Well, easier said than done. I expanded status, and for an instance, an ip showed up, then disappeared. The spammers use high speed servers, so the downloads happen pretty fast. For now, I'll just avoid any lists containing files identical in size.