「迷惑」タグアーカイブ

wordpress: seo plugin!から投函は気おつけましょう。

この投函に関しては、削除しましょう。
このIPは、denyでなく、reject扱いですね。
永久捨て。
SnapCrab_NoName_2016-3-22_1-17-37_No-00

IP
45.57.163.107

発信元は、ワシントン
逆引きができないので、対策固定IPでしょうか。

スパム情報は
19-Mar-16 19:13 45.57.163.107 seo plugin
16-Mar-16 12:42 45.57.163.107 seo
15-Mar-16 00:49 45.57.163.107seo plugin
です。

Hello Web Admin, I noticed that your On-Page SEO is is missing a few factors, for one you do not use all three H tags in your post, also I notice that you are not using bold or italics properly in your SEO optimization. On-Page SEO means more now than ever since the new Google update: Panda. No longer are backlinks and simply pinging or sending out a RSS feed the key to getting Google PageRank or Alexa Rankings, You now NEED On-Page SEO. So what is g

内容中略。

問題は最後にこれを試してみてよです。
アリゾナローカルストレージでしょう。発信、提供がまずバラバラ。Seoのものと違うので、スパム検知されました。
http://www.SEORankingLinks.com/
<a href=”http://www.SEORankingLinks.com” rel=”nofollow”>Seo Plugin</a>

IPv4 address:
SEORankingLinks.com
50.63.202.28
IPv4 expanded:

050.063.202.028
IPv4 decimal:

843041308
Internet service provider:
GoDaddy.com, LLC
Organization:
GoDaddy.com, LLC
Country name:
United States
Country ISO alpha-2 code:
US
State:
Arizona
City:
Scottsdale
DMA code:
753
Timezone:
America/Phoenix
Longitude:
-111.8906
Latitude:
33.6119
WHOIS data:
NetRange: 50.62.0.0 – 50.63.255.255
CIDR: 50.62.0.0/15
NetName: GO-DADDY-COM-LLC
NetHandle: NET-50-62-0-0-1
Parent: NET50 (NET-50-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS26496
Organization: GoDaddy.com, LLC (GODAD)
RegDate: 2011-02-02
Updated: 2014-02-25
Comment: Please send abuse complaints to abuse@godaddy.com
Ref: http://whois.arin.net/rest/net/NET-50-62-0-0-1

OrgName: GoDaddy.com, LLC
OrgId: GODAD
Address: 14455 N Hayden Road
Address: Suite 226
City: Scottsdale
StateProv: AZ
PostalCode: 85260
Country: US
RegDate: 2007-06-01
Updated: 2014-09-10
Comment: Please send abuse complaints to abuse@godaddy.com
Ref: http://whois.arin.net/rest/org/GODAD

OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-480-624-2505
OrgAbuseEmail: abuse@godaddy.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE51-ARIN

OrgNOCHandle: NOC124-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-480-505-8809
OrgNOCEmail: noc@godaddy.com
OrgNOCRef: http://whois.arin.net/rest/poc/NOC124-ARIN

OrgTechHandle: NOC124-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-480-505-8809
OrgTechEmail: noc@godaddy.com
OrgTechRef: http://whois.arin.net/rest/poc/NOC124-ARIN

RTechHandle: NOC124-ARIN
RTechName: Network Operations Center
RTechPhone: +1-480-505-8809
RTechEmail: noc@godaddy.com
RTechRef: http://whois.arin.net/rest/poc/NOC124-ARIN

RNOCHandle: NOC124-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-480-505-8809
RNOCEmail: noc@godaddy.com
RNOCRef: http://whois.arin.net/rest/poc/NOC124-ARIN

RAbuseHandle: ABUSE51-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-480-624-2505
RAbuseEmail: abuse@godaddy.com
RAbuseRef: http://whois.arin.net/rest/poc/ABUSE51-ARIN
WHOIS last updated:
1 year, 3 months ago on December 5, 2014, 12:01 am GMT Time
Reverse DNS host:
secureserver.net
Reverse DNS pointer:
ip-50-63-202-28.ip.secureserver.net
Reverse DNS in-addr.arpa:
28.202.63.50.in-addr.arpa domain name pointer ip-50-63-202-28.ip.secureserver.net.
Reverse DNS last updated:
1 day, 21 hours ago on March 19, 2016, 7:04 pm GMT Time
Reverse DNS next update:
in 5 days, 2 hours on March 19, 2016, 7:04 pm GMT Time
Bot/spider
No
Record views
1174

“請預覽附件见内容”の件名メールは、迷惑メールです。

差出人 java_now@163.com
件名 香港力基集团
内容
請預覽附件见内容
添付

中継
IP Address 182.18.164.70
Host Name ns2.vtacexports.com
Country India
Network(ASN) CtrlS
IP Prefix 182.18.164.1 – 182.18.166.94

IP Address 39.1.42.168
Host Name 39.1.42.168
Country Taiwan
Network(ASN) SONET-NET
IP Prefix 39.1.0.0 – 39.1.255.255
Description Taipei Taiwan 115

ソース
From – Wed Mar 09 14:34:19 2016
X-Account-Key: account2
X-UIDL: 00012e0f46de9b9e
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <noooo@vtacexports.com>
X-Original-To:@
Delivered-To:@
Received: from vestrics.com (ns2.vtacexports.com [182.18.164.70])
by mail. (Postfix) with ESMTP id 43F8F34C8D22
for <@>; Wed, 9 Mar 2016 12:+0900 (JST)
Received: from hlpsw (unknown [39.1.42.168])
by vestrics.com (Postfix) with ESMTP id 4A4EA68255C
for <@>; Wed, 9 Mar 2016 09 +0530 (IST)
From: =?GB2312?B?y7w=?= <java_now@163.com>
To: “” <@>
Subject: =?GB2312?B?z+O428Gmu/m8r83F?=
Date: Wed, 9 Mar 2016 11: +0800
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=yacefi473_5830_247416378.458443″
X-Priority: 3
Message-Id: <20160309034947.43F8F34C8D22@mail.>

This is a multi-part message in MIME format.

——=yacefi473_5830_247416378.458443
Content-Type: text/plain;
charset=”GB2312″
Content-Transfer-Encoding: base64

1YjuQdNbuL28/rz7xNrI3Q==

——=yacefi473_5830_247416378.458443
Content-Type: image/jpeg;
name=”=?GB2312?B?yb22q7uq0Mu8r83FLmpwZw==?=”
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename=”=?GB2312?B?yb22q7uq0Mu8r83FLmpwZw==?=”
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途中略

Private messagesの件名メールは、クラッシュメールです。

差出人
ecdl@abswyda.cz
件名
Private messages
返信先
wongshiu_ki@163.com
宛先

内容

Dear Friend,
I am Mr. Wong Shiu Ki, an Account Officer with the International Bank of Taipei
and I have a very sensitive and confidential brief for you from international
bank of Taipei, Taiwan. I am requesting for your partnership in re-profiling
funds I will give the details, but in summary, the funds are coming via Bank of
Taipei Taiwan.
This is a legitimate transaction; you will be paid 30% for your Management
Fees”. If you are interested, please write back and provide me with your
confidential telephone and fax numbers, Country and I will provide further
details and instructions. Please keep this confidential, as we cant afford more
political problems. Finally, please note that this must be concluded within two
weeks. Please write back promptly to my private email: Please do not reply if
you are not interested.
Please if you are not interested delete from your mailbox.
I look forward to it.
Regards,
Mr Wong Shiu Ki.

内容には、bmpファイルの添付ですが、Microsoft outlook 系のメールソフトはクラッシュするか、添付に存在ですね。

続きを読む Private messagesの件名メールは、クラッシュメールです。