Bad guys IPs
Here is a list of IP addresses that are either spamming comments or spamming referrer logs. These are all from my apache logs and everyone is either a trojaned machine or just a bad guy.
« When incompetent mail admins strike back | Main | Controlling spam with postfix »
Here is a list of IP addresses that are either spamming comments or spamming referrer logs. These are all from my apache logs and everyone is either a trojaned machine or just a bad guy.
Listed below are links to weblogs that reference Bad guys IPs:
» Using IPTables To Get Rid Of The Chafe from Undesignated Blog
Kasia published a list of IPs that are causing comment spam/trackback/referrer log spam. This is a great effort. The only real way to combat this for now is to be retroactive. With the recent addtions of smtp iptable rules that... [Read More]
Comments
I have 490 addresses (or entire networks) in my blacklist, mostly from comment/referer spam (a small number are bad RSS clients).
On the other hand, there are 126 (out of 155) addresses in common between your list and mine :-)
Posted by: Harald | February 2, 2005 08:31 PM
I See That a Few Of You Have Trouble With Not being Able To Sign Out Of The Yahoo Messenger.....My Son Is 14 and I Noticed That When He Went Offline His Messenger Icon Was Still Showing That he Was Online....It Bothered Me Because I Felt Someone Else was Using His name And password......Well I did Some Checking And I Ran Nortons On His Computer And It Turned Out That He Had a Password Stealer that he downloaded from a site affiliated with an online game he plays..... It Comes In Different names such as PWyahoo.dll And PWstealer.dll Then Whoever it is using that virus or trojen gets all the addy's from the address book and uses it for scam purposes........here is what I Had To do.....I Ran Nortons Antivirus and it found the Password stealers But Then I Had To Find The Trojen That Kept redownloading Them So I Used Adaware...There Is A Free Version That You can Download And It Works Just Fine........It Found 37 trojens On His Computer And 11 Of Them Were Files Not Just Cookies Ect. Then I Had Him Change His Password In Yahoo And Things Are Back To normal....I Hope This helps a Few of You....If You Find a different Resolution Please Let me Know In Case This Happens Again And It Could Be Something Different Next Time...God Bless
Posted by: Olen | February 2, 2005 11:36 PM
Uh, they don't use proxies?
Posted by: dave | February 3, 2005 03:29 AM
Some use proxies, some use trojaned machines... either way, blocking the IPs is the best way to take back your referrer logs (for now).
Posted by: kasia | February 3, 2005 09:23 AM
Why bother? I don't see referrers listed on your site.
Posted by: dave | February 3, 2005 02:17 PM