Spammers are STUPID!

[giza]

So, I got my nightly report from my logfile analyzer on my mailserver the other day, and saw thousands and thousands of bounces. Apparently some spammer was trying to spam non-existant e-mail addresses on haltabuse.org, to the rate of 20 e-mail addresses every 5 minutes. This is known as dictionary spamming.

Okay, so I was annoyed. One access.db entry later, and now his attempts to send e-mail were met with the error "Bite me". But, he's STILL at it:

Apr 4 14:03:46 plushie sendmail[19137]: ruleset=check_relay, arg1=200.162.239.55.sao.ajato.com.br, arg2=200.162.239.55, relay=200.162.239.55.sao.ajato.com.br [200.162.239.55], reject=550 5.0.0 Bite me

Apr 4 14:08:20 plushie sendmail[19228]: ruleset=check_relay, arg1=200.162.239.55.sao.ajato.com.br, arg2=200.162.239.55, relay=200.162.239.55.sao.ajato.com.br [200.162.239.55], reject=550 5.0.0 Bite me

Apr 4 14:12:56 plushie sendmail[19374]: ruleset=check_relay, arg1=200.162.239.55.sao.ajato.com.br, arg2=200.162.239.55, relay=200.162.239.55.sao.ajato.com.br [200.162.239.55], reject=550 5.0.0 Bite me

*shakes his head* It amazes me how stupid spammers can be. You would think that his software would at least check to see if the e-mail is being accepted or not.

Twits.

Comments

[kristenq.livejournal.com]

Bite me. That's great, dude. ;-)
Sorry you had to deal with the tard farm today. Don't we all, don't we all..

[khakiwolf.livejournal.com]

This is a perfect exmple of a guy with a computer and a lot of time on his paws. Sometimes I get frustrated at all the spam I get and just reply to each one saying," Go fuck yourself! Don't send mail to this address again!"

Also, I've been getting e-mails with like 2-3 viruses in them. Norton catches one, but the other two aren't quarantined. Weird. Well that's why I just delete them. Stupid Norton. And my ISP is supposed to have Spam AND virus protection.

[giza.livejournal.com]

>This is a perfect exmple of a guy with a
>computer and a lot of time on his paws.
>Sometimes I get frustrated at all the spam I get
>and just reply to each one saying," Go fuck
>yourself! Don't send mail to this address again!"

I hate to be the bearer of bad news, but assuming that the e-mail address isn't forged, there's a good chance that the spammer not only isn't reading your e-mail, but adding it into his list of "known good e-mail addresses" so that he can send more spam to it. (Similar to the so-called "remove lists", which have a very poor track record of honesty and effectiveness...)

Wanna make a spammer's life miserable? Use SpamCop (http://www.spamcop.net/) and complain to his ISP(s). Afterall, when he loses his account, he can't send out any more spam, now can he? :-)

[afya.livejournal.com]

You know what's REALLY annoying? Having people turn round and start flaming YOU for spamming THEM, because some spamming little b*gger has put your address in the From field.

So, a plea to anyone who uses Spamcop: use it with caution. Please don't file a complaint about the address the email SAYS it's from. Spamcop politely tells you the servers you SHOULD be complaining to, so don't tick any boxes that default off unless you're sure. :)

On the subject of spam though, allow me to recommend the spam filter PopFile - brought to my attention by Jarrod on TLK-L. After only about a week's training, it is correctly identifying more than 95% of my emails as spam or not-spam. And if it gets it wrong, you can easily retrieve the not-spam and make it learn from its mistake. :)

[blaze-heartfire.livejournal.com]

I have soooo given up on replying to them, mainly I just have outlook express screen for about 50 different phrases and delete the spam, yet apparently now their just sending image advertisements. *would give anything to be in the room with a spamera and a Eva...* ^-^

The other day...

[coyoteden.livejournal.com]

I think I saw a mail server actually get tired of eating all the spam this one employee had signed up for.

She actually opted-in for a lot of this junk, and she'd get a couple dozen chunks o' spam an hour. Well, you can't really call it spam if it's requested, but still...

She stopped getting new mail. I checked the server logs:

"local queue for user xxxxxx has received 300 messages in the last 10 seconds. Queue suspended"

...no she didn't. The SMTP logs show she got maybe 30 messages over the last hour. A few minutes later another message comes in and "...has received 301 messages in the last 10 seconds. Queue Suspended"

WTF?? Somehow, there was a corrupted timestamp in her queue. But why her and no one else?
Simple, the server got sick of all the crap.

[taral.livejournal.com]

Yeah, that's when I use iptables to tarpit the source IP.