Bad events - forum spam from IP...

Viruses and worms
1

Full bogons…

See: http://urlquery.net/report.php?id=1491251332546
Flagged here: http://www.projecthoneypot.org/list_of_ips.php → http://www.projecthoneypot.org/ip_5.188.211.72
See: https://stopforumspam.com/ipcheck/5.188.211.72
Reported as spammer IP: https://cleantalk.org/blacklists/5.188.211.72
On blocklist: https://www.blocklist.de/en/view.html?ip=5.188.211.72&page=1651
See: https://myip.ms/view/blacklist/96260936/Blacklist_IP_5.188.211.72

Excessive server info proliferation detected - Potentially risky methods: TRACE Apache httpd 2.2.15 ((CentOS))
Apache HTTP Server Test Page powered by CentOS Netcraft risk status 9 red out of 10.

polonus

2

Not sure who this applies to the forums as we have no members with that IP.

3

DavidR,

This is not particularly meant to deal with the problem of spam (content spam) at these here forums.
I would certainly not go into details about that here, and one could easily understand why.

The analysis is just a way to demonstrate how one could check a particular flagged IP against such abuse listings.
The example is just completely random and recent. So the “reported” in there should NOT be read as ‘reported here’.

This does not mean to say that eventual spammers of avast support forums here could not be dealt with through similar methods of checking where they came flagged, mostly over rather recent periods. It is just to explain the methodology what I posted here.

polonus