Ukraine and China are losing access to vowe.net
by Volker Weber
Spammers are starting to employ cheap labor in the Ukraine and in China to manually enter comment spam in otherwise protected weblogs. My current countermeasure is to block the whole network after a single incident.
Last login: Fri Sep 15 15:58:32 on ttyp1
Welcome to Darwin!
Raven:~ vowe$ whois 82.207.87.15
...
inetnum: 82.207.87.0 - 82.207.87.255
netname: UKRTELNET
descr: Ukrtelecom IP access network in Doneck
...
route: 82.207.0.0/17
descr: AGGREGATE BLOCK FOR UKRTELECOM
Blocking 82.207.0.0/17 will solve this forever. Bye bye UKRTELNET.
Tags: spam
Comments
Hmm... Wäre es nicht sinnvoller, die Email Adressen zu blocken, die einen anonymen nicht autentifizierten Freemailzugang bieten? Ich errinere mich, wie frustrierend das früher in meinen IRC Zeiten war von grossen amerikanischen Netzwerken gebannt zu sein, nur weil ich T-Online kunde war, und die gerade T-Online gebannt hatten....
Was sollen die armen Chinesen und die Ukrainer jetzt tun - dumm sterben? :-(
Gregory, comment spam, not e-mail spam. Look at the my visitor map. There are not many people who will be missing to go to vowe.net.
I guess Gregory meant to go by the email address entered in the comment form. Not that this couldn't be forged, but so do senders' addresses in email spam and so do IP addresses in comment spam (I don't knwo whether that's common in practice yet though).
Please explain how an arbitrary email address helps to discover comment spam.
Volker, I was wondering why you state that those guys have entered the comment spam manually. Can you please provide some details on this? I am asking because I have issued a Wordpress plugin for comment spam (Math Comment Spam Protection Plugin) that is working well according to several users, but of course it will not work anymore if there are some guys out there who enter spam by hand :-( Thx.
Without any doubt. I am sending you proof via email.
Just watch the frequency of access to know it's manual spam ... :-)
Indeed, that is funny. He needs about two minutes to load the front page. Eight minutes later, he loads one archive page. Another two minutes to fill out the form and 30 seconds for the captcha. At this speed he can do about 30 comments an hour, assuming he has about five windows open.
the comment spam that keeps passing through my filters is manual spam, i was guessing, too.
I just blocked a Ukrainian IP-block, too. Still looking for a Domino-based captcha tool, though - it might not work against manual comment spam, but at least it would keep me relatively safe from the labor-intensive removal of automated flooding.
Post a comment
Recent comments
Chris Linfoot
on Doc Scrubber cleans your Word document at 14:50
Philipp Sury
on Apple TV: First impressions at 14:50
Tony S Lee
on Jehovah at 14:46
Felix Binsack
on Michael Sampson: "Hello, I'm an Angry PC" at 13:08
Ben Poole
on Jehovah at 11:01
Volker Weber
on Jehovah at 10:53
Stefan Opitz
on Google voice search for iPhone finally out at 09:58
Sebastian Keil
on Apple TV: First impressions at 09:58
Klaus Peter Schmidt
on Apple TV: First impressions at 09:43
Martin Hiegl
on Jehovah at 09:30
Philipp Weirauch
on Sync Lotus Notes with iCal and Address Book on the Mac at 08:53
Volker Weber
on Apple TV: First impressions at 08:50
Alexander Koch
on Apple TV: First impressions at 08:29
Daniel Haferkorn
on Jehovah at 08:07
Markus Dierker
on Apple TV: First impressions at 07:07
Ed Brill
on Jehovah at 06:30
Colin Williams
on Apple TV: First impressions at 01:19
Joel Demay
on Apple TV: First impressions at 00:39
Volker Weber
on Apple TV: First impressions at 00:19
Ben Rose
on Apple TV: First impressions at 00:02
Joel Demay
on Apple TV: First impressions at 00:00
Heiko Müller
on This movie cannot be played at 22:48
Armin Roth
on This movie cannot be played at 21:00
Oswald Prucker
on This movie cannot be played at 20:50
Thomas Langel
on Heilmann bedauert (sich) at 20:01
Click here to subscribe
