[SpamCop-List] Re: multi spam messages with different IP for each

[Mike Easter]

Dar wrote:
> I don't get it. I'm receiving spam with the same subject approximately
> 25 to 30 per day, per subject, but all with different IPs. All
> advertising the same site: http://4drugs123.com/

Same spammer probably - you could easily filter that into Junk.

> Fancy spammer software that manages to change the originating IP
> for each and every spam message?

It's proxy/trojan abuse.  Spammer sends a bunch thru' each abused proxy,
rotating around which IP to abuse.  You get 'one' from each of the
abuses.

> [81.220.178.112])
> [24.35.12.226])
> [24.13.21.6])
> ([221.139.91.84])
> [4.8.221.72])
> [4.8.137.244])
> [24.178.128.43])

Same MO - modus operandi - for each of those;  I checked the top 3, they
are all listed in multiple abused proxy/trojan db/s.  If you were
filtering using those dnsbl/s, such as cbl or dsbl or something which
represents similar such as spamhaus, then all of those would be
spamidentified and in your Junk folder without even using the body.

-- 
Mike Easter
kibitzer, not SC admin