Hey guys and gals.
Thankfully I’ve finally got some attention from the spammers.
For those of you who haven’t been watching my site lately, I’ve gotten hit with a DOS - Denial of Service Attack.
http://en.wikipedia.org/wiki/Denial-of-service_attack
Thank goodness I don’t have any business operations on my site, so it doesn’t really matter. The network engineers at my host, I really want to thank them for the extra effort on shutting these jerks down!
There was a report released recently on Information Weekly that estimated the cost of the global spam problem at $21.58 billion USD!!
http://www.informationweek.com/news/security/vulnerabilities/showArticle.jhtml?articleID=59300834
To the spammers and bot-net managers, it’s like I warned you earlier, if you play with fire you get burned! Spam me at your own risk!
To the rest of you, I’ve decided to give you all the best little tools that I use to report these guys and get them shut down. I’ve already told you about Spamcop in a previous blog post.
http://www.spamcop.net/
For reference on my previous spam posts:
Message to Spammers!
My First Spammer
Alright so your like me and your tired of spam, the key to stop spam is not simply to filter it and ignore it, but to shut them down! You need to report them to the network managers in charge of the networks that the spammers are using for their bot-nets. Many times the network managers won’t do anything about it because they believe it’s not their responsibility. So in that case you have to make it their responsibility by also reporting it to the ISP that the network managers use to maintain their connection to the Internet backbone. Often times even these ISPs won’t do anything, so you have to report it to their backbone provider as well. In the case where the source is an international location, then you can also report it to the managers and tech people who run the domain name extension for that country. These are called country domain extensions:
http://www.webopedia.com/quick_ref/topleveldomains/countrycodeA-E.asp
So how do I get all this information without taking hours of research for each spam e-mail that I get? Can you really expect me to do that?!
Actually, no, you don’t need to spend hours of research for each spam e-mail, mostly it’s just a matter of some quick searches on some key sites then copy and paste the information contained in those search results.
I used to think using Spamcop was enough because it dropped my spam from 150 spam e-mails a day down to just 10, but I’ve gotten tired of the 10 spam e-mails I keep getting every day, so now I’m down to just a few. Usually only about 2 or 3, and usually only that when I post a blog entry.
So what tools do I use?
Once you’ve reported the spam e-mail to Spamcop they give you an IP for the source of the spam in the report and the spam trace. After I submit the Spamcop report, I usually click the “Back” button to return to the full Spamcop report. I copy and paste the entire Spamcop report to into a new e-mail. Then I copy and paste the IP - Internet Protocol address:
http://en.wikipedia.org/wiki/Internet_Protocol
You will see this as a series of numbers for instance 192.168.100.125
This is an example of an IP address, or it might look something like this:
192.168.1.25, or similar…
I copy and paste this set of numbers into this search site:
http://network-tools.com/
These guys give you the entire search results, even if there is another Internet provider. You see many times the source of the spam comes from some other location on the globe like Asia, or Africa and each of these regional Internet providers that provide who-is service and other who-is services don’t get you the information for all these other who-is regional services, but Network-tools.com does return results from the local, regional and global who-is results for all network addresses! It also tells you what company is the register of that ISP plus contact information for the tech’s, administrators and network engineers at those organizations and their providers all the way up the food chain.
Now how the heck do I get country domain extensions such as .uk, .br, .ng, etc…?
There is a little organization called Internet Assigned Numbers Authority, they have a little thing called Root Zone Database where you can find all the contact information for related managers and technicians of the country/organization for that given country extension.
http://www.iana.org/domains/root/db/
That should give you enough information to get started with your own spam reporting.
For all you spammers, I again, encourage you to spam me some more, so I can report your ass and shut you down! Spam me at your own risk, and don’t blame me if your bot-net gets shut down, your the one spamming!
You can spam me here, but don’t blame me when you get in trouble:
Iceversaka@hotmail.com
Cheers
~Seth