After this conversation, I decided to register Akismet. It appears to work astonishingly well – it just made the over 300 spam messages I had to wade through just … disappear.
My web site is receiving crazy amounts of spam from machines registered to wowrack.com
Djan Iffan has joined the chat.
Djan Iffan: Hi Steve,
Welcome to wowrack, my name is Djan Iffan, may I help you?
Welcome to wowrack, my name is Djan Iffan, may I help you?
Steve: Hello, is 74.121.190.77 yours?
Steve: That and 74.121.190.172 are leaving insane amounts of comment spam on my wordpress blog
Steve: I need you to make it stop please
Djan Iffan: Please wait a moment we shall investigate further and back to you shortly.
Steve: OK I will hold on
Djan Iffan: Thank you for your willingness to wait
Can I have much detail information about this?
what is your blog?
Can I have much detail information about this?
what is your blog?
Steve: juggernautmusic.com
Steve: I have sent an email to abuse@wowrack.com
Steve: I am getting about 1 spam every 5 minutes
Steve: It has been happening for a week or two, but seems to have really become worse
Djan Iffan: Did you activate your akismet plugin?
Steve: Yes but I will double check
Djan Iffan: But in mean while, I have warn this reseller account
Steve: (still it is a crazy amount coming from your machines – I can normally deal with the 3-4 spam messages I see a day, but I’m getting over a hundred daily from your customer)
Steve: I feel you need to suspend, not warn,
Steve: ,warning will not stop this assault
Djan Iffan: Please sent a proper complain regarding this, because we can not simply take action without proper reason.
Steve: OK, is my email to your “abuse” address (including the actual spam content) sufficient?
Steve: Or what constitutes a “proper complaint”
Djan Iffan: this is one of our reseller client, sent the email to abuse@serverstadium.com
Steve: Well, OK … I have done so, but I am not sure about the ethics behind your inaction. I am likely one of hundreds of victims from your machine at this very moment.
Steve: Good day.
Djan Iffan: Thank you for contacting us, if you require further assistance, please contact us anytime.
After posting this I also decided to ban the offending IP addresses … in less than 20 minutes my server denied over 40 hits from these douchebags.
As of now I still haven’t received a response from wowrack or serverstadium, and really ugly comment spam continues to flow in from IP addresses starting with 74.121.190. Spammers take note: this the provider you want!
Legitimate web server users, watch out for wowrack and serverstadium – their IPs are about to find themselves on all sorts of block lists. I am about to start submitting the addresses to antispam services all over the place, and I have already blocked 74.121.190.* from accessing this site.
STILL no response. And as of today they are STILL knockin.
OK, this is messed up. Wowrack / Serverstadium ‘s box keeps accessing my site to this date. I think it is time for more drastic measures. If only I wasn’t going through such crap in other areas of my life I would pursue this much more vigilantly … but rest assured they have not seen the end.
Here’s today’s error log:
[Thu Nov 22 21:52:48 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/index.php, referer: http://juggernautmusic.com/[Thu Nov 22 21:52:48 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/, referer: http://juggernautmusic.com/
[Thu Nov 22 21:52:35 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/index.php, referer: http://juggernautmusic.com/
[Thu Nov 22 21:52:35 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/, referer: http://juggernautmusic.com/
[Thu Nov 22 21:52:31 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/index.php, referer: http://juggernautmusic.com/2012/07/news/comment-page-1/#comment-807
[Thu Nov 22 21:52:31 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/, referer: http://juggernautmusic.com/2012/07/news/comment-page-1/#comment-807
[Thu Nov 22 21:52:11 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/index.php, referer: http://juggernautmusic.com/2012/07/news/comment-page-1/#comment-807
[Thu Nov 22 21:52:11 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/2012, referer: http://juggernautmusic.com/2012/07/news/comment-page-1/#comment-807
[Thu Nov 22 21:12:15 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/index.php, referer: http://juggernautmusic.com/
[Thu Nov 22 21:12:15 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/, referer: http://juggernautmusic.com/
[Thu Nov 22 21:12:11 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/index.php, referer: http://juggernautmusic.com/
[Thu Nov 22 21:12:11 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/, referer: http://juggernautmusic.com/
[Thu Nov 22 21:12:11 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/index.php, referer: http://juggernautmusic.com/2012/07/news/comment-page-1/#comment-807
[Thu Nov 22 21:12:11 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/, referer: http://juggernautmusic.com/2012/07/news/comment-page-1/#comment-807
[Thu Nov 22 21:11:55 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/index.php, referer: http://juggernautmusic.com/2012/07/news/comment-page-1/#comment-807
[Thu Nov 22 21:11:55 2012] [error] [client 74.121.190.74] client denied by server configuration: /home/juggerna/public_html/2012, referer: http://juggernautmusic.com/2012/07/news/comment-page-1/#comment-807
[Thu Nov 22 21:06:32 2012] [error] [client 74.121.190.172] client denied by server configuration: /home/juggerna/public_html/index.php, referer: http://juggernautmusic.com/
[Thu Nov 22 21:06:32 2012] [error] [client 74.121.190.172] client denied by server configuration: /home/juggerna/public_html/, referer: http://juggernautmusic.com/
[Thu Nov 22 21:06:31 2012] [error] [client 74.121.190.172] client denied by server configuration: /home/juggerna/public_html/index.php, referer: http://juggernautmusic.com/
[Thu Nov 22 21:06:31 2012] [error] [client 74.121.190.172] client denied by server configuration: /home/juggerna/public_html/, referer: http://juggernautmusic.com/
[Thu Nov 22 21:06:31 2012] [error] [client 74.121.190.172] client denied by server configuration: /home/juggerna/public_html/index.php, referer: http://juggernautmusic.com/2012/07/news/comment-page-1/#comment-807
[Thu Nov 22 21:06:31 2012] [error] [client 74.121.190.172] client denied by server configuration: /home/juggerna/public_html/, referer: http://juggernautmusic.com/2012/07/news/comment-page-1/#comment-807
[Thu Nov 22 21:06:28 2012] [error] [client 74.121.190.172] client denied by server configuration: /home/juggerna/public_html/index.php, referer: http://juggernautmusic.com/2012/07/news/comment-page-1/#comment-807
[Thu Nov 22 21:06:28 2012] [error] [client 74.121.190.172] client denied by server configuration: /home/juggerna/public_html/2012, referer: http://juggernautmusic.com/2012/07/news/comment-page-1/#comment-807
lol – found this blog by searching “wowrack spam”. I too am receiving hundreds of fake user registrations per day from wowrack IP addresses. They do not respond to emails going to their “abuse@wowrack.com” address. The crazy thing is that I don’t allow comments on my site that are not approved first, yet I don’t see the bot trying to post anything, just hundreds of fake user accounts – most of them actually verified via the email validation, so the email addresses are valid and monitored by the bot!
When I run an SQL over my logs and see big batches of form submissions for an email, I run a reverse IP lookup. Somewhere in the listing you will see either an IP range or a “classless” notation like 216.244.64.0/19 (wowrack btw). Most hosting tools will let you block entire ranges using the classless notation (oddly appropriate for wowrack). I have just taken to blocking the entire ranges that trace back to wowrack since my customers rarely come from hosting companies, anyway. I have also submitted wowrack IP ranges to SORBS / DNSBL with log evidence and I encourage others to do so, as well.
Thanks for sharing. I knew I wasn’t alone.
I just filed a BBB complaint against Wowrack for failing to respond to a well documented abuse ticket. I found the same abusive traffic pattern (complete with random user agent strings) from a half dozen Wowrack IP addresses. I documented it well and all I got back was ‘we’ll tell our customer’. Bzzzt. Fail. Wowrack was not in the BBB database, so they’ll get a new joy: responding to a toothless letter sent on paper by the Western Washington BBB.
I didn’t report the abuse to wowrack.com yet, but I was noticing all their IP addresses kept getting a temporary block out for trying to access protected files on my site. I just completely blocked the IP addresses today, so hopefully that stops or at least slows it down a little.
I find it really interesting the reports continue to trickle in about abusive internet traffic from this provider. Perhaps it is Wowrack themselves who are the spammers, and their “customers” are actually the people who want to sell products.
Certainly no ethical ISP would continue to allow this type of traffic. If I were to start using the servers that power juggernautmusic.com to generate spam, I suspect the provider would suspend me immediately. They would probably give me an opportunity to provide an explanation before deleting my account entirely.
I get the feeling that many of these companies just don’t give a hoot as long as their bottom line is profitable. The do not want to be bothered with complaints from consumers. I am having issues with Wowrack too. My most recent actions (or should I say inaction) was with a large company called Media Temple that could care less about customers and potential ones. I wrote about my experience.
http://www.chelliesworld.com/great-customer-service-leaves-a-lasting-impression/3777/
At the same time my email was attacked a spammer left an entry on my Bravenet guestbook (Pestbook?). IThthere were a number of IP addresses used by this spammer. At the same time the last entry was being made he was apparently logged onto my web site where I have Clustr software which showed the offender was sending from Brailia, Rumania.
A couple years later and they’re still ignoring complaints. I just noticed that they bounce back spamcop reports and refuse to take them.
Block them is not enough !
They are hungry for emails, and we should indulge them hunger!
Redirect their request with header(“Location:… , for a page with thousands of fake and random emails, and this will leave them really crazy!
I totally agree with you – if only I had the time …
very nice
I started getting this about two moths ago on my forum. They seem to be able to bypass htaccess as well as IP and Server blocks. I sent a generic CnD, to no avail. The odd thing is the company is supposedly in WA, but even when you call them they are not from the US. Maybe a few law suits and complaints to authorities will make them cut the crap.