Comments on: Project Honey Pot tracking comment spammers

By: Igor Berger

Igor Berger — Sun, 30 Dec 2007 01:46:41 +0000

Thank you love…I am so happy you care for all us hard working little guys.

Have Fun,
Igor

By: Igor Berger

Igor Berger — Sat, 29 Dec 2007 13:54:55 +0000

SpamHuntress, I am working with http://www.aboutus.org now usings PHSDL technology to track Malware Spam domains.

You can see it in the Malware template
http://www.aboutus.org/Template:MalwareSite

I have also instaled PHSDL Spam filter on my new blog
http://www.igorthetroll.com/blog/

It works great, stopping Malware domain Spam while not impeding free speach like some over Spam filters with false positives.

I have also become a developer for BlogSpamAssassin
http://wiki.apache.org/spamassassin/IgorBerger

And contrubuting to StopBadware.org
http://groups.google.com/group/stopbadware

It has been very productive year and, I hope next year it is just as good for all of us fighting Spam and Malware to keep the Internet clean and safe for the whole Internet Global Village.

Thank you,
Igor

By: Igor Berger

Igor Berger — Tue, 27 Nov 2007 19:01:09 +0000

Matthew, what’s up with Akismet? It is flagging all URLs.
It flags WikiPedia and even Google…

SEJ nuked it and went back to captcha, Akismet is not reliable for relevent commentry blog community.

By: Igor Berger

Igor Berger — Thu, 22 Nov 2007 17:05:50 +0000

Matthew I spoke with Lance Spitzner from honeypot.org and he advised me to contact you.

I have a honeypot on http://www.travelinasia.net forum administrated by http://www.phsdl.net

Please take a look at PHSDL hot list
http://www.phsdl.net/project_honeypot.php

Most of the domains on the list are Zlob ActiveX Trojan Spawners.

By: Matthew Prince

Matthew Prince — Sat, 28 Apr 2007 22:34:13 +0000

The data for comment spammers is very, very shallow right now. We only turned the system on about 2 weeks ago and it still isn’t running on all our honey pots. The data for harvesters is much deeper. And we’re beginning to experiment with including some data from the spam servers and dictionary attackers which have fingerprints of compromised machines. That data set is fairly vast.

Would love to work with Akismet (or others) with good, reliable comment spammer data. Matt: feel free to drop me a line through the Project Honey Pot website and we can see if there are any ways in which we can exchange data.

By: Matt

Matt — Sat, 28 Apr 2007 00:02:00 +0000

My initial tests with the system aren’t very promising, the dataset looks fairly shallow, but if it gets better I’d definitely be open to using it inside of Akismet.

By: Manni

Manni — Thu, 26 Apr 2007 10:14:53 +0000

They now have their own ip blacklist online: http:bl. IPs in this list are the ones caught by the honey pot network. This looks very, very good.

We now need to get this is the anti-spam modules of wikis, blogs and other stuff on the net. Since it’s quite easy to implement, I hope that Akismet and friends will soon feature this blacklist.

By: Lemat

Lemat — Wed, 25 Apr 2007 21:43:22 +0000

I have my own honey pot and I have received comment spam recently from 70.87.176.155, web page at this IP is saying “Apache/1.3.34 Server at 3hbo8n info Port 80″, web page at 3hbo8n info (different virtualhost at this IP) is loading in the frame www socialnetworkcenter com/default.asp?p=80247&t=intermarkmedia

www socialnetworkcenter com is 69.6.21.7, and whois said:
WholesaleBandwidth, Inc. WHOLE-2 (NET-69-6-0-0-1)
69.6.0.0 - 69.6.79.255
WholesaleBandwidth = Scott Richter

Now I’ve got “conspiracy theory”, that Snotty didn’t give up spamming at all…

I wonder if P.H.P. is able to follow the clues like I did…
(I have removed dots in domain names)

By: Han K.

Han K. — Tue, 24 Apr 2007 21:59:21 +0000

I’ve got several honeypots on various websites (which I won’t list here) but none of them produces a comment form (I tried from a couple of IP addresses), even though they claim that no software update is necessary from my side. I don’t know what kind of algorithm they use to produce comment forms.