The Women Warriors :: View topic

The Women Warriors
Uniting people, reclaiming the planet Earth

Home

FAQ

Memberlist

Usergroups

Profile

Chat Room

By entering this site, you agree to the disclaimers and the confidentiality agreement on our Home Page
MEMBERSHIP ON THIS BOARD IS BY INVITATION ONLY.

Debora Spammers

The Women Warriors Forum Index -> Miscellaneous

View previous topic :: View next topic

Author

Message

MessiahMews
Woman Warrior

Joined: 02 Feb 2006
Posts: 525
Location: Vaccination Liberation

Posted: Thu Nov 16, 2006 8:41 pm Post subject: Debora Spammers

Debora Spammers

I've been getting all these emails from spammers whose email starts out with "debora". The "debora" spambot got our emails off of the contact page here.

I like having a NO SPAM policy.

No spammer left behind. Wink

Since I can't block a partial email name with my Spam controls, I've decided to list each email here in this thread.

So when the debora spammers come back, their spambots will spit their own mail back to themselves, and also other spambots will flood their emails. They'll either get flooded, stuck as undeliverables, or both. Wink

Bwuahahahahaha!

That should make them go defunct for a while.

Like fighting fire with fire, is it?

Let's calll it the homeopathic approach.

I'm also going to list all the emails of spammers that hack to sign up here. This will be fun. And I'm going to keep adding. Let the spammers spam each other.

Let the games begin!

Here's the "debora" spammer list:

deborapamela@canamtrading.com

deboramz@camisalistrada.com.br

deboranunes@cainc.com

deborapaganin@calisouk.com

deboranunesilva@calpe-tornos.com

deborapkqbh@caminhodasmissoes.com.br

deboraposunc@canaancapital.com

deboraquino@caliban.corp.sun.com

deboraps@catzadillas.com

deborareginanobrega@camillie.com.hk

deborarodrigues736@callandcare.com

deboraroitman@canbashers.com

deboraromualdo@californiacareerservices.com

deborasangeroti@camilleriddle.com

deborasawada@campomatic.com.au

deborasbw@cambio-santiago.com.ar

deboraschelles@campkeystone.com

deborascobar@californiacapitol.com

deboraseber@callcupid.com

deborarimedid@cambesite.com.br

deborahwil@ca.ul.com

deborahynk@cacsnet.com

deborahqqsvvddpqzzh@candi-staton.com

deborajed@camlucphotos.com

deborajprincipe@cameronwebdesigns.com

deboraradael@camargopharma.com

deboraluizadaluz@campaigngraphics.com

deborahpit@camuzzigas.com.ar

deborahpvwxdqugxc@calibreinc.com

debora.clivati@londrina.net

deborahtkwidiiiqa@canclean.com

deboramartins_17@canadianhightechenterprises.com

deborameyers16@canadiansailingexpeditions.com

deborahvellutini@campohermoso.com

deboralmt@cairnsconferences.com.au

deborasilveirasouza@campusshopwm.com

deborahmccamm@cameraprostudio.com

deboraiurd@cameracase.com

deborahruketlysevgeto@campfarley.com

deborakaplansv@campingsfrance.com

deboramau@calsunchina.com

deboramassola@cakmak-av.com.tr

deborahpl2@caltexrecords.com

deboramarchesiello@calamillor.com

deborahvanlandingham@canaanrealty.com

deboramaros@canadianwellness.com

deborajessica@camclin.com

deborahtolomeo@cambolsa.com

deboramaros@canadianwellness.com

deborasimoes02@canaryvillas.com

deborapicolo@canaimports.com

deboranapoli@calestephenson.com

deborahtroutt@candiru.com

Here's a sample of the debora emails. They're all the same.

Quote:

TheSubway com Post its Hot Stock List and MPRG is on it as New Movie Hits VH1!

Company: The Motion Picture Group
Symbol: MPRG
Price: $0.25
3 Day Target: $1.00
Status: Strong Investment

The Motion Picture Group's (MPRG) New feature film staring Keifer Southerland, has launched on VH1 and will be airing at Key hours over the next several weeks.

Keifer Southerland stars as Jack Bower in the Hit TV show "24". MPRG is formed by a group of producers that have been a part of some of the last decades hottest films.

Its no wonder MPRG has hit the Hot Stock List. The price is at $0.25 but it wont stay there long. The new film Airs this weekend on VH1. Grab MPRG first thing Thursday morning this one is sure to go through the roof!

Here's the header off of one of the Debora emails...

Return-Path: <deboraradael@camargopharma.com>
Received: from rly-yc01.mail.aol.com (rly-yc01.mail.aol.com [172.18.205.144]) by air-yc01.mail.aol.com (v114.2) with ESMTP id MAILINYC11-1b7456102cb335; Sun, 19 Nov 2006 20:20:15 -0500
Received: from mail01.secureserverdot.com (mail01.secureserverdot.com [216.14.208.15]) by rly-yc01.mail.aol.com (v114.2) with ESMTP id MAILRELAYINYC19-1b7456102cb335; Sun, 19 Nov 2006 20:20:11 -0500
Received: (qmail 87854 invoked by uid 89); 19 Nov 2006 20:19:57 -0500
Delivered-To: thewomenwarriors.net-messiahmews@thewomenwarriors.net

Received: (qmail 87740 invoked by uid 89); 19 Nov 2006 20:19:55 -0500
X-Originating-IP: 125.24.140.129
Received: from unknown (HELO 125-24-140-129.adsl.totbb.net) (125.24.140.129)
by mail01.secureserverdot.com with SMTP; 19 Nov 2006 20:19:55 -0500
Received: from 64.132.64.242 (HELO services.camargopharma.com)
by thewomenwarriors.net with esmtp (NJQZ6BG59NI JU1N)
id WNEM4W-60GKL1-E0
for messiahmews@...
; Mon, 20 Nov 2006 01:20:05 -0420
From: "Jasper Foster" <deboraradael@camargopharma.com>
To: <messiahmews@thewomenwarriors.net
>
Subject: it me Jasper
Date: Mon, 20 Nov 2006 01:20:05 -0420
Message-ID: <01c70c42$02bdb370$6c822ecf@deboraradael>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Thread-Index: Aca6QZ7IP70KG50M5OUSTI5OF55C86==
X-AOL-IP: 216.14.208.15
X-AOL-SCOLL-SCORE: 0:2:363289653:13421772
X-AOL-SCOLL-URL_COUNT: 0

Take that "Debora"!

Bwuahahahahaha!

Hacker Spammer list:

Coming as soon as I'm done having fun with "Debora".
First one...
elizabethhernande_3@gmail.com

jadkolefor@norivo.info

d_903@aol.com

zvrggztt@lgvb.com

ferkpatro@medafo.info

r-983@hotmail.com

amcetlb@rhij.com

Other Spammers:

joe@jneyer5.orangehome.co.uk

jokroncrak@spamarrest.com
And his subject line?.... RE: Dolphins (verification)
Tell us Mister Spammer, what does spamarrest have to do with dolphins?

N O A N S W E R...

support-help@dd10214.kasserver.com
Supposedly PayPal support. And I don't even have a personal Pay Pal. Hubby does. It's called Phishing.

KiweeMessenger.us@email.mypersonalexpression.com
support-b1u9x16ak0kt3mb0e6zf4bhme3p0c1@email.mypersonalexpression.com

chinadanshui@gmail.com
shishawdph@gargoylesoftware.com
mcsft@mmcsft5.orangehome.co.uk
microclaims002@aim.com
dannicu@curriesystems.com
chinadanshui@gmail.com
acbeebepjlc@aylesbrook4.fsnet.co.uk
groluxawch@keelguard.com
sales@trackstickpro.com
teenland@hotnews.com
service@ebay.com
cjones@tcac.com
jhcaca@sisconet.com
aphrod@digitlondon.com
brutusbustert@didde.com
eprofits@trueblue-cashsystems.com
mecheadams3@yahoo.co.jp
meche2006adams@yahoo.com
ujeirfuerk@excite.co.jp
admin@kellyzzx.com@172.146.188.92
accounts@numericacu.com
abuse@eBay.com
benjaminoliseh47@yahoo.com
benjaminoliseh99@hotmail.com
lfvwjpjdqxk@blazic.com
larisasosl@eltip.com
joezohnicyeypgra@love.erolib.ru
google@google17.orangehome.co.uk
berth@paigeberth7.orangehome.co.uk
immigrationinfo@numbersusa.com
bun_bun_itumohima2006@yahoo.co.jp
lakeishamaevnqh@znakomstva.lt
c016qg@126.com
c1we2w@126.com
sales@radikalbooks.com
pcorneliuswd@flyingkranch.net
antalblan@mail2cynthia.com
veshidzd@kroon-oil.com
rita@cruiz.orangehome.co.uk
todeanfqef@suy.be
a-jmoyerivy@lauraquinti.net
pat.walker2@virgilio.it
xzexqcvuyc@mail.jimac.net
claimsofficer_donald@yahoo.dk
mrsagatha@bellsouth.net
kanghadi@telkom.net
gar@f365.com
kras@loten2.orangehome.co.uk
benson@bensonstevens.orangehome.co.uk
anson@calvarynet.net
februssoze@internet-ave.com
gdfgsgrhghs@infoseek.jp
charleenlfj@fparchive.net
dfvurw@sentinel.com
UnknownSender@UnknownDomain aka service@ebay.com <----phishing spam
no-reply@fairwinds.org
misa_lovelygirl@hotmail.co.jp
akjhfokla@gmail.com
ecolexfyep@click4wap.net
emailoffice@emailofficeoffice.com
aw-confirm@ebay.com
vji@brasilcard.com
Juana@nilsonreport.com
hekwltnxaue@blendex.com
helwoddd@aol.com
solicitorbwalter@aim.com
kkgallarv@gonetwork.it
service@paypal.com
heinewawrzynie@casawarehouse.com
amantawyobop@hiboox.com
claudia@kerkhoof9.orangehome.co.uk
update@ebay.com
hkjhiop@infoseek.jp
claimsofficers_martins01@yahoo.co.uk
info_officer@bellsouth.net
perpetualsurmounts@abdllc.com
info-msw-program-lottery@web.de
Pascalzincked@abmgroup.ru
cackledsloppier@abonet.ru
chuckvdk@gmajor.com
vocalistsboxer@abdijkaarsen.nl
info@boainfos.com
dishearteninglexicons@ablesnet.com
j_smith1144@yahoo.co.uk
piercejsn@bellsouth.net
cwomackrji@911notify.com
Siegfriedresponsiveness@accessfinder.net
continuancesleapfrogging@abpcr.com
Callaotransmute@aca-texas.com
juliacolers@flirt.com.ua
hygrometercrow@absolutelymale.com
contaminant'sHinayana's@abfa.com
clc_202@yahoo.com
botheraudiophile@abbey-homes.com
email@4planetearth.com
awaitingvaliant@aacmoscow.com
greedinessarm's@accesaniga.com.ar
marsha@event-management.com
pr@event-management.com
immersionsBadlands@abc.com.py
tangent'sroil@abdata.com
glennchrissydb@documentum.com
mintyenticement's@accessasia.com
yfgjlgp@qjrn.com
dangginabrny@janseva.com
lamb'ssaucy@aal-tour.ru
antiquarianaccepting@aalmeida.com.br
coppicesVaughan@aaronco.com
bunzeyegw@exposed-zone.com
Dunn'sAtman@abn.be
checkerboardsthreescore@access.be
ralph@flightsafety.com
MasterUK2006Nv30@mx1.betacbase01.com
amateurism'sbehalves@accord-invest.ru
beach@aba.com
vera_lucas459@yahoo.com
eprofits@cashbackcaps.net
phillipthopson@UnionPlus.net
thompsonphillip01@jmail.co.za
moocacyberkillerzgu@homemakersfair.co.za
onlinesurvey@sbbt.com
earthlingfogeys@abacusinfotech.net
pew'sdemon@abdata.com
winsomestandby@abrealty.net
asexuallyTrondheim@aaker.com
qqszafdsef@infoseek.jp
enablingobjects@aavid.com
toij6565@yahoo.co.jp
Reports2006@kappacbase02.com
drknowfi@gittins.demon.co.uk
CatholicismsBrzezinski@absf.org
masterpiecesphotograph's@abmbelgium.com
service@paypal.com <---- more phishing spam
thresholdsweetener's@abbottexcellence.com
do-not-reply@warrenfcu.com <--- phishing
feudedblankly@abess.com
stiffenerpent@abcdata.com.pl
rakzc@fegomi.com
floppylikableness@abounawas.com.tn
inheritanceSimon@aagfx.com
mrusman_kamalg54@hotmail.fr
mr2usman_kamal@yahoo.fr
baham@hawaiianair.com
connectsatavism@abcex.com
taddpaten@originaltheatre.org
waneslemoning@academica.cz
sweetbreadsEaster's@acat.com
triumphdependably@accordhr.com
alaenenae@bab-ballwil.ch
rudestemigration@aahc.com
daintychimpanzee's@ab-shop.ru
member@PostCard.ORG
arienvon@vonarienvon.orangehome.co.uk
sufficesconvoyed@accugraphics.com
ibd748@yahoo.co.jp
ibrci@yahoo.fr
van@andervan.orangehome.co.uk
frohodgepodge's@abps.com.au
cherubiclyrically@abogados-rosario.org.ar
bloomsfacility@accessdata.com
pledgesdemocratic@ace-ina.com
guiltilyampere@aanet.com.au
eusebiusisn@earnhardt.com
pronouncement'sgruel@accountemps.com
SosaLeviticus's@acc.co.jp
noisemaker'scarats@absolutecomfort.ru
hoodoo'sangles@accura.co.uk
jl4@cec.wustl.edu

And because I'm this way?... I'm going to list them ALL.

And please....

_________________

Last edited by MessiahMews on Sun May 06, 2012 4:54 am; edited 109 times in total

MessiahMews
Woman Warrior

Joined: 02 Feb 2006
Posts: 525
Location: Vaccination Liberation

Posted: Thu Nov 16, 2006 11:56 pm Post subject: More Complaints...

Apparently, it's a HUGE Debora problem. uh-oh. http://www.google.com/search?hl=en&lr=&q=%22Debora+is+a+huge+spammers%22&btnG=Search http://comments.gmane.org/gmane.mail.virus.mailscanner/46312 headersMichael S. \| 12 Nov 21:01 Debora is a huge spammers!!!! From: Michael S. <admin <at> thenamegame.com> Subject: Debora is a huge spammers!!!! Newsgroups: gmane.mail.virus.mailscanner Date: 2006-11-12 20:01:21 GMT The huge increase in stock spam that everyone is seeing is coming from the username that is consistently the same. Has anyone noticed? These are different variations of the username <at> deborahpessanha <at> bridportleisure.com deborasalsano <at> brokermart.com deborahvw <at> brooksmetals.com Etc. Notice the first 6 characters of every username being Debora? Is there an exim rule that one can implement in exim.conf for example that rejects all mail arriving from Debora?????? <at> fakedomain.com? Id rather do this at SMTP time instead of allows MS to kill it off as there are thousands and the less MS has to work the better. Thanks -- http://blog.gmane.org/gmane.mail.virus.mailscanner/day=20061113 headersMatt Hampton \| 13 Nov 09:17 Re: Debora is a huge spammers!!!! From: Matt Hampton <matt <at> coders.co.uk> Subject: Re: Debora is a huge spammers!!!! Newsgroups: gmane.mail.virus.mailscanner Date: 2006-11-13 08:17:06 GMT Glenn Steen wrote: > On 12/11/06, Michael S. <admin <at> thenamegame.com> wrote: >> I did a grep on Debora in my logs and although that ip reveals the >> same ip >> as what you have the rest are from all different ips so ip blocking >> wont do >> it. > Look through the stuff since the begining of this month... Had 28 > matches, where 3 would've been false positives with a rule rejecting > anyone named debora.* <at> .* ... would be unacceptable to me. And MS cauth > the other ones so.... Gone back through my logs and only 185 got as far as MS - of these 11 were not identified as spam and of these only 6 were false negatives. Of those 6 - 3 were caused by SA timeouts. I was getting Razor hits on the rest and Bayes was > 60% on two of them. The lowest score was 2.5, the highest 4.76. I haven't (touch wood) had a false negative since the 5th. The majority (at least an order of magnitude larger) were blocked at connection level. I haven't had a chance to work out which milters hit the most but I have the following installed: milter-link, smf-sav, smf-grey (patched to only greylist if the sending IP is on an RBL) and smf-spf (reject only on fails). > > If saw this in very large numbers, I might be tempted do try (Continue reading) headersMartin Hepworth \| 13 Nov 10:05 Re: Debora is a huge spammers!!!! From: Martin Hepworth <martinh <at> solidstatelogic.com> Subject: Re: Debora is a huge spammers!!!! Newsgroups: gmane.mail.virus.mailscanner Date: 2006-11-13 09:05:15 GMT Michael S. wrote: > The huge increase in stock spam that everyone is seeing is coming from > the username that is consistently the same. Has anyone noticed? > > These are different variations of the username <at> > > > > deborahpessanha <at> bridportleisure.com > <mailto:deborahpessanha <at> bridportleisure.com> > > deborasalsano <at> brokermart.com <mailto:deborasalsano <at> brokermart.com> > > deborahvw <at> brooksmetals.com <mailto:deborahvw <at> brooksmetals.com> > > > > Etc. Notice the first 6 characters of every username being Debora? > > > > > > Is there an exim rule that one can implement in exim.conf for example > that rejects all mail arriving from Debora?????? <at> fakedomain.com > <mailto:Debora?????? <at> fakedomain.com>? > > > > Id rather do this at SMTP time instead of allows MS to kill it off as (Continue reading) ****************** And from this page... http://spam-reporting-system.blogspot.com/2005_10_02_spam-reporting-system_archive.html Debora Bland debora.blandoj@pacbell.net Penny Stock Trading Report Me -----><----- Debora _________________ Last edited by MessiahMews on Sun May 06, 2012 4:52 am; edited 1 time in total

MessiahMews
Woman Warrior

Joined: 02 Feb 2006
Posts: 525
Location: Vaccination Liberation

Posted: Fri Nov 17, 2006 3:36 am Post subject: More on Debora...

Another Debora discussion on a forum... http://www.directadmin.com/forum/showthread.php?s=9a3f0d5c0c1d52a150512711080278f1&threadid=15812&highlight=debora Looks like a Debora pile up, does it? I've read and have been told that some of the spammer emails could be fake. It still makes no difference, because when spambot comes here to harvest emails, they will grab the spammer emails real or fake. A spambot will never recognize the emails as fake. They just find a clickable email address and harvest it. nobody@nowhere.com The idea will then be a bunch of fake emails that either disappear into the ether or bounce back. Debora and others will have lost business or get spam back, if they're real. Sorry about your business, Debora.... Bwuahahahahahahaha! _________________ Last edited by MessiahMews on Thu Jan 11, 2007 2:23 pm; edited 1 time in total

MessiahMews
Woman Warrior

Joined: 02 Feb 2006
Posts: 525
Location: Vaccination Liberation

Posted: Sun Nov 19, 2006 5:25 pm Post subject: Spambots Beware! Bwuahahahahaha!

This is a really good site.
http://www.turnstep.com/Spambot/

Harassing the harassers...

Now I'm really having fun!

This is almost as much fun as gifting and boosting.

From the Harassment Page

A program to dump junk to a spambot
This is a nice little program to test just how smart the spambot is, and how it deals with the unexpected. A browser will pretty much just show a bunch of strange characters, but spambots are not as smart as a browser. The idea here is to get the spambot to open it's mouth, and the shovel everything you find down it's throat. Hopefully, it will break. Smile

A spambot Smorgasbord, is it? Come eat please!
Yum Yum!

Source code for Infinospam
Updated version, courtesy of Rudy Rucker, Jr.
A php version, written by Harold Hallikainen
A javascript version, written by David Merriman
Spambothoney, a program using PHP and MySQL, written by Daniel Hahler
SpamBot Poison program
bot-trap - A Bad Web-Robot Blocker
spider-trap.de

This will put them in a perpetual loop...

dy6uHcpMDt@E8eLoE.co.uk
U1L7K@efKKvyN.com
DWM4Iwr@WMjGYKn1.com
IMT7@UFeT4O6.ws
IBOKSJQ1@VWQHpB.us
gIHLi7c@GFMhn.biz
toT1b@IV464dLCQ.ws
pgs5DtQ@UOTQvmN.co.uk
lE7rK@qHPKxgf.biz
XVlnVtp@mk6SHvCI.net
euTOh@ybWU.us
k1OFyg@7DjnB.net
TLC6g18rT@7xFDd.ws
csftJ67@IejOfHW.ws
uITTiLx@MOVF.info
LuYIrR@pYYBBh.info
dvsgjTvk@XEox41EM.info
Pm266hy4F@HtwXjq.ws
nBknQJW7eu@klpYRg.org
XCPsXn@GSijIs.ws
MWJhDQkd@3sVE2.us
NuEQoorf@J4YnF.ws
EDLDy5RU5q@XCXBKm.biz
Yj5n@RiMHLrM.ws
oxKI1i@NhEBvUBiw.net
PHSssl@4F7Nh.co.uk
T3xSIbW1@o6Byv8in.com
Hu86eWI@PPsdxHS.biz
kdlPQnR@s44nE.net
mLpWGql@eIch75.com
sbTvwj@EXQYuNM.co.uk
xODuRMFRB@mOemH8sl.us
p8spf2@YrLbShv.biz
wGEF@bHM5xcqfi.net
CLUrUj@cqJcE.co.uk
MYKn5PRN@D7MCX.biz
VHVqRJ6k@rbNHKqx.org
nEqfsrN@fhXkdpWlO.org
Y5ywkf8@dmwmBg.com
bcMeerR@TFLFcl.com
SF1RJB@4wJst.net
HYPmuO@gyFtsTuB.us
pwc2@SJXrk.co.uk
d76Nkl@EVqoobS.ws
Edw3@UUpNx.org
UQV1DPRLIWP@o6GRd.info
KPyET@qIEYF33.ws
mmHCd@3MlvoX6SMh.co.uk
OPmdo8PY2@GoKqDEwWx.co.uk
eR8jPeh@5h7PRsC.net
uJPT7@iBRIbd.us
XWcLiK@JHeN.org
ol1kS7@dPGvY5.com
NnpR@d1isd.co.uk
vuf4YJH@2UrErd.biz
snjswd@fVWfQ1.co.uk
t6BLS@kNxqE.org
Rct65mNI@kUfp3LF.co.uk
bco5fyrr@d71pHXT.ws
wbHi@xuv4UT.net
fIhmsgVosm6@vSXSQ5.ws
tkbMrX@8mRVqBQe.us
wuwSuJ@qpiU7SS6.biz
CfIN4@d6KEw.ws
LcxElQx@g4KM6r.ws
huVg335o@wj2yJ.biz
Xq7BC@Nlq1BJ.co.uk
vkjL8bsR@kG2GgiwNC.ws
kvKL@JEx2yl7bo.org
LtTNgtDC@5ds7yfP6.us
nv6Jh@NhWy.biz
Sb7vPf@t4gm5NO.com
s2sTqF1@7tyKF.com
kpiVu@oOguj3.com
ytWNy1i@bCR2g.org
s4GTBo@ybgbF8.ws
HowCdnXrK@T5QpV4c.info
yVHWB46Ic@LbnOS2O.org
BEV7@UEplLMh.us
uKwDuuYj@Mx2RwPmH.ws
d1dpWu@LDjrl1.ws
j5j7n4@xb8yn.net
p8Fnp@6Rt56Isbb.com
WHkf3P@ifJIPdif.ws
IUEHwL@U57L34.net
MHNQwO@3W5e1fXG7M.co.uk
itGhE2S@kc17sID.net
NJyxtS8@My6ojX.ws
vbGf@tvYcL6SNp.co.uk
omtt21I@MsgL1M.co.uk
D7piiJ@C8IVr1FVXSO.net
ORMo2ER@SE7eR3H3.info
SIvD@y5xfFt.ws
nbdr@ncx1w.biz
hYpyFm@VBrUwGP.org
HuJbe3r@UsQuN.us
KxkQhdCQG@wM7sBH2c.co.uk
or3Fq8@JnxbU.org
sxwm7KJ@Hcux2H.us
PNgxpxe1ie@Dg53mlS.co.uk

I'm a spambot and I would like to continue filling my database with bogus email addresses. I agree that by following this hyperlink, I am allowing SpamHelp to store my IP and browser user agent and display them in a stats page.

EVERYTHING I put in this one post should crash the Spambutts.

Quote:

This page shows a 100 randomly generated email addresses. Email harvesters (also known as spambots) will crawl this page and store all of these hundred bogus email addresses in a database, and follow the link at the bottom of the page, filling them up with more invalid email addresses as they go along. They eventually end up in an infinite loop, and thousands of randomly generated email addresses before the spammer realises what's happening.

A similar program in action, by spamhelp.org
Interested in linking to us? Click here for more info

And the last entry?...

Will put them in a perpetual loop.

F O R E V E R

Bwuahahahahaha!

Sorry about your lost business, Mister Spamsuck....

Lots more on Google search...
http://www.google.com/search?hl=en&q=spambots
_________________

Last edited by MessiahMews on Wed Dec 05, 2007 10:59 am; edited 4 times in total

MessiahMews
Woman Warrior

Joined: 02 Feb 2006
Posts: 525
Location: Vaccination Liberation

Posted: Tue Nov 21, 2006 1:59 pm Post subject: How to Block Spambutts

http://diveintomark.org/archives/2003/02/26/how_to_block_spambots_ban_spybots_and_tell_unwanted_robots_to_go_to_hell _________________ Last edited by MessiahMews on Sun May 06, 2012 4:57 am; edited 4 times in total

MessiahMews
Woman Warrior

Joined: 02 Feb 2006
Posts: 525
Location: Vaccination Liberation

Posted: Thu Nov 23, 2006 8:14 pm Post subject: Subject: RE: Debora is a huge spammers!!!!

More discussion on getting rid of debora...

RE: Debora is a huge spammers!!!!

Quote:

All fifteen from Deborah came from the one IP address 70.86.164.242, which isn't yet in any RBL that I use.

IP address: 70.86.164.242
Host name: f2.a4.5646.static.theplanet.com

Banned it, did I?

From: Michael S. <admin <at> thenamegame.com>
Subject: RE: Debora is a huge spammers!!!!
Newsgroups: gmane.mail.virus.mailscanner
Date: 2006-11-12 21:24:21 GMT (1 week, 3 days, 14 hours and 43 minutes ago)

I did a grep on Debora in my logs and although that ip reveals the same ip as what you have the rest are from all different ips so ip blocking wont do it.

From: mailscanner-bounces <at> lists.mailscanner.info [mailto:mailscanner-bounces <at> lists.mailscanner.info] On Behalf Of Randal, Phil
Sent: Sunday, November 12, 2006 3:53 PM
To: 'MailScanner discussion'
Subject: RE: Debora is a huge spammers!!!!

We're not seeing because I wasn't looking...

All fifteen from Deborah came from the one IP address 70.86.164.242, which isn't yet in any RBL that I use.

Phil

From: mailscanner-bounces <at> lists.mailscanner.info [mailto:mailscanner-bounces <at> lists.mailscanner.info] On Behalf Of Randal, Phil
Sent: Sunday, November 12, 2006 8:40 PM
To: 'MailScanner discussion'
Subject: RE: Debora is a huge spammers!!!!

Use an RBL such as cbl.abuseat.org in exim, if you can - that'll probably get most of them.

We're not seeing any form the lovely debs here.

Phil

From: mailscanner-bounces <at> lists.mailscanner.info [mailto:mailscanner-bounces <at> lists.mailscanner.info] On Behalf Of Michael S.
Sent: Sunday, November 12, 2006 8:41 PM
To: 'MailScanner discussion'
Subject: RE: Debora is a huge spammers!!!!

As I mentioned, I want to catch them at smtp time and not after its been received therefore it needs to be implamented in exim.conf and not sa. Why accpt 25,000 debora spam messages and waste bandwidth accepting them when it could be done up front?

From: mailscanner-bounces <at> lists.mailscanner.info [mailto:mailscanner-bounces <at> lists.mailscanner.info] On Behalf Of Randal, Phil
Sent: Sunday, November 12, 2006 3:21 PM
To: 'MailScanner discussion'
Subject: RE: Debora is a huge spammers!!!!

Oh that it were so simple.

The current sa-updated 3.1.7 rules, various rules from www.rulesemporium.com and the ImageInfo plugin (http://www.rulesemporium.com/plugins.htm ) get most of them anyway, and FuzzyOCR 3.4.2 (from http://fuzzyocr.own-hero.net/wiki/Downloads ) catches many of what's left.

Cheers,

Phil

From: pawel <stemi15 <at> poczta.onet.pl>
Subject: Re: Debora is a huge spammers!!!!
Newsgroups: gmane.mail.virus.mailscanner
Date: 2006-11-22 09:33:53 GMT (1 day, 3 hours and 2 minutes ago)

IN RCPT SECTION:

deny senders = ^debora.* <at> .*

--
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

_________________

Last edited by MessiahMews on Sun May 06, 2012 4:46 am; edited 7 times in total

MessiahMews
Woman Warrior

Joined: 02 Feb 2006
Posts: 525
Location: Vaccination Liberation

Posted: Mon Jan 29, 2007 4:04 pm Post subject: Stop Spambot Registration

From the phpBB.com Forum Stop Spambot Registration _________________

MessiahMews
Woman Warrior

Joined: 02 Feb 2006
Posts: 525
Location: Vaccination Liberation

Posted: Tue Mar 27, 2007 7:46 am Post subject: Admin vs. Spam

And now, since I've been all over it?... and in more ways than one? ... The stock spam has went WAY down. _________________ Last edited by MessiahMews on Wed Jun 09, 2010 11:23 am; edited 1 time in total

MessiahMews
Woman Warrior

Joined: 02 Feb 2006
Posts: 525
Location: Vaccination Liberation

Posted: Wed Jun 09, 2010 9:37 am Post subject: Spam on blogs

I reminded myself today of this thread today, as I was working on a post about comment spam on WordPress blogs. They also spam via trackbacks & pingbacks too.

Thankfully I have the well known Akismet spam blocker in there, plus I can block IPs and keywords from ever making it to a comment. And it does a great job. http://akismet.com/

But, I want to have fun with the repeat offenders and trip them up like I did the Debora spammers in 2006.

You know, that DID work, and I've been using that Harvester Killer on MY website and and also in the VacLib sites. I remember having done this and that Debora spam stopped almost immediately. If every site would use these tools, it would cut down on ALOT of spam.

I'm gonna list the repeat offenders here too, as well as my blog and give them a double whammy. While these spambots look for fields to fill in instead of actual emails, they have to put an email in one of the fields.

I had fun tripping them all up a few years ago, so it should still be just as fun today, doing the same. Laughing

Okay, going to list the emails and IP addresses.

So let the games begin!!

blackjack gambling
qm67gj9w@hotmail.com
213.5.71.12

health insurance quotes
c8z50v9f@hotmail.com
213.5.71.12

car insurance quote
98tq27kc@hotmail.com
213.5.71.12

health insurance
zqfxdbhk@hotmail.com
213.5.71.12

individual health insurance quotes
q3x1njmv@hotmail.com
213.5.71.12

affordable business insurance
xdf0cv5n@hotmail.com
213.5.71.12

blackjack online
74608@gmail.com
213.5.71.12

health insurance companies
56868@gmail.com
213.5.71.12

black jack
78878@gmail.com
213.5.71.12

WooneVedWew
mileycyrus32412@gmail.com
217.23.14.106

viagra without prescription
64133@gmail.com
213.5.71.12

John1565
johne526@aol.com
96.31.86.184

buy levitra online
73061@gmail.com
213.5.71.12

automobile insurance
56272@gmail.com
213.5.71.12

health insurance plan
61272@gmail.com
213.5.71.12

ontokibia
67554rrmail@gmail.com
24.34.225.106

term business insurance
92356@gmail.com
213.5.71.12

car insurance company
45224@gmail.com
213.5.71.12

insurance rates
50141@gmail.com
213.5.71.12

cheap car insurance
49457@gmail.com
213.5.71.12

home insurance quote
89081@gmail.com
213.5.71.12

cheap health insurance
53374@gmail.com
213.5.71.12

buy zoloft
60258@gmail.com
213.5.71.12

physical therapist
asdfjieieie@asdf.com
173.233.65.154

business insurance companies
50056@gmail.com
213.5.71.12

insurance rates
66782@gmail.com
213.5.71.12

home insurance companies
48164@gmail.com
213.5.71.12

business insurance
84066@gmail.com
213.5.71.12

order viagra
53973@gmail.com
213.5.71.12

buy levitra online
79357@gmail.com
213.5.71.12

health insurance coverage
81392@gmail.com
213.5.71.12

term motorcycle insurance
60617@gmail.com
213.5.71.12

home insurance quote
89081@gmail.com
213.5.71.12

The IP address of 213.5.71.12 is a repeat offender. Bad dog!!

I'm gonna find a way to punish him.. Bwuahahahahaha!

Quote:

2:12 PM me: I have that Akismet going now on my blog and it's catching all the spam comments for me
so all I have to do is go in there and mass delete all spam with one click
2:13 PM Took me forever to figure it out
And I'm getting one from the same IP address over and over again
2:14 PM different sites and emails, but the bots come from the same IP, most of them
213.5.71.12

2:15 PM jairoramirez1: IP : 213.5.71.12 Neighborhood
Host : hosted-by.altushost.com Not OK!!!!!!!!!!!!!!!!!!
Country : Netherlands
thats where its from

I also used DNSStuff
http://www.dnsstuff.com/
to trace it.

Here is my result:

Quote:

Using 0 day old cached answer (or, you can get fresh results).
Displaying E-mail address (use sparingly -- this will make it more likely that you will trigger our rate limiting system).

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Information related to '213.5.64.0 - 213.5.71.255'

inetnum: 213.5.64.0 - 213.5.71.255
netname: ALTUSHOST
descr: AltusHost Inc.
remarks: Dedicated and VPS
country: NL
org: ORG-AI46-RIPE
admin-c: AHLU
tech-c: ACR5-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-by: ALTUSHOST-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-routes: ALTUSHOST-MNT
mnt-domains: ALTUSHOST-MNT
changed: info@altushost.com 20091007
source: RIPE

organisation: ORG-AI46-RIPE
org-name: ALTUSHOST INC.
org-type: OTHER
address: PO BOX 1106
address: Belize City
address: Belize
phone: +1.2176507100
fax-no: +1.8012892788
e-mail: info@altushost.com
mnt-ref: ALTUSHOST-MNT
mnt-by: ALTUSHOST-MNT
changed: noc@altushost.com 20090220
source: RIPE

role: AltusHost - Luxembourg
address: L-8389
address: Windhof
org: ORG-AI46-RIPE
e-mail: info@altushost.com
abuse-mailbox: abuse@altushost.com
admin-c: ACR5-RIPE
tech-c: ACR5-RIPE
mnt-by: ALTUSHOST-MNT
nic-hdl: AHLU
changed: info@altushost.com 20091111
source: RIPE

role: AltusHost - Contact Role
address: ALTUSHOST INC.
address: P.O. Box 1106
address: Belize City, Belize
address: Central America
phone: +1.2176507100
fax-no: +1.8012892788
e-mail: info@altushost.com
abuse-mailbox: abuse@altushost.com
admin-c: AHNT
tech-c: ACR5-RIPE
nic-hdl: ACR5-RIPE
mnt-by: ALTUSHOST-MNT
changed: info@altushost.com 20091020
source: RIPE

% Information related to '213.5.64.0/21AS49544'

route: 213.5.64.0/21
descr: ALTUSHOST INC.
origin: AS49544
mnt-by: ALTUSHOST-MNT
changed: info@altushost.com 20091013
source: RIPE

[The following lines added by www.dnsstuff.com per requirement by RIPE]
This service is subject to the terms and conditions stated in the RIPE NCC Database Copyright Notice.
Contact dnsstuff.com's 'info2@' address to report problems regarding the functionality of the service.

_________________

MessiahMews
Woman Warrior

Joined: 02 Feb 2006
Posts: 525
Location: Vaccination Liberation

Posted: Sun May 06, 2012 4:17 am Post subject: Re: Debora Spammers

Replaced the smileys and pics in previous posts. _________________

Display posts from previous:

	The Women Warriors Forum Index -> Miscellaneous	All times are GMT + 8 Hours
Page 1 of 1

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum