|
Pages: [1] 2 |  |
|
|
Author
|
Topic: Blackhatbootcamp.com REFERRER SPAMMING my Logfiles !!! (Read 3085 times)
|
Joined: Mar 2008
Posts: 194
   United States
|
 Jul 23, 2008, 02:42:33 PM | #1 |
WTF ??? Look some crazy hacker kid has spammed into my site's logfiles
66.225.211.249 - - [19/Jul/2008:23:41:50 -0400] "HEAD / HTTP/1.1" 200 - "http:// blackhatbootcamp.com" "MORE TRAFFIC! - MORE MONEY! - LEARN HOW!"
66.225.211.249 - - [19/Jul/2008:23:41:50 -0400] "HEAD / HTTP/1.1" 200 - "http:// blackhatbootcamp.com" "MORE TRAFFIC! - MORE MONEY! - LEARN HOW!"
66.225.211.249 - - [19/Jul/2008:23:41:50 -0400] "HEAD / HTTP/1.1" 200 - "http:// blackhatbootcamp.com" "MORE TRAFFIC! - MORE MONEY! - LEARN HOW!"
66.225.211.249 - - [19/Jul/2008:23:41:50 -0400] "HEAD / HTTP/1.1" 200 - "http:// blackhatbootcamp.com" "MORE TRAFFIC! - MORE MONEY! - LEARN HOW!"
66.225.211.249 - - [19/Jul/2008:23:41:50 -0400] "HEAD / HTTP/1.1" 200 - "http:// blackhatbootcamp.com" "MORE TRAFFIC! - MORE MONEY! - LEARN HOW!"
66.225.211.249 - - [19/Jul/2008:23:41:51 -0400] "HEAD / HTTP/1.1" 200 - "http:// blackhatbootcamp.com" "MORE TRAFFIC! - MORE MONEY! - LEARN HOW!"
66.225.211.249 - - [19/Jul/2008:23:41:50 -0400] "HEAD / HTTP/1.1" 200 - "http:// blackhatbootcamp.com" "MORE TRAFFIC! - MORE MONEY! - LEARN HOW!"
66.225.211.249 - - [19/Jul/2008:23:41:51 -0400] "HEAD / HTTP/1.1" 200 - "http:// blackhatbootcamp.com" "MORE TRAFFIC! - MORE MONEY! - LEARN HOW!"
66.225.211.249 - - [19/Jul/2008:23:41:51 -0400] "HEAD / HTTP/1.1" 200 - "http:// blackhatbootcamp.com" "MORE TRAFFIC! - MORE MONEY! - LEARN HOW!"
66.225.211.249 - - [19/Jul/2008:23:41:52 -0400] "HEAD / HTTP/1.1" 200 - "http:// blackhatbootcamp.com" "MORE TRAFFIC! - MORE MONEY! - LEARN HOW!"
66.225.211.249 - - [19/Jul/2008:23:41:55 -0400] "HEAD / HTTP/1.1" 200 - "http:// blackhatbootcamp.com" "MORE TRAFFIC! - MORE MONEY! - LEARN HOW!"
66.225.211.249 - - [19/Jul/2008:23:41:55 -0400] "HEAD / HTTP/1.1" 200 - "http:// blackhatbootcamp.com" "MORE TRAFFIC! - MORE MONEY! - LEARN HOW!"
nslookup on 66.225.211.249
Non-authoritative answer:
249.211.225.66.in-addr.arpa name = unknown.ord.scnet.net.
Authoritative answers can be found from:
211.225.66.in-addr.arpa nameserver = ns1.scservers.com.
211.225.66.in-addr.arpa nameserver = ns2.scservers.com.
ns1.scservers.com internet address = 66.225.250.250
ns2.scservers.com internet address = 205.234.133.254
IP Whois on 66.225.211.249
OrgName: Server Central Network
OrgID: SCN-18
Address: 209 W. Jackson Blvd.
Address: Suite 700
City: Chicago
StateProv: IL
PostalCode: 60606
Country: US
NetRange: 66.225.192.0 - 66.225.255.255
CIDR: 66.225.192.0/18
NetName: SCN-2
NetHandle: NET-66-225-192-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.SCSERVERS.COM
NameServer: NS2.SCSERVERS.COM
Comment:
RegDate: 2003-06-10
Updated: 2004-04-29
RTechHandle: JL1890-ARIN
RTechName: Server Central, Jordan
RTechPhone: +1-312-829-1111
RTechEmail: scsupport@servercentral.net
OrgAbuseHandle: ABUSE1669-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-312-829-1111
OrgAbuseEmail: abuse@servercentral.net
OrgNOCHandle: NETWO1779-ARIN
OrgNOCName: Network Operations
OrgNOCPhone: +1-312-829-1111
OrgNOCEmail: support@servercentral.net
OrgTechHandle: NETWO1779-ARIN
OrgTechName: Network Operations
OrgTechPhone: +1-312-829-1111
OrgTechEmail: support@servercentral.net
# ARIN WHOIS database, last updated 2008-07-22 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
OrgName: HostForWeb Inc.
OrgID: HOSTF-1
Address: PO BOX 1164
City: Chicago
StateProv: IL
PostalCode: 60690
Country: US
NetRange: 66.225.211.0 - 66.225.221.255
CIDR: 66.225.211.0/24, 66.225.212.0/22, 66.225.216.0/22, 66.225.220.0/23
NetName: HOSTFORWEB-1
NetHandle: NET-66-225-211-0-1
Parent: NET-66-225-192-0-1
NetType: Reallocated
Comment:
RegDate: 2004-02-23
Updated: 2004-02-23
OrgTechHandle: ADMIN240-ARIN
OrgTechName: Administrator
OrgTechPhone: +1-312-343-4678
OrgTechEmail: alex.k@hostforweb.com
# ARIN WHOIS database, last updated 2008-07-22 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database. |
|
|
|
| |
|
|
|
Joined: Mar 2008
Posts: 194
United States
|
|
Jul 24, 2008, 02:33:05 PM | #3 |
He's not a kid !!! He's some perverted old man with erectile dysfunction who plays with guns and sells PHILIPPINO GIRLS online !!!!
I did some digging on this guy and this is what I came up with. Be warned, it's some scary stuff.
-------------------- more information on black hat spammer Bompa ------------------
Here he is posting in some cheesy forum and he has his picture in his Avatar. LOL, he's not a kid, he's an old man.
http://www.top25web.com/bbs/i-caught-a-spammer-today-vt199.html
He has two links in his signature
http:// port80.syndk8.com/
http:// linkbaitworld.com/
Whois for linkbaitworld.com
Another phony whois registration. Where is NorthKato, S ?? 01532 zip code is Northborough, MA. Fake phone number and name. Notice, it's Namecheap, same registrar as blackhatbootcamp.com
The site has a link to
http:// noobwords.com/
Which is another site owned by guess who ??? Bompa !!!
Funny, the ties to Massachusettes, because here's Bompa in 2003 on a travel forum
http://www.aardvarktravel.net/gti-home-exchange-forum/viewtopic.php?p=6193
Guess where his profile says he's from ? aww shucks, you guessed it's Massachusettes... and where he want's to go ?? Let him tell you...
Hello Everyone,
I'm Bompa and I just joined this forum. I'll be honest with you upfront. I joined cuz I'm looking for backlinks for my site heh.
However, I am also looking for travel and accommodation information regarding the major islands of the Philippines as my web site has members that visit their soon to be brides in those areas.
Also, from time to time, a member returns from a trip to the Philippines and provides me with a bunch of info. And finally, the lady members of my site, (about 100), whom are mostly university grads, also provide me with a wealth of information about their country.
I don't think my site qualifies for submission to aardvarktravel.net directory especially since I read that they are receiving 100 submission/day, nice job.
So, here I am.
Here he gives us a link to his Philippine mail order bride service !!!!!!!! (real great, selling poor third world girls to filthy old men)
http:// filipina-sweethearts.com/
Look who pops up in the Whois info.. Our old buddy, David Benware, same registrant as blackhatbootcamp.com before old Bompa added whois privacy to the domain....
Registration Service Provided By: NameCheap.com Contact: support@NameCheap.comVisit: http://www.namecheap.com/Domain name: filipina-sweethearts.com Administrative Contact: na David Benware ( bompa2000@yahoo.com) +1.5082222 Fax: +1.5555555555 37 Crestwood Drive Northborough, MA 01532 US Name Servers: ns1-floyd.nswebhost.com ns2-floyd.nswebhost.com Creation date: 16 May 2003 03:56:50 Expiration date: 16 May 2009 03:56:50
Here is Bompa again at some lame affiliate forum
http://www.affearners.com/forum/profiles/bompa-u14.html;sa,showPosts;start,30
The link in his signature says "Blackhat SEO Boot Camp for Noobs." and links to
http:// www.affearners.com/
The forum is owned by some black hat named Earl Grey but the whois says otherwise :
Administrative Contact: Simon Johnstone 50 clitheroes lane preston, lancashire pr4 1se United Kingdom paul@crea8.co.uk+44 07740376358
More phone domain registrations. Going to have a field day reporting these.
Look who's been using Digg to submit threads from the last forum mentioned.. It's Bompa again...
http://digg.com/users/Bompa
Now we have another picture of the filthy old troll who is selling Philipino girls - Look how ugly this man is !!!
things take a more frightening turn here
http://www.northeastshooters.com/vbulletin/showthread.php?t=9398
Here's Bompa again back in Massachusettes but this time he's talking about going to Gloucester, MA to buy a Glock 17 handgun. Hmmm. What does this guy need a Glock 17 for ?? To kidnap girls in Manilla and sell them online ??? 
Maybe it's for his erectile dysfunction because he sure knows a lot about the subject of Viagra
http://buy-viagra.syndk8.net/viagra-study/category/viagra-erectile-dysfunction
WTF??? |
|
|
|
|
|
|
Joined: Jun 2008
Posts: 37
Six Feet Under and Rising
  Canada
|
|
Jul 24, 2008, 04:20:28 PM | #5 |
OMG !!! looks like grandpa got
Funniest thread I've ever seen !!!! |
|
|
|
|
Joined: Jan 2006
Posts: 6175
Go Phillies !!
United States
|
|
Jul 24, 2008, 04:35:11 PM | #6 |
I'm still angry at this guy because today he comment spam bombed my blog with over 230 trackbacks from his splog network. They're all coming from the same domains where he's set up the splogs, so I just added all these domains to my comment blacklist...
jatha.no
pao.to
kutiq.com
tasdac.org
myboatspot.com
pornblink.com
mylifeisblog.com
partsconnect.com
mother-blog.com
iblogtoo.com
stalberger.org
kiswrites.org
I'd recommend any Wordpress users add these domains to their comment blacklists because grandpa has some spam bot that automates the creation of these splog posts and more than likely he already has or is planning to comment spam other blogs using this network.
I'm pretty pissed that he's using the same article criticizing my post yesterday and linking to my sites from these bad neighborhoods but I just sent a report to Google through my webmasters tools, so hopefully grandpa's Google bombing won't hurt my rankings or SERPS.
Look at one of the slogs this geezer is linking to my article from (all his splogs are the same thing)...
http://jatha.no/wmosley2/
UUUGH... What a nasty site. It's all about penis enlargement and other sick twisted crap like that. I guess beside needing Viagra, grandpa Bompa needs a bigger penis. Little does he know he's already one of the biggest dicks on the internet. Jeez, I thought this was definitely a geek kid but finding out it's some sick old perverted man is bewildering. |
|
Latest Blog Post :
Insights Marketing With Google Insights for Search
|
|
|
Joined: Mar 2008
Posts: 194
United States
|
|
Jul 24, 2008, 04:44:26 PM | #7 |
|
|
|
|
Joined: Jun 2007
Posts: 168
 Thailand
|
|
Aug 12, 2008, 10:30:31 PM | #8 |
Who's Bompa?
Global Moderator on Syndk8.net,
Global Moderator on Affearners.com,
Admin on perkiset.org
Six years SEO experience including three years BH
60yo grampy making three year as black hat guy  |
|
|
|
|
Joined: Oct 2008
Posts: 2
|
|
Oct 06, 2008, 07:28:05 PM | #9 |
Lets first start off with a little education before you guys start dipping this thread in kerosene.
First lets define "Hacker".
# a programmer who breaks into computer systems in order to steal or change or destroy information as a form of cyber-terrorism.
# a programmer for whom computing is its own reward; may enjoy the challenge of breaking into other computers but does no harm; "true hackers subscribe to a code of ethics and look down upon crackers.
That's straight from Princeton.
Now lets look up "Cracker".
# a programmer who cracks (gains unauthorized access to) computers, typically to do malicious things; "crackers are often mistakenly called hackers"
Now clearly by those standards, nothing was broken and nothing was gained. Your log file gained a few entries, big deal. If your concerned about your log files looking like that and if you were pretty knowledgeable with server environments, you would know that there are very easy ways to circumvent situations like this from happening. Clearly maybe we should brush up a bit. However you could be using Cpanel or Windows Server, and that could be your problem right there, behind the Flux Capacitor.
Now on to Mr/Mrs "ronfrank"s post.
Lets look up "Slander" before we begin.
# words falsely spoken that damage the reputation of another
# aspersion: an abusive attack on a person's character or good name
# defame: charge falsely or with malicious intent; attack the good name and reputation of someone; "The journalists have defamed me!" "The article in the paper sullied my reputation"
You nicely open up with big red letters that read "He's not a kid !!! He's some perverted old man with erectile dysfunction who plays with guns and sells PHILIPPINO GIRLS online !!!!"
Now as humorous as this sounds, and its almost as funny as something you will hear by 13 year old kids on X-box Live, this my friend is illegal it is known to many court systems as "Defamation of Character". But it gets better, you go ahead and show without reasonable doubt that you have intent to find who this individual is, and who his online identity is, and slander his name some more. Even more so I can be considered libel if you broadcast it, or it becomes publicized enough. You my friend are pathetic.
You all need to learn what Spam tools are for. CAPTCHA's are in places and options for a reason. There are plenty of databases out there with millions of blog farm IP's to block.
Before you blame others, and call them out on allegations which you know nothing about any of the circumstances... Think.
If you have an issue, there are less complicated ways to get people to stop. It starts with their IP address and a phone call to the IP Block provider. Not post a bunch of garbage on a message board and turn it into a flame pit.
Think About it.
|
|
|
|
|
| |
|
|
Pages: [1] 2
|
|
|
 |
before he trade you to the gypsey caravan for some viagra 
