The "I Found A Spammer" Thread

Got feederclamp account and IP banned. I left Mandy June - when I queried the IP, I get this from RIPE, which can explain the discrepency between location and website:

inetnum: 0.0.0.0 - 255.255.255.255

netname: IANA-BLK

descr: The whole IPv4 address space

country: EU # Country is really world wide

org: ORG-IANA1-RIPE

admin-c: IANA1-RIPE

tech-c: IANA1-RIPE

status: ALLOCATED UNSPECIFIED

remarks: The country is really worldwide.

remarks: This address space is assigned at various other places in

remarks: the world and might therefore not be in the RIPE database.

mnt-by: RIPE-NCC-HM-MNT

mnt-lower: RIPE-NCC-HM-MNT

mnt-routes: RIPE-NCC-RPSL-MNT

source: RIPE # Filtered

 
I know we had another member with that same Chattanooga website, that's the thing. I can't find the thread about it because the search function doesn't seem to want to work with my account suddenly, but this is not the first time we've had a member link there. I'll find it, unless someone else remembers.

 
knapplc said:
I know we had another member with that same Chattanooga website, that's the thing. I can't find the thread about it because the search function doesn't seem to want to work with my account suddenly, but this is not the first time we've had a member link there. I'll find it, unless someone else remembers.
Click to expand...
Gotcha. I did a search on the term "Chattanooga" and came up empty. Well, actually, there are three pages of topics with that word in it. There are two in our hidden forum, but one of them is this thread and the other is in the Junkyard (Perlman is a moron, I think it's entitled).

 
Just found some time to check the new member list.

forklifttruck is a curious member. IP resolves to Alberta, Canada. Not sure this is a spammer, but it's a similar name to the latest batch of spammers.

"donie" is from Sri Lanka, and their About Me page had this website: http://www.dateawomen.tk, which I wouldn't recommend clicking on. Probably full of popups and viruses. I flagged him as a spammer, nuked the links and otherwise cleaned up the profile.

Finally, SpyGear is from Manila, Philippines, and had links to this website pretty much everywhere: http://www.thespycorner.com. I also flagged him as a spammer, nuked the links and otherwise cleaned up the profile.

 
It is a common spam address, but I think it could be just the Chinese equivalent of a msn or yahoo email. A common throwaway email that could be used for spam purposes.

 
Got the account banned. I also tried wild-carding the 180.x.x.x address space, as well as the @126.com and @163.com email addresses. Let's see if that helps a bit.

Not sure the ban filter will react to the wildcards the way we want, but worth a try.

 
Back
Top