anyone got this spammed?
<Akihiko> plz dont tell anyone ! the site is http://www.koolpages.com/porn/sexo.zip
<Akihiko> you are the one who ask the site aren't you ?
-
thanks
this spam!
http://www.koolpages.com/porn/sexo.zip
Hmm, I suppose the easiest thing to do would be to target the "sexo.zip" on that line. Going for the whole URL doesn't really make sense:
Spamfilter: sexo\.zip
"you are the one who ask the site aren't you ?"
Spamfilter: ^you are the one who ask the site aren't you \?$
Hmm, I suppose the easiest thing to do would be to target the "sexo.zip" on that line. Going for the whole URL doesn't really make sense:
Spamfilter: sexo\.zip
"you are the one who ask the site aren't you ?"
Spamfilter: ^you are the one who ask the site aren't you \?$
-ChatSpike IRC Network [http://www.chatspike.net]
-Denora Stats [http://denora.nomadirc.net]
-Omerta [http://www.barafranca.com]
-Denora Stats [http://denora.nomadirc.net]
-Omerta [http://www.barafranca.com]
-
- Posts: 12
- Joined: Tue Jan 11, 2005 7:51 pm
I gave you the spamfilter, you work the rest of the commands out :p
As for blocking the host, that's generally a waste of time. They just get uploaded somewhere else and the fun begins all over again.
If I read correctly, he was worried somone would download it from the link you gave, hopefully people on these boards have more clue than that.
As for blocking the host, that's generally a waste of time. They just get uploaded somewhere else and the fun begins all over again.
If I read correctly, he was worried somone would download it from the link you gave, hopefully people on these boards have more clue than that.
-ChatSpike IRC Network [http://www.chatspike.net]
-Denora Stats [http://denora.nomadirc.net]
-Omerta [http://www.barafranca.com]
-Denora Stats [http://denora.nomadirc.net]
-Omerta [http://www.barafranca.com]
The second spamfilter is probably more useful for that variant of bot, but i can also (vaguely) imagine a real person saying that.w00t wrote: Spamfilter: sexo\.zip
Spamfilter: ^you are the one who ask the site aren't you \?$
The first is only useful for so long as it uses the filename sexo.zip. That one is fairly safe (how many real people are gonna be linking to a zip called sexo.zip? )
-ChatSpike IRC Network [http://www.chatspike.net]
-Denora Stats [http://denora.nomadirc.net]
-Omerta [http://www.barafranca.com]
-Denora Stats [http://denora.nomadirc.net]
-Omerta [http://www.barafranca.com]