Cloudflare: The New Face of Bulletproof Spam Hosting

[tacit]

...or, why do I get all this spam, and who's serving it?

Spammers have long had to face a problem. Legitimate Web hosting companies don't host spam sites. Almost all Web hosts have policies against spam, so spammers have to figure out how to get their sites hosted. After all, if you can't go to the spammer's website to buy something, the spammer

Comments

They also support criminal activity

[anonymous]

See: www.crimeflare.com/carders.html

[candidgamera]

Is there a way for common users to just block content from CloudFlare entirely? If enough people blacklist them, then they're going to be hit right in the wallet and be forced to start listening again.

[anonymous]

Spamcop is sending spam reports to Cloudflare nowadays.

Lots of them every day, just from me. Almost all the spam comes from there, and a good bit of malware packaged into it too.

[tacit]

Yep, I've noticed Spamcop is sending reports to Cloudflare these days. Doesn't seem to do any good, though.

[anonymous]

I have a crap ton of attempts by systems on CloudFlare IP ranges attempting to access APIs and scripts on my web server.

But CloudFlare totally isn't a forward proxy guys, they're totally not a transit provider liable for what their users do after being informed of vulnerability probing right? Nah they're just a reverse proxy. Unsolicited connections originating from them are just replies to HTTP requests my web server has made right?

Refuse to do anything about it though.