What is Digg?Sponsored by Sony Pictures
Adam Lambert sings the 2012 theme song, “Time for Miracles” view!
whowillsurvive2012.com - Watch the Adam Lambert music video for the 2012 theme song. See 2012, in theaters Nov 13
34 Comments
- inactive, on 12/15/2007, -0/+2I too got a visit from Idetrorce today. From similar stuff I've seen on my blog in the past it's a kind of a marker for spam bots to pay you a visit in the future. Through the year you'll see lots of other spam coming to this specific post if you leave this comment in. I personally marked it as spam and deleted it.
- madgravity, on 12/15/2007, -0/+2I got this reply today to a post I made long ago:
"Subject: Idetrorce
very interesting, but I don't agree with you
Idetrorce"
And reread my post and couldn't find anything for this person to disagree with. So I did a search and found other sites that this person "or bot" replied the same thing to. Funny that this would appear on Dig so soon because most of the replies just started a few hours ago on Dec 15 2007. - theangryangel, on 12/16/2007, -0/+2Nice digging (no pun intended) jb108.
- JoLynnBraley, on 04/13/2009, -0/+2Thanks for the info everyone, I was suspicious of this comment and googled "Idetrorce" and ended up here. I marked the comment as spam.
BTW, the link to the "Youtube" video above (it's been buried) by user dilanredolas redirected to another site (not Youtube) which required an activex download....my antivirus picked up that it contains a Trojan horse. Note that that user has only started leaving comments within the last few hours and only to post a link to the "video".
Hope this helps! - sinfree, on 12/16/2007, -0/+2It's not YouTube... it's spam.
- theangryangel, on 12/16/2007, -0/+2It went into my install of s9y, although got marked as possible spam.
- springdew, on 12/16/2007, -0/+1213.222.184.112 on http://springdew.livejournal.com/880421.html?threa ... resolves to catv-d5deb870.catv.broadband.hu but I expect we'll see a wide range. Smells like compromised boxes. May be a test for something malicious later. Or may be to drum up buzz for the word - I found three profiles for the username.
- Tomgupper, on 12/16/2007, -0/+1Got me today.
Oh no! - tlrobinson, on 12/16/2007, -0/+1Strange... I got one today too...
Could it be a spammer doing reconnaissance for a massive impending attack?
A worm of some kind?
Here's the header info:
--------------
Author : Idetrorce (IP: 81.149.1.224 , host81-149-1-224.in-addr.btopenworld.com)
E-mail : idetrorce@mymail-in.net
URL :
Whois : http://ws.arin.net/cgi-bin/whois.pl?queryinput=81. ...
Comment:
very interesting, but I don't agree with you
Idetrorce - jsmiith, on 12/16/2007, -0/+1Mine came from 213.100.139.161 , c213-100-139-161.swipnet.se
- bandri, on 12/16/2007, -0/+1I was dumb enough to bother downloading the "ynotube.com" movie with curl; don't bother it was just pronspam...
- duckumu, on 12/16/2007, -0/+1I just got one from 80.216.136.94 (c80-216-136-94.bredband.comhem.se).
- tlrobinson, on 12/16/2007, -0/+1My blog uses WordPress
- acidblind, on 12/16/2007, -0/+1Yeah, same here! Does Idetrorce just comment on livejournal, or are there other 'victims'? :)
- phildo, on 12/16/2007, -0/+1Interesting anagrams for "Idetrorce" include: "Creed Riot" (oh *****, Scott Stapp's commanding his botnet to unleash mass suck upon the world!) and "I erect rod" (also possibly Scott Stapp related).
- sinfree, on 12/16/2007, -0/+1I got the same comment on two different blogs I run (which both use Wordpress, if it matters, installed on different servers, URLs, etc). The IP address on the first comment for Idetrorce was:
213.60.89.122, which translates to cm89122.red.mundo-r.com. A quick check on Geobytes says this is from A Coruña, Spain.
On the other blog:
85.136.71.242 which with a quick check on Geobytes shows it is from Madrid, Spain.
I checked the first two IPs mentioned in the parent comments, to see if either were in spain, and they show as being from Atlanta, GA, USA and Budapest, Hungary respectively. - n6vfp, on 12/17/2007, -0/+1it also wanted to download a codec that was a worm...
- modifiedmummy, on 12/15/2007, -0/+1madgravity: I just got one of those too and did the same thing. It's wierd that there's no link in the website fields. I'd laugh if whoever sent this bot out was too daft to remember it.
- inactive, on 12/16/2007, -0/+1I got one on my wordpress.com blog too and found this digg article by Googling the name. There are also heaps of profiles and such under the name.
Same message as posted above where he disagrees (even though my post was a list of RPC programming tips not an opinion).
Author : Idetrorce (IP: 70.126.190.164 , 164-190.126-70.tampabay.res.rr.com)
My best guess is that its some kind of proof of concept spam program (maybe to entice a buyer), test of a program or benchmarking (see how many google hits appear). Otherwise maybe he just forgot to include the link and its getting past the spam filters because of it (when other spam is just nuked)
This is not the only post of its kind I have received, there is another one, in which the post is in another language from someone called AnfertTuto posting “Hola faretaste mekodinosad” from various proxies.
I've got a bit more in depth info on that one here: http://h3g3m0n.wordpress.com/2007/10/02/mekodinosa ... - milenaugusta, on 12/16/2007, -0/+1weird, I also got the comment
- inactive, on 12/16/2007, -0/+1He got me too, he posted from 66.56.56.250, which translates to c-66-56-56-250.hsd1.ga.comcast.net
- brownpau, on 12/16/2007, -0/+1Just got the idetrorce comment too, on what was just a list of photos without much commentary so there wasn't anything to disagree with. Probably a spammer testing his botnet with a unique comment string. Later on the spam software will crawl pages previously posted to, matching up the string "idetrorce" to find blogs which don't delete spam comments and mark those as fresh targets for new spam runs.
- sepdet, on 05/21/2008, -0/+0Gosh, now I feel better. I had two Idetrorce comments, one on my public blog, one on my personal blog which I don't want linked to my main blog.
I was a little concerned that someone I didn't know had managed to connect me to both of them (as I guessed, after seeing the same comment). I didn't realize it was a mass hit.
I wonder what he/she/it was testing? - bandri, on 12/16/2007, -1/+1OK, the real question to ask might be: whois Idetrorce.com
From which we see it was registered this weekend,
Registrant: Brian Krassenstein, ... Fort Myers, FL 33908, United States edbri871@gmail.com
That name and email address, also edbri871@cs.com seem to get frequently accused of mischief and scammery, eg. see http://www.webservertalk.com/message157514.html http://www.hyipdiscussion.com/unmoderated-fight-fo ...
http://wwsnforums.com/phpBB2/viewtopic.php?t=271 http://web-life.org/vb/archive/index.php/t-6484.ht ... etc
Could just be a coincidence though, don't rush to conclusions :) - CCam345, on 12/16/2007, -0/+0Interesting that you bring up the 'Creed Riot' anagram phildo. Both Scott Stapp and Kevin Dubrow were in the news recently. Could this be another clue?
- PearlyShells, on 12/16/2007, -0/+0Got me too and on my first post way back in sept 07.
Pearly
http://www.my-island-penang.com - reportagethaila, on 12/17/2007, -0/+0I have posted a warning to fellow bloggers after Ideltrorce left a comment on my Wordpress site, Reportage Thailand.
- bandri, on 12/16/2007, -0/+0Just to be clear, I didn't mean to imply you're an associate of Krassenstein & friends. I wonder what they're up to! Some of the other links I found show involvement in traffic-generation schemes, so I guess it's just part of that. As folks say, probably just a test run...
- nextweb, on 02/17/2008, -0/+0ah man. I can't believe I actually took time to respond to this robot.
He said he didn't agree, but it in a post that was about an online friend that passed away. - bpfurtado, on 12/16/2007, -1/+0I've just been Idetrorced also ;-)
http://bpfurtado.livejournal.com/50526.html?view=2 ... - CCam345, on 12/16/2007, -1/+0Great job on the snooping for information. Either you people are really curious or need a hobby hehe.
I'm doing a follow-up to this on trying to solve the mystery and any information I use in the comments will be properly credited, promise. - CCam345, on 12/16/2007, -1/+0I am not Idetrorce, just for the record. I think I just found an online viral thing early on and was lucky enough to be in the right place at the right time. I got a scoop.
This whole thing of finding this Idetrorce and his comment tour de force, which kinda sound like the name incidentally hehe, started this morning. I keep the 'email me when someone comments' checked on blogs I visit and on one of them I saw one of Idetrorce's early comments. Then a little while later one of his comments showed up at another blog, one I contribute to. Then I googled him and found other places he went to and even someone on Live Journal that noticed it before me.
So there was the background of my blog post, simply asking who this person was and some silly 80's rocker photos in there, seemingly being obscure. The Digg here was started by me because I always digg my posts. - bandri, on 12/16/2007, -2/+0I got mine on LiveJournal too, less than an hour ago. Something's very odd though: I googled "Idetrorce" and find only "Results 1 - 10 of 10 for Idetrorce". Ten hits does not make an infamous anything, especially when the posts all seem to have been made today.
In addition to that handful of Idetrorce posts, there are a few in the 10 google results already asking "who is Idetrorce": http://www.xomba.com/idetrorce_the_commenter_who_i ...
(Submitted by diana sanders on Sat, 2007-12-15 14:47) which points here, ie. Digg). Where apparently lots of Digg people have encountered these comments too.
Whatever's happening only seems to have just begun this weekend. Trying Yahoo instead of Google search finds a few more comments, around 300. But still pretty modest.
My guess? Viral advertising. But I can't see http://www.ynotube.com/watch?v=YQYgSgQSBqH from above 'cos I'm on a mac. What does it show? - dilanredolas, on 12/16/2007, -4/+0Watch video on YouTube
http://www.ynotube.com/watch?v=YQYgSgQSBqH
The Digg Toolbar for Firefox lets you Digg, submit content, and keep track of Digg even when you're not on the Digg site. Download the official 
© Digg Inc. 2009
— Content created and posted by Digg users is