-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On Mon, 2018-06-04 at 18:10 -0400, Jim Popovitch wrote: > On Mon, 2018-06-04 at 14:48 -0700, Russell Clemings wrote: > > They seem to be changing their tactics pretty much regularly now. > > Just > > tailing the subscribe log I see all of these: > > > > Jun 04 21:28:16 2018 (16689) LISTNAME1: pending Steven Lugo < > > supp...@quickbitcoin.co.uk> 159.203.88.55 > > Jun 04 21:30:06 2018 (17063) LISTNAME1: pending Steve Asher < > > supp...@bitcoin.com.au> 185.237.98.51 > > Jun 04 21:30:38 2018 (17503) LISTNAME2: pending Sterling Leng < > > supp...@vaultoro.com> 185.237.98.51 > > Jun 04 21:31:26 2018 (17651) LISTNAME3: pending Cristina Hibbard < > > supp...@vaultoro.com> 59.152.95.54 > > Jun 04 21:32:01 2018 (17754) LISTNAME3: pending Kirk Maddox < > > supp...@bitcoin.com.au> 185.237.98.51 > > Jun 04 21:33:58 2018 (18188) LISTNAME4: pending Jarrod Rand < > > supp...@vaultoro.com> 80.211.240.206 > > Jun 04 21:36:54 2018 (19212) LISTNAME5: pending Anna Glen < > > supp...@quickbitcoin.co.uk> 159.203.88.55 > > Jun 04 21:36:59 2018 (19231) LISTNAME1: pending John Savage < > > supp...@bitflyer.com> 39.137.69.9 > > Jun 04 21:38:21 2018 (19476) LISTNAME4: pending Sarah Adami < > > supp...@coindirect.com> 185.237.98.51 > > > > Interesting, I see delimited email addrs for those same domains. > > Jun 04 20:57:11 2018 (5670) users: pending James Sturgill > <support+qjrr > @quickbitcoin.co.uk> 111.13.56.16 > Jun 04 21:19:10 2018 (7469) users: pending John Heninger > <support+qwnpn > @bitflyer.com> 152.231.81.122 > Jun 04 21:35:52 2018 (8894) users: pending Judith Route > <support+xwwrk@ > vaultoro.com> 149.202.38.124 > Jun 04 21:42:25 2018 (9149) users: pending Donna Watts > <support+yvdmgcn > @vaultoro.com> 212.73.137.45 > Jun 04 21:49:33 2018 (9323) users: pending Justin Rybij > <support+jzmpfp > r...@bitflyer.com> 67.197.233.15 > > FWIW, > > here's the list I've accumulated so far: > alec768+kx...@gmail.com > alec768+kyc...@gmail.com > alec768+orf...@gmail.com > alec768+tm...@gmail.com > alexmanalo76+e...@gmail.com > alexmanalo76+hrr...@gmail.com > alexmanalo76+nbkd...@gmail.com > alexmanalo76+vhffi...@gmail.com > alexmanalo76+vlk...@gmail.com > alexmanalo76+vns...@gmail.com > alexmanalo76+zas...@gmail.com > cybertuna94+c...@gmail.com > cybertuna94+gjuht...@gmail.com > cybertuna94+jh...@gmail.com > cybertuna94+wdlg...@gmail.com > cybertuna94+xgos...@gmail.com > cybertuna94+x...@gmail.com > desertkaiju+fy...@gmail.com > desertkaiju+piurl...@gmail.com > desertkaiju+rv...@gmail.com > desertkaiju+ta...@gmail.com > desertkaiju+vwsg...@gmail.com > desertkaiju+wf...@gmail.com > desertkaiju+z...@gmail.com > khongthong94+badu...@gmail.com > khongthong94+bhct...@gmail.com > khongthong94+veya...@gmail.com > spikedmauler+j...@gmail.com > sqrlyjack+hbql...@gmail.com > sqrlyjack+hd...@gmail.com > sqrlyjack+ny...@gmail.com > sqrlyjack+vamj...@gmail.com > sqrlyjack+vdflt...@gmail.com > support+jzmpf...@bitflyer.com > support+q...@quickbitcoin.co.uk > support+qw...@bitflyer.com > support+xw...@vaultoro.com > support+yvdm...@vaultoro.com > tinyowl94+dcjf...@gmail.com > tinyowl94+ftmyd...@gmail.com > tinyowl94+kff...@gmail.com > tinyowl94+pfa...@gmail.com > tinyowl94+s...@gmail.com > tinyowl94+zo...@gmail.com > yllwdg+gitv...@gmail.com > > And these are the IPs: > > 101.132.136.83 > 103.35.168.166 > 110.37.200.83 > 111.13.56.16 > 121.10.118.70 > 138.122.2.7 > 139.224.24.26 > 144.76.62.29 > 149.13.80.46 > 149.202.38.124 > 150.109.44.245 > 152.231.81.122 > 176.235.99.166 > 179.180.144.28 > 181.118.183.153 > 186.251.102.85 > 187.106.238.241 > 187.12.46.218 > 187.190.221.71 > 187.245.88.185 > 188.211.227.149 > 189.76.93.64 > 190.12.47.246 > 190.144.39.34 > 190.214.1.26 > 191.0.70.90 > 193.165.144.66 > 197.210.216.22 > 197.255.255.91 > 200.165.177.66 > 200.202.229.218 > 201.10.154.50 > 201.49.98.58 > 202.179.186.138 > 202.179.4.70 > 202.191.121.171 > 212.49.84.113 > 212.73.137.45 > 218.60.8.99 > 221.214.208.226 > 36.67.233.131 > 67.197.233.15 > 78.66.102.104 > 80.122.84.246
BTW, most of those IPs are listed in the XBL (https://www.spamhaus.org/ xbl/). I think I'll work on a patch to block signups from IPs in the XBL and domains in the DBL (https://www.spamhaus.org/dbl/) - -Jim P. -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPxwe8uYBnqxkbORSJxVetMRaJwUFAlsVvN8ACgkQJxVetMRa JwUaug/+IUCgta0kc6d6zUUvVqo26UGlMGA7xGyhSFwc5MHArRMp9HL02ZvvB3V5 7COmUt1BDpuXN+ANESWVan/ZUQtwo3B6TbJlItrquUyOlr0vsOAcIENaLF9M70Zn lZNq7RbiuX1NqLwgCE5+XUBLqrBv/UN01TLjPyYIMhKvWzes/rFpyYNIoUECLX1J DVqvlo03EQddZmccVFyQ9FBBJfYKYOjWx2U6Im2mtf11tRIrPScGNZHrUzEYXJJr 1ilFBEr4MAPAdGgN+NiX7X7ei/O516lZGpXyjt60Mod1x62FCxXTUTYEUQ8Lshza kULK8QtECBANbNZP23NG7U7NnLINbC8qKkSKh5mkmhjlU+qhLh+6STTv/uyA5s6v MllrEt72ycJIFH7Xt5hUH3RuHlNR/1OgM4d8yLbDeCy5S/WjXxfGG/PeSIBCtG3l lZw/thIBxRcxOCa/s55PBvhIz0qgv1YSA4RgCBbw5MhsO+GbV9+/lX5/fkNKd+uE nntLBr9TPtuRDLAMOatcz3L/Yc355DXVteGNxi4eHhcJJboWr24ACOChVCvsy63y RH2lrZC+jsVr+f+HP4oZdoYGEtUZdxmVZYalRDmgHyFQL1pOfBzt7XyA11yFgWYq /sSUuVrQxIeSmBjnnfyJWI8xC/ZDi8qniWaWl7AKsIQsXCp2tng= =duQI -----END PGP SIGNATURE----- ------------------------------------------------------ Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
