Jump to content


Photo

HOSTS File Immunization against recent spam attack

hosts file computer security

  • Please log in to reply
3 replies to this topic

#1 James SilverWolf

James SilverWolf

    Researcher

  • Christians†
  • PipPipPipPip
  • 689 posts
  • Species:SilverWolf
  • Gender:MaleMale
  • LocationRogue Valley, Oregon

Posted 11 September 2016 - 08:59 PM

I took the liberty of generating a HOSTS file entry with the domains of the recent spammer links (Don't know what a HOSTS file is? check here: http://christianfurs...ile-on-windows/ ), feel free to add these to your respective HOSTS files:

 

127.0.0.1 www.esy.es

127.0.0.1 esy.es

127.0.0.1 www.890m.com

127.0.0.1 890m.com

127.0.0.1 www.96.lt

127.0.0.1 96.lt

127.0.0.1 www.pe.hu

127.0.0.1 pe.hu

127.0.0.1 www.hol.es

127.0.0.1 hol.es

127.0.0.1 www.16mb.com

127.0.0.1 16mb.com

 

Really, don't these jerks have anything better to do with their time?


Edited by James SilverWolf, 11 September 2016 - 09:12 PM.

  • Joshua Reynard likes this

Ephesians 5:11
Have nothing to do with the fruitless deeds of evil, but rather, Expose them.


#2 James SilverWolf

James SilverWolf

    Researcher

  • Christians†
  • PipPipPipPip
  • 689 posts
  • Species:SilverWolf
  • Gender:MaleMale
  • LocationRogue Valley, Oregon

Posted 12 September 2016 - 12:24 AM

Also, you may want to add those domains to the blocklist of any firewalls or anything you're using... forgot to mention that one. haha


Ephesians 5:11
Have nothing to do with the fruitless deeds of evil, but rather, Expose them.


#3 Joshua Reynard

Joshua Reynard

    Friendly Fox

  • Christians†
  • PipPipPip
  • 133 posts
  • Species:Red Fox
  • Gender:MaleMale
  • LocationNortheastern United States

Posted 12 September 2016 - 05:30 AM

Thanks for the info - I'll have to add these IP addresses to my HOSTS file.
 

Really, don't these jerks have anything better to do with their time?

I have a feeling that many of them literally have nothing better to do because they aren't even human - or any other species of living thing. I think they're some sort of robot. We just got a bunch of posts from spammers, and the usernames all fit a basic pattern (two capital letters followed by a random "surname"), so it looks to me like they were auto-generated by a script. These "users" each posted a long list of links that are supposedly download links to random PDFs. I'm guessing the names of these PDFs were gathered by a Web crawler. I haven't clicked these links, and I don't suggest clicking them yourself, because I'm not sure where they actually go. Although by the time you're reading this, a mod may have deleted all of those spam posts anyway.

 

This is all guesswork on my part, and if someone knows more about these types of spam programs than I do and would like to weigh in here, feel free to do so. But a quick Google search reveals that there are lots of programs out there, like XRumer, that can automatically register for forums to spam them. See this thread on Stack Exchange: http://webmasters.st...-spambots-work/. Apparently, spambots are often used for black-hat SEO techniques, although I don't know enough about that to say for sure if that's what we're seeing here.
 
But as for the programmers who spend their time creating these things? There are so many better things they could be using their time and skills for. There are lots of companies that do actual productive work that are looking for people with software skills, and there are also plenty of open-source projects to contribute to.


Edited by Joshua Reynard, 12 September 2016 - 05:35 AM.


#4 Norzman5

Norzman5

    Gamer

  • Administrators
  • 580 posts
  • Species:Eastern Dragon
  • Gender:MaleMale
  • LocationArizona

Posted 12 September 2016 - 03:38 PM

Today I added more entries to our spam filter that should help a little. Also went through and banned a ton of bot accounts and deleted unused accounts


  • JollyRancher and Joshua Reynard like this
Posted Image





Also tagged with one or more of these keywords: hosts file, computer security

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users