More Spam

59 new spam messages from the assholes at 193.53.87.109, 111, & 113. Of
course they're too stupid to realize that none of 'em get thru. Anyway, I
cut them off completely - even from alerts, and now they will be as
transparent to me as they are to the rest of the world.

--
Neredbojias
http://www.neredbojias.net/
Great sights and sounds

"Neredbojias" <me@http://www.neredbojias.net/_eml/fliam.php> wrote in
message news:Xns9ADC3D44AC0C2neredbojiasnano (AT) 194 (DOT) 177.96.78...

59 new spam messages from the assholes at 193.53.87.109, 111, & 113. Of
course they're too stupid to realize that none of 'em get thru. Anyway, I
cut them off completely - even from alerts, and now they will be as
transparent to me as they are to the rest of the world.

I've recently started filtering my formmail, and 193.53.87.109,111 & 113 are
three of the 20 ip addresses I'm currently blocking (I'm also filtering on
content, but that it experimental for now.) So clearly those spammers
are/were an irritation to quite a number of us.

Does anyone know of a central list of spammer ips? I know of spamhaus for
ips of e-mail spammers, but haven't got as far as investigating whether they
or anyone else manages a list of form-mail spammer ips.
--
Brian Cryer
www.cryer.co.uk/brian

On 17 Jul 2008, "Brian Cryer" <not.here@localhost> wrote:

"Neredbojias" <me@http://www.neredbojias.net/_eml/fliam.php> wrote in
message news:Xns9ADC3D44AC0C2neredbojiasnano (AT) 194 (DOT) 177.96.78...
59 new spam messages from the assholes at 193.53.87.109, 111, & 113.
Of course they're too stupid to realize that none of 'em get thru.
Anyway, I cut them off completely - even from alerts, and now they will
be as transparent to me as they are to the rest of the world.

I've recently started filtering my formmail, and 193.53.87.109,111 & 113
are three of the 20 ip addresses I'm currently blocking (I'm also
filtering on content, but that it experimental for now.) So clearly
those spammers are/were an irritation to quite a number of us.

Very, very interesting. I don't have 20 yet, but 194.8.74.158, 194.8.75.204,
and 78.157.143.233 are in my reportoire as well. 2 of the bunch have the
same spam but one is an ip from India and the other from Latvia.

Does anyone know of a central list of spammer ips? I know of spamhaus
for ips of e-mail spammers, but haven't got as far as investigating
whether they or anyone else manages a list of form-mail spammer ips.

I know of nothing, but later I will Google for something like "form mail
spam" and see what comes up.

--
Neredbojias
http://www.neredbojias.net/
Great sights and sounds

On Jul 17, 8:13*am, Neredbojias <me@http://www.neredbojias.net/_eml/
fliam.php> wrote:

On 17 Jul 2008, "Brian Cryer" <not.here@localhost> wrote:

"Neredbojias" <me@http://www.neredbojias.net/_eml/fliam.php> wrote in
messagenews:Xns9ADC3D44AC0C2neredbojiasnano (AT) 194 (DOT) 177.96.78...
59 new spam messages from the assholes at 193.53.87.109, 111, & 113.
Of course they're too stupid to realize that none of 'em get thru.
Anyway, I cut them off completely - even from alerts, and now they will
be as transparent to me as they are to the rest of the world.

I've recently started filtering my formmail, and 193.53.87.109,111 & 113
are three of the 20 ip addresses I'm currently blocking (I'm also
filtering on content, but that it experimental for now.) So clearly
those spammers are/were an irritation to quite a number of us.

Very, very interesting. *I don't have 20 yet, but 194.8.74.158, 194.8.75.204,
and 78.157.143.233 are in my reportoire as well. *2 of the bunch have the
same spam but one is an ip from India and the other from Latvia.

Does anyone know of a central list of spammer ips? *I know of spamhaus
for ips of e-mail spammers, but haven't got as far as investigating
whether they or anyone else manages a list of form-mail spammer ips.

I know of nothing, but later I will Google for something like "form mail
spam" and see what comes up.

--
Neredbojiashttp://www.neredbojias.net/
Great sights and sounds

Aren't these IP addresses used as blind hosts by spammer software?
In such case you will never win, since eventually you would have to
block half the Internet.

On 17 Jul 2008, array7 (AT) inbox (DOT) com wrote:

I've recently started filtering my formmail, and 193.53.87.109,111 &
11
3
are three of the 20 ip addresses I'm currently blocking (I'm also
filtering on content, but that it experimental for now.) So clearly
those spammers are/were an irritation to quite a number of us.

Very, very interesting. *I don't have 20 yet, but 194.8.74.158, 194.8.7
5.204,
and 78.157.143.233 are in my reportoire as well. *2 of the bunch have t
he
same spam but one is an ip from India and the other from Latvia.

Does anyone know of a central list of spammer ips? *I know of spamhau
s
for ips of e-mail spammers, but haven't got as far as investigating
whether they or anyone else manages a list of form-mail spammer ips.

I know of nothing, but later I will Google for something like "form
mail spam" and see what comes up.

--
Neredbojiashttp://www.neredbojias.net/
Great sights and sounds

Aren't these IP addresses used as blind hosts by spammer software?
In such case you will never win, since eventually you would have to
block half the Internet.

Mmm, that is possible. Hosts are getting wiser, however, and the
situation is improving. They (the hosts) don't like being denigrated any
more than a person does. Furthermore, I believe a host bears at least
some responsibility in permitting its software to pass spam in the first
place. It would be a nice little cop-out to say, "Oh, I didn't know
Hector The Hacker was spamming thru me," when in reality they're sourcing
the crap themselves. ...And I _do_ believe some hosts are quite guilty.

--
Neredbojias
http://www.neredbojias.net/
Great sights and sounds

<array7 (AT) inbox (DOT) com> wrote

On Jul 17, 8:13 am, Neredbojias <me@http://www.neredbojias.net/_eml/
fliam.php> wrote:
On 17 Jul 2008, "Brian Cryer" <not.here@localhost> wrote:

"Neredbojias" <me@http://www.neredbojias.net/_eml/fliam.php> wrote in
messagenews:Xns9ADC3D44AC0C2neredbojiasnano (AT) 194 (DOT) 177.96.78...
59 new spam messages from the assholes at 193.53.87.109, 111, & 113.
Of course they're too stupid to realize that none of 'em get thru.
Anyway, I cut them off completely - even from alerts, and now they
will
be as transparent to me as they are to the rest of the world.

I've recently started filtering my formmail, and 193.53.87.109,111 &
113
are three of the 20 ip addresses I'm currently blocking (I'm also
filtering on content, but that it experimental for now.) So clearly
those spammers are/were an irritation to quite a number of us.

Very, very interesting. I don't have 20 yet, but 194.8.74.158,
194.8.75.204,
and 78.157.143.233 are in my reportoire as well. 2 of the bunch have the
same spam but one is an ip from India and the other from Latvia.
snip
Aren't these IP addresses used as blind hosts by spammer software?
In such case you will never win, since eventually you would have to
block half the Internet.

Its possible. I've only started logging and blocking ips for the last couple
of weeks. Whilst there are a number of persistent offenders I am seeing new
ones each day, so its quite possible that a small bot army is being
deployed. This doesn't invalidate the approach, but it does imply that by
blocking alone we will never win. (I'm looking at filtering, but haven't yet
deployed it.)
--
Brian Cryer
www.cryer.co.uk/brian

"Neredbojias" <me@http://www.neredbojias.net/_eml/fliam.php> wrote in
message news:Xns9ADE53B7D4B46neredbojiasnano (AT) 194 (DOT) 177.96.78...

On 17 Jul 2008, "Brian Cryer" <not.here@localhost> wrote:

"Neredbojias" <me@http://www.neredbojias.net/_eml/fliam.php> wrote in
message news:Xns9ADC3D44AC0C2neredbojiasnano (AT) 194 (DOT) 177.96.78...
59 new spam messages from the assholes at 193.53.87.109, 111, & 113.
Of course they're too stupid to realize that none of 'em get thru.
Anyway, I cut them off completely - even from alerts, and now they will
be as transparent to me as they are to the rest of the world.

I've recently started filtering my formmail, and 193.53.87.109,111 & 113
are three of the 20 ip addresses I'm currently blocking (I'm also
filtering on content, but that it experimental for now.) So clearly
those spammers are/were an irritation to quite a number of us.

Very, very interesting. I don't have 20 yet, but 194.8.74.158,
194.8.75.204,
and 78.157.143.233 are in my reportoire as well. 2 of the bunch have the
same spam but one is an ip from India and the other from Latvia.

I've not looked up where mine are from. I do have 194.8.74.158 in my list
but not your other two (yet).

My fill list at the moment (although I know I have others yet to add) is:
118.98.184.43, 121.100.50.7, 125.244.11.194, 147.91.206.12, 148.244.244.228,
189.31.180.20, 189.31.180.202, 193.53.87.109, 193.53.87.111, 193.53.87.113,
194.8.74.158, 195.54.209.166, 200.136.219.147, 200.150.29.72,
200.164.137.102,200.252.57.135, 201.114.194.163, 201.34.32.45,
202.141.29.110, 203.177.74.139, 203.158.221.227, 212.116.219.108,
212.116.219.211, 216.255.187.158, 217.17.160.116, 219.77.67.226,
219.93.175.67, 219.93.178.162, 220.225.217.90, 59.93.244.134, 61.19.54.164,
68.202.114.83, 69.64.64.68, 69.88.196.106, 71.61.96.204, 84.205.244.135,
85.185.36.133, 85.25.134.150, 88.86.111.212, 91.121.207.27, 91.90.153.9

I'm not logging frequency so some of these will be worse offenders than
others. When I have time this is one of the things I will log.

Does anyone know of a central list of spammer ips? I know of spamhaus
for ips of e-mail spammers, but haven't got as far as investigating
whether they or anyone else manages a list of form-mail spammer ips.

I know of nothing, but later I will Google for something like "form mail
spam" and see what comes up.

I do know of other approaches - capitcha is common and making use of cookies
is another good approach. Still haven't found a public list of form-spammer
ips.
--
Brian Cryer
www.cryer.co.uk/brian

"Brian Cryer" <not.here@localhost> wrote

array7 (AT) inbox (DOT) com> wrote in message
news:58d10810-1dec-42c7-9d66-ec15ebe0eaaa (AT) i36g2000prf (DOT) googlegroups.com...
On Jul 17, 8:13 am, Neredbojias <me@http://www.neredbojias.net/_eml/
fliam.php> wrote:
On 17 Jul 2008, "Brian Cryer" <not.here@localhost> wrote:

"Neredbojias" <me@http://www.neredbojias.net/_eml/fliam.php> wrote in
messagenews:Xns9ADC3D44AC0C2neredbojiasnano (AT) 194 (DOT) 177.96.78...
59 new spam messages from the assholes at 193.53.87.109, 111, & 113.
Of course they're too stupid to realize that none of 'em get thru.
Anyway, I cut them off completely - even from alerts, and now they
will
be as transparent to me as they are to the rest of the world.

I've recently started filtering my formmail, and 193.53.87.109,111 &
113
are three of the 20 ip addresses I'm currently blocking (I'm also
filtering on content, but that it experimental for now.) So clearly
those spammers are/were an irritation to quite a number of us.

Very, very interesting. I don't have 20 yet, but 194.8.74.158,
194.8.75.204,
and 78.157.143.233 are in my reportoire as well. 2 of the bunch have
the
same spam but one is an ip from India and the other from Latvia.
snip
Aren't these IP addresses used as blind hosts by spammer software?
In such case you will never win, since eventually you would have to
block half the Internet.

Its possible. I've only started logging and blocking ips for the last
couple of weeks. Whilst there are a number of persistent offenders I am
seeing new ones each day, so its quite possible that a small bot army is
being deployed. This doesn't invalidate the approach, but it does imply
that by blocking alone we will never win. (I'm looking at filtering, but
haven't yet deployed it.)

I forgot to add that by blocking ip addresses the amount of spam has falled
dramatically, by at least 90% as a guess. So it may not be a complete
answer, but it certainly helps.
--
Brian Cryer
www.cryer.co.uk/brian

On 21 Jul 2008, "Brian Cryer" <not.here@localhost> wrote:

"Neredbojias" <me@http://www.neredbojias.net/_eml/fliam.php> wrote in
message news:Xns9ADE53B7D4B46neredbojiasnano (AT) 194 (DOT) 177.96.78...
On 17 Jul 2008, "Brian Cryer" <not.here@localhost> wrote:

"Neredbojias" <me@http://www.neredbojias.net/_eml/fliam.php> wrote in
message news:Xns9ADC3D44AC0C2neredbojiasnano (AT) 194 (DOT) 177.96.78...
59 new spam messages from the assholes at 193.53.87.109, 111, & 113.
Of course they're too stupid to realize that none of 'em get thru.
Anyway, I cut them off completely - even from alerts, and now they
will be as transparent to me as they are to the rest of the world.

I've recently started filtering my formmail, and 193.53.87.109,111 &
113 are three of the 20 ip addresses I'm currently blocking (I'm also
filtering on content, but that it experimental for now.) So clearly
those spammers are/were an irritation to quite a number of us.

Very, very interesting. I don't have 20 yet, but 194.8.74.158,
194.8.75.204,
and 78.157.143.233 are in my reportoire as well. 2 of the bunch have
the same spam but one is an ip from India and the other from Latvia.

I've not looked up where mine are from. I do have 194.8.74.158 in my
list but not your other two (yet).

My fill list at the moment (although I know I have others yet to add)
is: 118.98.184.43, 121.100.50.7, 125.244.11.194, 147.91.206.12,
148.244.244.228, 189.31.180.20, 189.31.180.202, 193.53.87.109,
193.53.87.111, 193.53.87.113, 194.8.74.158, 195.54.209.166,
200.136.219.147, 200.150.29.72, 200.164.137.102,200.252.57.135,
201.114.194.163, 201.34.32.45, 202.141.29.110, 203.177.74.139,
203.158.221.227, 212.116.219.108, 212.116.219.211, 216.255.187.158,
217.17.160.116, 219.77.67.226, 219.93.175.67, 219.93.178.162,
220.225.217.90, 59.93.244.134, 61.19.54.164, 68.202.114.83, 69.64.64.68,
69.88.196.106, 71.61.96.204, 84.205.244.135, 85.185.36.133,
85.25.134.150, 88.86.111.212, 91.121.207.27, 91.90.153.9

I'm not logging frequency so some of these will be worse offenders than
others. When I have time this is one of the things I will log.

Does anyone know of a central list of spammer ips? I know of spamhaus
for ips of e-mail spammers, but haven't got as far as investigating
whether they or anyone else manages a list of form-mail spammer ips.

I know of nothing, but later I will Google for something like "form
mail spam" and see what comes up.

I do know of other approaches - capitcha is common and making use of
cookies is another good approach. Still haven't found a public list of
form-spammer ips.

Wow, you do have quite a list. Are these all form-spammers because that is
what I'm harping about; regular email spam I let gmail handle, and they
seem to do a very good job. Regardless though, I believe publicizing the
IP address of the spammer (any type) is a weapon in the war against spam
and a good one.

....And no, I haven't found a f/s list yet, either.

--
Neredbojias
http://www.neredbojias.net/
Great sights and sounds

"Neredbojias" <me@http://www.neredbojias.net/_eml/fliam.php> wrote in
message news:Xns9AE21A504AFC9neredbojiasnano (AT) 194 (DOT) 177.96.78...

On 21 Jul 2008, "Brian Cryer" <not.here@localhost> wrote:


"Neredbojias" <me@http://www.neredbojias.net/_eml/fliam.php> wrote in
message news:Xns9ADE53B7D4B46neredbojiasnano (AT) 194 (DOT) 177.96.78...
On 17 Jul 2008, "Brian Cryer" <not.here@localhost> wrote:

"Neredbojias" <me@http://www.neredbojias.net/_eml/fliam.php> wrote in
message news:Xns9ADC3D44AC0C2neredbojiasnano (AT) 194 (DOT) 177.96.78...
59 new spam messages from the assholes at 193.53.87.109, 111, & 113.
Of course they're too stupid to realize that none of 'em get thru.
Anyway, I cut them off completely - even from alerts, and now they
will be as transparent to me as they are to the rest of the world.

I've recently started filtering my formmail, and 193.53.87.109,111 &
113 are three of the 20 ip addresses I'm currently blocking (I'm also
filtering on content, but that it experimental for now.) So clearly
those spammers are/were an irritation to quite a number of us.

Very, very interesting. I don't have 20 yet, but 194.8.74.158,
194.8.75.204,
and 78.157.143.233 are in my reportoire as well. 2 of the bunch have
the same spam but one is an ip from India and the other from Latvia.

I've not looked up where mine are from. I do have 194.8.74.158 in my
list but not your other two (yet).

My fill list at the moment (although I know I have others yet to add)
is: 118.98.184.43, 121.100.50.7, 125.244.11.194, 147.91.206.12,
148.244.244.228, 189.31.180.20, 189.31.180.202, 193.53.87.109,
193.53.87.111, 193.53.87.113, 194.8.74.158, 195.54.209.166,
200.136.219.147, 200.150.29.72, 200.164.137.102,200.252.57.135,
201.114.194.163, 201.34.32.45, 202.141.29.110, 203.177.74.139,
203.158.221.227, 212.116.219.108, 212.116.219.211, 216.255.187.158,
217.17.160.116, 219.77.67.226, 219.93.175.67, 219.93.178.162,
220.225.217.90, 59.93.244.134, 61.19.54.164, 68.202.114.83, 69.64.64.68,
69.88.196.106, 71.61.96.204, 84.205.244.135, 85.185.36.133,
85.25.134.150, 88.86.111.212, 91.121.207.27, 91.90.153.9

I'm not logging frequency so some of these will be worse offenders than
others. When I have time this is one of the things I will log.

Does anyone know of a central list of spammer ips? I know of spamhaus
for ips of e-mail spammers, but haven't got as far as investigating
whether they or anyone else manages a list of form-mail spammer ips.

I know of nothing, but later I will Google for something like "form
mail spam" and see what comes up.

I do know of other approaches - capitcha is common and making use of
cookies is another good approach. Still haven't found a public list of
form-spammer ips.

Wow, you do have quite a list. Are these all form-spammers because that
is
what I'm harping about; regular email spam I let gmail handle, and they
seem to do a very good job. Regardless though, I believe publicizing the
IP address of the spammer (any type) is a weapon in the war against spam
and a good one.

These are all form spammers. (Like you for regular email spam I have
filters, but nothing third party for form spam.) I'm sure this list will
grow.

...And no, I haven't found a f/s list yet, either.

I did try one or two of these ip addresses on spamhaus, but didn't get a
match. I suppose most blacklists concentrate on email spam. Maybe if I move
this to a dedicated server I could open up my growing list to public query.
That might be interesting. I'll add it to my ever growing list of things
that I'd like to do but may never have time for ...
--
Brian Cryer
www.cryer.co.uk/brian