Blog Spamming and Form Hijacking

[b2phat]

Hi All,

I have a couple questions ... I have pondered this and come up with a few "concepts" but would appreciate input from those "in the know."

Because of previous SPAM issues, I have turned off all public referral logs. Yet, when I go to visit my admin logs (mainly on my blog, not site logs) what used to contain mainly referrals from Google is now just stock FULL of links from Poker sites and "texas hold'em" crap. Dozens of different url's of the some variation. Most have been from the ip address of 64.191.63.170, but in the last few days I've had to block all of the following:

219.150.118.16
219.137.154.123
65.165.84.12
134.75.217.55
202.143.156.14
207.248.240.119
4.21.204.37
208.63.116.194
207.127.0.2
163.28.112.100
66.237.84.20
64.109.242.65
208.148.45.115
212.138.47.11
64.191.63.170
68.42.73.109
213.56.68.29
210.19.204.245
64.5.152.195
148.244.150.57

Normally, I wouldn't be concerned but this same entity is also using my webforms (feedback and ad order form) to submit variations of the following to me several times everyday:

Name: texas holdem hands ranking 1 - 169
Email: grey_goose4253@aol.com
IP: 163.28.112.100
Form: http://newbiehangout.com/feedback.htm
Message:
<h1>Please check some information dedicated to seven stud seven
stud <A
HREF="http://www.ca-america.com/seven-stud.html">http://www.ca-america.com/s
even-stud.html</A>
<A
HREF="http://www.ca-america.com/carribean-stud-poker-shareware-freeware.html
"> carribean stud poker shareware freeware </A> carribean stud poker
shareware freeware <A
HREF="http://www.ca-america.com/carribean-stud-poker-shareware-freeware.html
">http://www.ca-america.com/carribean-stud-poker-shareware-freeware.html</A>

<A HREF="http://www.ca-america.com/caribbean-stud-poker-rules.html">
caribbean stud poker rules </A> caribbean stud poker rules <A
HREF="http://www.ca-america.com/caribbean-stud-poker-rules.html">http://www.
ca-america.com/caribbean-stud-poker-rules.html</A>
<A
HREF="http://www.ca-america.com/seven-card-stud-poker.html"> seven card stud
poker </A> seven card stud poker <A
HREF="http://www.ca-america.com/seven-card-stud-poker.html">http://www.ca-am
erica.com/seven-card-stud-poker.html</A>
omaha high/low
omaha high/low <A
HREF="http://www.ca-america.com/omaha-high/low.html">http://www.ca-america.c
om/omaha-high/low.html</A>
<A
HREF="http://www.ca-america.com/omaha-poker-software.html"> omaha poker
software </A> omaha poker software <A
HREF="http://www.ca-america.com/omaha-poker-software.html">http://www.ca-ame
rica.com/omaha-poker-software.html</A>
poker omaha poker
omaha <A
HREF="http://www.ca-america.com/poker-omaha.html">http://www.ca-america.com/
poker-omaha.html</A>
omaha poker omaha
poker <A
HREF="http://www.ca-america.com/omaha-poker.html">http://www.ca-america.com/
omaha-poker.html</A>
<A
HREF="http://www.ca-america.com/texas-no-hold-em.html"> texas no hold em
</A> texas no hold em <A
HREF="http://www.ca-america.com/texas-no-hold-em.html">http://www.ca-america
.com/texas-no-hold-em.html</A>
<A
HREF="http://www.ca-america.com/texas-holdem-gifts.html"> texas holdem gifts
</A> texas holdem gifts <A
HREF="http://www.ca-america.com/texas-holdem-gifts.html">http://www.ca-ameri
ca.com/texas-holdem-gifts.html</A>
<A
HREF="http://www.ca-america.com/texas-hold-em-tricks.html"> texas hold em
tricks </A> texas hold em tricks <A
HREF="http://www.ca-america.com/texas-hold-em-tricks.html">http://www.ca-ame
rica.com/texas-hold-em-tricks.html</A>
<A
HREF="http://www.ca-america.com/holdem-free-money.html"> holdem free money
</A> holdem free money <A
HREF="http://www.ca-america.com/holdem-free-money.html">http://www.ca-americ
a.com/holdem-free-money.html</A>
<A
HREF="http://www.ca-america.com/poker,-texas-hold-em.html"> poker, texas
hold em </A> poker, texas hold em <A
HREF="http://www.ca-america.com/poker,-texas-hold-em.html">http://www.ca-ame
rica.com/poker,-texas-hold-em.html</A>
<A
HREF="http://www.ca-america.com/poker-tables-for-holdem.html"> poker tables
for holdem </A> poker tables for holdem <A
HREF="http://www.ca-america.com/poker-tables-for-holdem.html">http://www.ca-
america.com/poker-tables-for-holdem.html</A>
<A
HREF="http://www.ca-america.com/texas-holdem-stratagies.html"> texas holdem
stratagies </A> texas holdem stratagies <A
HREF="http://www.ca-america.com/texas-holdem-stratagies.html">http://www.ca-
america.com/texas-holdem-stratagies.html</A>
<A
HREF="http://www.ca-america.com/holdem-poker-odds.html"> holdem poker odds
</A> holdem poker odds <A
HREF="http://www.ca-america.com/holdem-poker-odds.html">http://www.ca-americ
a.com/holdem-poker-odds.html</A>
<A
HREF="http://www.ca-america.com/free-poker-texas-hold-em.html"> free poker
texas hold em </A> free poker texas hold em <A
HREF="http://www.ca-america.com/free-poker-texas-hold-em.html">http://www.ca
-america.com/free-poker-texas-hold-em.html</A>
<A
HREF="http://www.ca-america.com/texas-hold-em-tournaments.html"> texas hold
em tournaments </A> texas hold em tournaments <A
HREF="http://www.ca-america.com/texas-hold-em-tournaments.html">http://www.c
a-america.com/texas-hold-em-tournaments.html</A>
<A
HREF="http://www.ca-america.com/amatuer-poker-league.html"> amatuer poker
league </A> amatuer poker league <A
HREF="http://www.ca-america.com/amatuer-poker-league.html">http://www.ca-ame
rica.com/amatuer-poker-league.html</A>
<A
HREF="http://www.ca-america.com/caribbean-poker-online.html"> caribbean
poker online </A> caribbean poker online <A
HREF="http://www.ca-america.com/caribbean-poker-online.html">http://www.ca-a
merica.com/caribbean-poker-online.html</A>
<A
HREF="http://www.ca-america.com/best-online-poker.html"> best online poker
</A> best online poker <A
HREF="http://www.ca-america.com/best-online-poker.html">http://www.ca-americ
a.com/best-online-poker.html</A>
<A
HREF="http://www.ca-america.com/online-party-poker.html"> online party poker
</A> online party poker <A
HREF="http://www.ca-america.com/online-party-poker.html">http://www.ca-ameri
ca.com/online-party-poker.html</A>
<A
HREF="http://www.ca-america.com/texas-holdem-poker-rules.html"> texas holdem
poker rules </A> texas holdem poker rules <A
HREF="http://www.ca-america.com/texas-holdem-poker-rules.html">http://www.ca
-america.com/texas-holdem-poker-rules.html</A>
<A
HREF="http://www.ca-america.com/on-line-poker-game.html"> on line poker game
</A> on line poker game <A
HREF="http://www.ca-america.com/on-line-poker-game.html">http://www.ca-ameri
ca.com/on-line-poker-game.html</A>
<A
HREF="http://www.ca-america.com/texas-hold-em-poker-rules.html"> texas hold
em poker rules </A> texas hold em poker rules <A
HREF="http://www.ca-america.com/texas-hold-em-poker-rules.html">http://www.c
a-america.com/texas-hold-em-poker-rules.html</A>
<A
HREF="http://www.ca-america.com/texas-hold-em-odds.html"> texas hold em odds
</A> texas hold em odds <A
HREF="http://www.ca-america.com/texas-hold-em-odds.html">http://www.ca-ameri
ca.com/texas-hold-em-odds.html</A>
poker card poker
card <A
HREF="http://www.ca-america.com/poker-card.html">http://www.ca-america.com/p
oker-card.html</A>
<A
HREF="http://www.ca-america.com/free-video-poker-game.html"> free video
poker game </A> free video poker game <A
HREF="http://www.ca-america.com/free-video-poker-game.html">http://www.ca-am
erica.com/free-video-poker-game.html</A>
<A
HREF="http://www.ca-america.com/free-texas-hold-em-online-play.html"> free
texas hold em online play </A> free texas hold em online play <A
HREF="http://www.ca-america.com/free-texas-hold-em-online-play.html">http://
www.ca-america.com/free-texas-hold-em-online-play.html</A>
world poker world
poker <A
HREF="http://www.ca-america.com/world-poker.html">http://www.ca-america.com/
world-poker.html</A>
<A
HREF="http://www.ca-america.com/poker-tables-for-sale.html"> poker tables
for sale </A> poker tables for sale <A
HREF="http://www.ca-america.com/poker-tables-for-sale.html">http://www.ca-am
erica.com/poker-tables-for-sale.html</A>
<A
HREF="http://www.ca-america.com/online-texas-hold-em.html"> online texas
hold em </A> online texas hold em <A
HREF="http://www.ca-america.com/online-texas-hold-em.html">http://www.ca-ame
rica.com/online-texas-hold-em.html</A>
<A
HREF="http://www.ca-america.com/official-poker-rules.html"> official poker
rules </A> official poker rules <A
HREF="http://www.ca-america.com/official-poker-rules.html">http://www.ca-ame
rica.com/official-poker-rules.html</A>
<A
HREF="http://www.ca-america.com/poker-accessories.html"> poker accessories
</A> poker accessories <A
HREF="http://www.ca-america.com/poker-accessories.html">http://www.ca-americ
a.com/poker-accessories.html</A>
<A
HREF="http://www.ca-america.com/how-to-build-a-poker-table.html"> how to
build a poker table </A> how to build a poker table <A
HREF="http://www.ca-america.com/how-to-build-a-poker-table.html">http://www.
ca-america.com/how-to-build-a-poker-table.html</A>
... </h1>
-----

I've since fixed my forms so that "spam keywords" are denied. The sender either has to reword their submission or forget it. It's worked very well since implementation 2 days ago.

Now, my question is this: What, if anything, do they stand to gain from this? As I mentioned earlier, I do not have public referral logs. And, lastly ... can this, in anyway affect MY rank?

thanks in advance.

[b2phat]

Can anyone give any suggestions? Please?

Thanks.

[mikmik]

I am getting tons of those referrals also, in my logs, and I got a couple of those emails (but not for a week or two now).

I am curious also.

[b2phat]

Originally Posted by mikmik

I am getting tons of those referrals also, in my logs, and I got a couple of those emails (but not for a week or two now).

I am curious also.

The newest version I got bypassed my "keyword blocks" because now it was all aimed at student loans, mortgage loans, payday advance, etc., etc.

Almost ALL of them are coming from the IP address 64.191.63.170.

I was able to track down one of his referral url's to a pharmacy site:

http://www.qualitygenerics.com/gener...ref=littlemike

Which one of the main url's http://www.ro7kalbe.com/ points to.

I just want to know what the point is for all the referrals from their sites to mine?

Thanks!

[mikmik]

It is funny - I am getting those financial types as well, but I never blocked the others.

I have also noticed some snooping and attempts to find php and cgi mail scripts. I get some 'mail/index.html' and stuff as well /cgi-bin/formmail.pl whch I have never had.

I am going to delete every form and script from my site (it is mostly just for experimenting anyways) and see what happens.

Thanks for tracking that IP and site down, b2phat.