View Single Post
  #12 (permalink)  
Old June 4th, 2005
trap_jaw4 trap_jaw4 is offline
Moderator
 
Join Date: May 16th, 2003
Posts: 1,118
trap_jaw4 is flying high
Default

Quote:
Originally posted by rkapsi
2) Enable the Location column and Extended Tooltips. If a file has many (obviously too many) sources then take a look at the locations. There's certainly a pattern in the IP addresses and add it to your block host list (like 69.113.*.* - try to be as precise as possible).
You don't find any proper pattern in that kind of spam anymore. Some spammers are obviously intentionally sending lots of results with random IP addresses making it impossible for the end user to identify the few real addresses of the spammer in a group of results.

Quote:
3) Enable the Vendor/Version column in the download table. I hope you'll see a pattern whenever LimeWire says "download is corrupt" and it is a signal for you to process #2.
Most spammers are also using the LimeWire vendor code / vendor string of the most popular LimeWire version.

It is quite impossible to filter spam manually and some spam can't even be identified automatically on the client side: There are some spammers that send results consisting of filenames of existing files, a slightly varying file size, varying urns and completely random source addresses (incidentally the speed shows mostly T3+). These special spammers don't have the goal of advertising crap but of making it impossible to find and download certain files. And they are rather successful at it.
Reply With Quote