Tag Archives: spamming

Jim “Mr Shy” Mirkalami

In February, I wrote about receiving comment spam from a guy by the name of Jim Mirkalami. Since that time, there has been a lot of different people writing about the spam that they’ve received from our friend Jim; however it appears that he isn’t liking the new found attention that he is receiving.

This week, I received what would otherwise be considered a cease and desist type of comment. It surprises me that Jim would now be spamming more people telling them to stop writing about him and using his name, when it was clear that was his intention in the first place.

In any case, Jim is just going to have suck it up like everyone else online as it isn’t going to get removed from anyones site in a hurry.

Jim Mirkalami, The Lurking Spammer

Today I received a curious comment into #if debug:

Name: Jim Mirkalami
Email: jim@homenetmail.com
IP: 74.14.19.186
Comment: I have been visiting this site a lot lately, so i thought it is a good idea to show my appreciation with a comment.
Thanks,
Jim Mirkalami

Other than the fact it is a fairly standard useless comment, it perked my interest immediately when he mentioned that he’d been visiting the site a lot lately. While I’m sure my content has been nothing short of engaging, it’d be surprising given I’m using a standard WordPress template and the domain is only three months old.

For the sake of it, a quick investigation about Jim Mirkalami reveals that he has been using a lot of peoples sites lately. In fact, not only has he been using them – he has been leaving a similar or identical comment on them all.

I suspect that Jim is a clever sort of a bloke, looking for smaller gains than your average spammer. Instead of dropping a comment with a dozen or more links – his comments don’t include any links. The comment uses plain English, so it is less likely to get hit by a bayesian filter and polite enough that some people would let it through their comment moderation. Mr Mirkalami also appears to favour the highly visible domains such as Google and Yahoo!.

At some point down the road, Jim is going to return to the sites that he later found to accept his comment and is hoping to exploit a convenient option that most WordPress users enable. The option is related to comment moderation and allows someone to pass through comment moderation once they have had a comment approved.

If Jim is doing what I suspect he is, you have to give him a little credit for showing a small amount of patience with his spamming. Of course, that credit becomes completely invalid when you remember that he is nothing but a filthy filthy spammer.