Re: Good-Bye rr.com

From: William Poaster (willpoast_at_jvyycbnfg.zr.hx)
Date: 11/18/05


Date: Fri, 18 Nov 2005 19:36:15 +0000

On Fri, 18 Nov 2005 19:11:27 +0000, Aragorn wrote:

> On Friday 18 November 2005 16:32, Alan Connor stood up and spoke the
> following words to the masses in /comp.os.linux.misc...:/
>
>> Those posts from the deranged spammer through rr.com were the
>> straw that broke the camel's back.
>>
>> Add them to the fact that rr.com is a favorite of trolls and
>> doesn't even respond to complaints...
>>
>> I'm leaving any posts from them on the server from now on.
>>
>> The entire posts.
>>
>> And any responses to them.
>>
>> Haven't decided about telia.net/com yet.
>
> As far as I know, Telia is a Swedish ISP. We've already had previous
> experiences with zombies/crackers from that ISP, but I guess every ISP
> has such cretins among their customers.
>
> I've seen three distinctly different IP addresses being used in this
> attack - it was not just directed at this group, by the way - and they
> probably lead to zombie PC's.

>From what I've seen [before invoking a Leafnode filter(s)] some of the
posts look like a Hipcrime flood attack.
For example, this post:
http://groups.google.co.uk/group/comp.os.linux.misc/msg/6de9a37eef304241?dmode=source&hl=en

is pure gibberish, typical of a Hipcrime 'bot.

If you're not familiar with Hipcrime, this may explain things;-

http://www.killfile.org/dungeon/why/hipcrime.html

More here:-
http://www.ganesha.org/ptb/hipcrime.html

http://en.wikipedia.org/wiki/Hipcrime

-- 
Top 500 supercomputers, 
Linux:74.4% ; Unix:20%
http://www.top500.org/lists/2005/11/l/Operating_System_Family
http://www.top500.org/lists/2005/11/l/Operating_System


Relevant Pages

  • Re: Where is Tom?
    ... On Fri, 02 Dec 2005, in the Usenet newsgroup sci.crypt, in article ... His ISP is rogers.ca - their abuse desk is about as useless as a bag ... >sending huge amounts of posts to zillions of news groups. ... google for 'hipcrime'. ...
    (sci.crypt)
  • Re: Wal Mart wines.......:-)
    ... the offended part should contact the ISP of forgery, ... him having forged numerous posts in my name as ... I have a road runner ISP and news server, ... a person who attracts trolls and responds to them unknowingly to their ...
    (soc.retirement)
  • Re: Wal Mart wines.......:-)
    ... the offended part should contact the ISP of forgery, ... him having forged numerous posts in my name as ... I have a road runner ISP and news server, ... a person who attracts trolls and responds to them unknowingly to their ...
    (soc.senior.issues)
  • OT (very much so) Are You Chris Barker (The Midwich Cuckoo)?
    ... Despite your claims of superior intellect, your posts are constantly ... Yourself, your ISP, another ISP, another ISP, yourself again, your ... Is your right arm about three times the size of your left arm? ... Mainly a: You're not Chris Barker. ...
    (uk.media.tv.misc)
  • Re: SPAM vs. Trollin (was: Linus speaks - The World Listens)
    ... does his ISP use expiring ... >specifically prohibited in the newsgroups FAQ. ... Who's talking about reporting to an ISP? ... SAID something in his posts. ...
    (comp.unix.solaris)