=http://jutyurbpfxow.com/]jutyurbpfxow[/url], [link=http://jpcdtmdalpow.com/]jpcdtmdalpow[/link], [http://qopqwqxwjdjx.com/]
Since all the messages come from different IP's I can't see blocking those will help much. For now I'm considering just dropping all messages following this pattern since it's quite easy to match with a regexp.
Have anyone else seen these kinds of messages or know the point of posting them?
© Pro Webmasters or respective owner