?

Log in

No account? Create an account

Look Back | Look Forward

Massive spam attack from citysex.com

In the last week my journal has been inundated with spam comments from multiple bot accounts. The spam message is always the same:

Hey This is hard for me because I have never done anything like this.. but I have a huge crush on you. I have never been able to tell you for reasons which you would quickly identify as obvious if you knew who this was. I'm really attracted to you and I think you would be wanting to get with *Read FULL Card Here* http://hornylove.unudulmaz.bork [link obfuscated]

The URL redirects to a porn site being run by citysex.com - the WHOIS info is below.

[Querying whois.verisign-grs.com]
[whois.verisign-grs.com]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
   Domain Name: CITYSEX.COM
   Registrar: ENOM, INC.
   Whois Server: whois.enom.com
   Referral URL: http://www.enom.com
   Name Server: DNS5.TNCSERVERS.NET
   Name Server: DNS6.TNCSERVERS.NET
   Status: clientTransferProhibited
   Updated Date: 08-dec-2011
   Creation Date: 06-jan-1999
   Expiration Date: 06-jan-2013



Today's bot accounts were sundzregmemi, owenoo9, wenawe, and dopentingvil. The bots are regularly reported to LiveJournal, and they seem to be working to delete them quickly, but the flood continues.

Things like this are more an annoyance than anything else - I've reported the abuse to Enom, not really hoping that they can do anything about it, or care to, but I've done all I can.

I just wondered if anyone on my F-list has been plagued by similar messages?



EDIT: Based on the consensus expressed in the commentary below, I changed my comment status to "friends only," which stopped the spam cold. I don't like having to do this, but it saves me the constant cleanup.

Tags:



Support Wind Power

respective-eponymous

Comments

fearciuil
Nov. 11th, 2012 10:22 pm (UTC)
Yes. Mostly through comms, since most of my journal is f-locked.
ccdesan
Nov. 11th, 2012 10:31 pm (UTC)
Thanks. I may have to go that route until the attack is deflected.
makovette
Nov. 12th, 2012 12:44 am (UTC)
Exactly my case as well. The vast majority of my posts are locked, but the bots found the two communities I run and spammed them up a little.

I deleted the posts and reported them as spam, not much else we can do really.

Mako
marmoe
Nov. 11th, 2012 10:54 pm (UTC)
One, in reply to a post I made years ago to a LJ community. Weird. Reported it as spam, got hit by nothing else so far (Keeping my fingers crossed).
makovette
Nov. 12th, 2012 12:45 am (UTC)
Yeah dittos. I marked as spam and deleted them. Given my personal LJ is locked, I've been spared the worst of it.

Mako

Edited at 2012-11-12 12:46 am (UTC)
ccdesan
Nov. 12th, 2012 12:46 pm (UTC)
As soon as I changed my comment status to "Friends only," the onslaught stopped. That seems to be the best defense.
stevenroy
Nov. 12th, 2012 08:23 am (UTC)
I got one of those as well, but just one. Promptly hit the "yup, it's spam" button, of course.
thefoxaroo
Nov. 12th, 2012 10:24 am (UTC)
Hasn't happened to me even once, but I switched to secured posts years ago.
carlfoxmarten
Nov. 12th, 2012 09:42 pm (UTC)
It's weird. I'm not on LJ very often, but I check my email fairly regularly, so when I do get one of those spam messages, they're usually gone by the time I log in to check...

The other odd thing is that they've been hitting up my older posts, so it's a bit of a trip down memory lane for me.

Profile

Fortunata
ccdesan
The Old Wolf
Website

Latest Month

February 2018
S M T W T F S
    123
45678910
11121314151617
18192021222324
25262728   

Tags

Powered by LiveJournal.com