71% of Spam Servers are Located in China 410
aspelling writes "
We all know that majority of consumer electronics and other goods sold
in US stores is produced in China. But China specialty extends beyond
consumer electronics, clothes and automotive components. According to Commtouch Software research 71%
of all spam servers are located in this People Republic. "Since Jan. 1,
we've seen probably a 30% to 40% increase" in spam traffic" Commtouch
CEO says. BusinessWeek reports
about this issue."
Obligitory.... (Score:5, Funny)
Re:Obligitory.... (Score:5, Funny)
Re:Obligitory.... (Score:3, Funny)
Semi-funny ways to deal with spammers! (Score:3, Funny)
First, lets use an M-1 Carbine to hunt 'em like rats! [komar.org]
After that, have the Three Shotgun Dudes shoot 'em up! [komar.org]
If the spammer is still kick'in, fire an RPG at 'em! [komar.org]
And finally, to finish 'em off, use these weapons of mass destruction! [komar.org]
Put whatever is left of the spammer on my back yard, and I'll have The Incre [komar.org]
How Ironic (Score:5, Insightful)
Re:How Ironic (Score:5, Insightful)
They don't really care that much about what the outside world can read about China, as long as that information doesn't get back into the country.
Obligitory Spam, the food product, link.... (Score:4, Informative)
(Funny on slashdot how I have to qualify Spam as a food product...)
Re:Obligitory Spam, the food product, link.... (Score:4, Insightful)
That might be because the food product is properly called SPAM. (Follow your own links!)
Re:Obligitory Spam, the food product, link.... (Score:3, Informative)
They are found here: [spam.com]
Proper Trademark Use Guidelines.
Please Do:
Always put the trademark SPAM in all capital letters. Follow SPAM with "Luncheon Meat" or other descriptor. Remember, a trademark is a formal adjective and as such, should always be followed by a noun.
Spam museum (Score:3, Funny)
This is the first can of spam that was ever produced by Hormel. It was made in 1937 in Austin, Minn.
Not too long after, it was shipped in mass quantities to Allied forces in Europe, who found it a delicious alternative to starvation.
*Picks up the can on the pedestal, pops it open, sticks a fork in and takes a bite. *
Mmmm. Fresh as the day it was made!
Re:Obligitory.... (Score:2, Funny)
Taiwan (Score:2, Informative)
Re:Taiwan (Score:4, Insightful)
Does the story differentiate between the two?
Re:Taiwan (Score:5, Insightful)
Re:Taiwan (Score:4, Insightful)
They are talking about the Peoples Republic (of China), captial Beijing, "China is notorious for its Internet censorship efforts".
This doesn't sound like they are talking about Taiwan/Republic of China, (provisional) capital Taipei.
Avoid the Noid, he ruins web experiences (Score:5, Informative)
Go to the press release [commtouch.com] (it is listed on the page) and click on the link for the white paper
But surprise, surprise, the "best solution" is the one they sell, but it's still an interesting read.
Re:Avoid the Noid, he ruins web experiences (Score:5, Informative)
Maybe it is in the subtle difference of spam messages sent, and servers used to send them.
Re:Avoid the Noid, he ruins web experiences (Score:2)
After posting I went back for a detailed read and whil
It works like this... (Score:3, Insightful)
1) The top spammers (the people) are from the USA.
2) They like to use relays (computers) in China, since most of the ISPs here don't like spammers and spamhauses (ISPs set up to do nothing but host spammers, they may even pretend to take down accounts while just shifting them to different ones, etc. Evil, really.)
3) They're also now using worm/virus-infected hosts as relays. I recently helped a friend clean out a rather nasty infestation which was being used as a spam relay
Use blacklists... (Score:5, Interesting)
If you don't know anyone in China (or Asia) you can use a blacklist for the whole region. My firewall with OpenBSD's awesome spamd [openbsd.org] autoupdates its tarpit blacklists every couple of hours. One good list for Asian IPs is here. [okean.com]
I love the idea of tarpitting, seeing spammers connections being tied up for ~3300 seconds (my highest) warms my heart. If more people did it that'd mean less overall spam traffic.
Re:Use blacklists... (Score:2, Funny)
Re:Use blacklists... (Score:2)
"but are 71% of the chinese spammers?"
Reverse the words chinese and spammers and your answer is most likely yes.
Re:Use blacklists... (Score:4, Insightful)
here are proves: (Score:4, Informative)
Re:Use blacklists... (Score:4, Insightful)
Re:Use blacklists... (Score:3, Funny)
Re:Use blacklists... (Score:2)
Re:Use blacklists... (Score:5, Informative)
Tarpitting discourages spamming without permanently blocking an offending IP address. Tarpitting works by monitoring traffic and applying sluggish responses to remote IPs showing spam-like behavior. For example, if an IP sends too many messages to users during an email session, tarpitting starts slowing MDaemon's response. If the spam-like behavior includes excessive unknown addresses during a session, the remote server can be suspended from access for a user-specified amount of time.
Re:Use blacklists... (Score:5, Insightful)
It's like buying Lucky Charms cereal, then filtering out all the marshmallows and throwing them in the garbage because they're not healthy. Very true, but if that's how you feel, why bother buying Lucky Charms?
Surely it would be more effective to implement challenge-response, or simply boycott email in favour of IM or a secure messageboard/contact form, or whatever you prefer. The problem is with email, not with Asia.
Besides, I think this study is bogus. All the studies I've previously seen pointed squarely at the USA as the primary source of spam. Empirical evidence from my own email box bears this out. Most of the spam I receive tends to come from residential cable modem/DSL lines in various countries, predominantly the states. I suspect that these are either virus-hijacked boxes, or people being paid to send spam through their home connection (ie, the ads placed on telephone polls: "Have an internet connection at home? Make up to $4,000/month with no effort required! Call now!")
Re:Use blacklists... (Score:5, Funny)
Re:Use blacklists... (Score:5, Insightful)
Except, it's more like buying a box of lucky charms expecting to find marshmallows and the regular oats (or whatever it is) cereal and finding a bunch of dirty needles in it as well. SPAM is not supposed to be a part of the web. It's an unwelcome, criminal blight on it and it's being perpetrated by people who are actively trying to ruin a good thing for everyone else. I find it perfectly acceptable that these people be relegated to their own corner and thrown off the web.
Re:Use blacklists... (Score:3, Insightful)
Re:Use blacklists... (Score:3, Insightful)
Oh baloney. There are a bunch of open relays in China, so block them. If the admin's too dumb to close the relay, that's the admin's problem and we shouldn't suffer for their inability to maintain their server properly. In fact, I support blacklisting ANY open relay that's being used by spammers regardless of what country it's in.
Besides, you don't have to block them altogether. You can blacklist the IP blocks in your mail server and not in your web server. If the IP block can't use e-mail responsibly, I s
That's fine (Score:4, Informative)
It also could work to help force people to get their shit straight. Many ISPs (domestic and foriegn) are just non-responsive to SPAM/hacking complaints. One proven tactic that works is the threat of mass bans. Between a proposed UPD and a ban by the members of Nanog, UUNET was convinced to become more responsive to complains of network abuse.
The Internet does not have a police force so the community polices itself. If a group won't play by the rules, they shouldn't be supprised to find themselves excluded from a large part of it.
Re:Use blacklists... (Score:3, Interesting)
You didn't read the article did you?
It doesn't claim that the source of spam is 71% China. It claims that the indicated web server in the spam is located in China 71% of the time.
You can blacklist the entire Asian world and you won't guarantee any reduction in spam itself.
Challenge - Response is the most fucked up solution I've ever seen. I tried and it got spammed heavily for using it. It doesn't work. It's a resource pig and it pisses a lot of people off.
The problem isn't Asia or anyone else. The
Re:Use blacklists... (Score:5, Informative)
Re:Use blacklists... (Score:2)
OpenBSD has added greylisting [puremagic.com] support to spamd in 3.5, and that feature is very efficient in dealing with spam as well as e-mails from infected Windows machines. SpamAssassin has much less work todo now :-)
And.. (Score:2)
Or do they just concern themselves with what's information is comming into their country..
Re:And.. (Score:2)
The problem would be solved in short order... at least until the next crop of servers pops up.
Re:And.. (Score:2)
They don't give a rat's ass what goes on, as long as they are earning hard currency for doing it. If CCCP hadn't fallen, you can guarantee they'd be doing the same thing.
The Great (fire)Wall of China (Score:5, Insightful)
Re:The Great (fire)Wall of China (Score:3, Insightful)
Because the moment the world accidently blocks John Chang's e-mail from China to his son in the USA, people would start bitching about 'censorship of the internet' and how 'the first amendment was being trampled on because they can't chose to recieve thousands of spam messages.' The only reason China can get away with this is because they have a communist government. The moment it falls apart (if ever) you can expect to see the f
Re:The Great (fire)Wall of China (Score:3, Funny)
What, and deny ourselves the email equivalent of B grade Kung Fu movies?
"Do Viagra need you? Make man you strong and sexy you. Click please link here below."
No, no. reforward all spam to the Chinese Emabssy (Score:2)
Great (Score:5, Funny)
Yet another IT service being outsourced overseas........
Write your congressperson and demand that SPAM jobs be kept at home!
blacklist the netblocks? (Score:3, Interesting)
First question is what netblocks can I block to effectivley ban all of china?
Re:blacklist the netblocks? (Score:3, Informative)
# All China netblocks [ http://www.apnic.net/apnic-bin/ipv4-by-country.pl ? country=cn }
table <china> { 61.28.0.0/15, 61.48.0.0/13, 61.128.0.0/10, 61.232.0.0/13, 202.0.110.0/24, 202.0.160.0/20, 202.0.176.0/22, 202.4.128.0/19, 202.4.252.0/22, 202.14.88.0/24, 202.14.235.0/24, 202.14.236.0/23, 202.14.238.0/24, 202.20.120.0/24, 202.22.248.0/21, 202.38.0.0/20, 202.38.32.0/19, 202.38.64.0/18, 202.38.128.0/17, 202.90.0.0/22, 202.90.252.0/22, 202.91.0.0/22, 202.91.128.0/22,
Re:blacklist the netblocks? (Score:5, Informative)
That's the thing... (Score:5, Funny)
Firewalling? (Score:2, Interesting)
Old Joke (Score:4, Funny)
C'mon... (Score:2, Funny)
This may seem like an easy answer... (Score:2, Interesting)
If China is really the source of much of it, we would see a dramatic decrease.
Or am I missing something?
Re:This may seem like an easy answer... (Score:2, Informative)
Re:This may seem like an easy answer... (Score:2, Informative)
remember what Russia used to say (Score:4, Insightful)
blackholes (Score:5, Informative)
Blackholing China, Korea Helps, Not Cure (Score:3, Insightful)
As a result, I may soon start looking around for rbls of zombie PCs, or consider running a bot to sniff these out myself. Thumb in the dike? Sure, bu
Word to that... (Score:2, Interesting)
Re:Word to that... (Score:4, Insightful)
>Not everyone can run their own email servers. What about my mom or grandmother
Why don't you give them e-mail accounts on your domain and they'll get spam-free e-mail.
Why block China? (Score:4, Insightful)
Re:Why block China? (Score:2)
once the block affect too many of their own businesses, they will take action. so long as they don't have an incentive to secure and close down the relays, they won't
Re:Why block China? (Score:3, Insightful)
Re:Why block China? (Score:5, Insightful)
I face a *huge* spam problem, mostly from .ru, and dumping everything from that domain makes an enormous difference.
Does that mean the 'official' ones? (Score:2)
Re:Does that mean the 'official' ones? (Score:2)
Does this mean that statistic reflects servers in a more or less 'official' capacity (aka open relays)? What percentage of spam is relayed from trojaned Windows machines on home broadband accounts? I would assume that this has got to be a high number - and higher every day. As we know, MyDoom, for example, as just spam a trojan in disguise. With such a high percentage given to China, I would assume that they haven't taken into account spam relayed through zombies.
I was going to post something similar. I
But most of my email... (Score:3, Funny)
Grump
That's funny because... (Score:5, Funny)
Where are the banks? (Score:4, Insightful)
Oh, Great! (Score:2)
"relaying" lots of jingoism, no insight (Score:2)
Lots of open usenet servers in china - but how is their propogation? Lots of open mail relays, but I very much doubt the source of the spam are these machines in PROC.
Re:"relaying" lots of jingoism, no insight (Score:2)
It brings in Western currency and that's all anyone cares about. It's amusing that they're more whores to the almighty dollar than we (the US) are!
Spamhaus lists China as #2 [spamhaus.org] though. I'd tend to believe their analysis over anyone else's, especially when you consider how much spam 0wn3d machines on Comcas
Another source (Score:5, Insightful)
Besides - who cares where the exploited servers are? Soon (my guess is - less than 6 months) the majority of spams will be sent via zombies taken over by some worm or virus. These computers will be spread all over the world. The only solution is to nip it in the butt. Make spam illegal (as it is in Europe) and sue the pants of the spammers. Enough of those stupid atempts [slashdot.org] to pretend something is being done. We all know that the spammers are from Gods own country - hijacking machines whereever it's easiest.
Spam Filter (Score:2)
Bullshit (Score:5, Interesting)
At least according to my own experience, and according to research conducted outside of america..
I don't believe for a minute that the spammers are actually chinese.. You can recognize the writing of a typical american "internet entrepeneur" in most spam mail..
And the servers? Sure, but most spam servers are innocent infected computers anyway...and if you look at the number of american computers in the world compared to the number of asian numbers..it would surprize me if the majority of servers aren't american..
I have never seen a single spam email with chinese letters..why?
Don't jump so quickly on the Chinese (Score:5, Insightful)
Its a small business (Score:4, Informative)
This accurately mirrors what I've noted, I run the mail sweeper for a medium-sized enterprise and analyse spam to improve the quality of our filtering.
I note a lot of the spam has similar formats (apart from the 419 scammers, but they're easy to filter out), leading me to suggest that spamming is dominated by a relatively small clique of big-time mailers
This does at least make it easier to write rules to stop it. We don't use Bayesian filtering, a human-monitored system can be more efficient if done right.
just say NO (Score:5, Interesting)
Re:just say NO (Score:4, Informative)
Implementing it by mailbox would be up to your ISP. The tools they need are readily available.
Re:just say NO (Score:3)
For example, my friend's site is located in Asia (don't know exactly where), but he's been born and raised on the American Continent. If you blocked the whole of Asia as you so diligently say we should, he could not run his site.
Then perhaps your friend should stop doing business with criminals. (In this case, they are criminals because they knowingly sell services to cirminals, because all spammers are criminals. If your friend is willing to support criminals, I have
Re:just say NO (Score:3, Informative)
"Your freedom of speech ends at my firewall" is a variation of something that I have said for years. These people who pull out the Bill of Rights to defend deplorable behavior disgust me. I don't care if they do it, just do it the hell away from me.
ahhh...so clear now... (Score:5, Funny)
For Spamcop users... (Score:2)
I didn't RTFA but did they point out that the vast majority of web sites that yon spam wants to send you to are also in China?
Time to start blocking off entire segments. Hell, pull the plug on the country.
This occurs to me... (Score:2)
Use political sanctions against China (Score:2)
Once that's done, we'll have to move on to whatever country the spammers move to next.
How nice of them to block-list my ISP then! (Score:3, Funny)
We are switching ISPs anyway, so I am not terribly concerned, I just think this is wildly hypocritical.
RTFA! (Score:5, Informative)
It said that 71% of the URLs in spam go to web servers in China, not that 71% of spam comes from China!
The vast majority of spam that hits my mail server comes from the US (comcast, rr.com, etc) machines that have been compromised.
Tools like bigevil.cf (SpamAssassin plugin) help me to filter those spams with Chinese URLs.
What's really happening out there ... (Score:4, Insightful)
There're just too many clueless email admins over there. They lack the skills of configuring a well behaved MTA (it's a pretty tough job these days indeed), and the language barrier is just making things worse. Most of the people are just configuring their mail servers according to howto-like articles written by some clueful guys, and those articles are mostly just laying out the steps, no how and why things should work that way. If you hop to any of the tech forums' email section, you'll find it's full of questions like:
"Help, I just configured my email server according to XXX but things didn't work out
"Help, why my smtp auth doesn't work? It'll accept any username/password
"Help, why I can send out email by can't receive?"
"Help, I got blacklisted by XXX, how can I get myself out?"
etc., etc.
So, it's a matter of educating them how to do things right. As a Chinese myself, I am trying hard to help out those poor guys by answering questions on those forums, and by helping them out translating the documentations to Chinese.
So please, don't shut the door to them, they just need to be educated.
Cut Spam: Block the APNIC IP's to your mailserver (Score:3, Insightful)
Relevant portion of the file at iana.org:
The products/services are mostly from the U.S. (Score:3, Insightful)
Do you sell the penis pills advertised? Yeah? Did you request the advertisement? SLAM!
Forget about blocking all of China. I feel safe in the belief that it wouldn't stop the spam at all.
Spam not the only Chinese problem (Score:3, Insightful)
Ultimately, I think we'll need smarter spam filters. That isn't too different than what we were doing at HNC. IF the letter is from someone you don't know and talks about Human growth hormone or altering of bodily parts, it is a pretty good bet it is spam. It is really just a matter of good pattern recognition.
Willing participants or innocent victims? (Score:3, Insightful)
However, there is differentiator that needs to be made here: how many of these servers are actually run by spammers, vs. how many are hijacked by spammers without the owners' consent?
Isn't this an over generalization that demonizes entire people like: "All Arabs hate us!" or "All terrorists are Muslims!" or "All Jews are evil!"?
Another point is a differentiation between the people and the government. What the government does is not necessarily the same as what the people want or like.
Think about how G. W. Bush is behaving abroad (in your name) and even domestically, and ask yourself do you want everything he does to be actually in your name.
Re:So why not blackhole the entire country? (Score:2)
Re:So why not blackhole the entire country? (Score:4, Interesting)
But I can say that of 3413 spam messages I received only 185 of them came from China.
Re:So why not blackhole the entire country? (Score:2, Insightful)
i think thats a horrible idea, it could possibly silence the best form of free speech the people there have.
besides, if some other country was to blacklist US based servers, purely because of the US's politics, im sure everyone would be crying foul. You shouldn't let politics dictate what happens with the internet.
Re:So why not blackhole the entire country? (Score:2, Funny)
Re:Block .cn! (Score:2)
Proff positive there's more money in viagra than in communism, my friend.
Re:Block .cn! (Score:2)
Re:Block .cn! (Score:3, Informative)
Here you go:
http://www.okean.com/asianspamblocks.html [okean.com]
Re:would tarpit help? (Score:3, Interesting)
That said, our system takes 2 minutes to ACK requests after the first error, expanding to 10 minutes/error, just before it hangs up at 20 errors. It isn't much, but it makes ME feel better.