Broadband Tech > Security > Security > Call for participation! Msgr Spam investigation

reply to dirtweed

Re: Call for participation! Msgr Spam investigatio

said by dirtweed:

---

wouldn't it be better to work on the ppl who make the software possible to do this spam? »www.ipmarketer.com/ or »www.fileplanet.com/files/110000/116772.shtml ???????

---

reply to wattjg
Well it looks like 5 of those 7 hops gets you to the Level3 backbone in SFO.

But even two more hops from there could pretty much be anywhere...even NYC is just one more hop away (though this don't leave much left to progress down into the remote network).

I'm pretty much concluding that this approach to backtracking isn't going to work..it would be just soooo much easier if we had the cooperation of the backbone providers to actually *look* at where the traffic is coming from using their flow data...

Using:
»www.level3.com/LookingGlass/
(Select San Francisco)
tracert to: www.nytimes.com

1 so-4-0-0.mp1.SanFrancisco1.Level3.net (209.247.10.225) 0 msec 0 msec 0 msec
2 so-1-2-0.bbr2.NewYork1.level3.net (64.159.1.134) 76 msec 80 msec 76 msec
--
Lawrence Baldwin
myNetWatchman
The Internet Neighborhood Watch

said by NetWatchMan:

---

I'm pretty much concluding that this approach to backtracking isn't going to work...

---

reply to NetWatchMan

Re: Call for participation! Msgr Spam investigation

reply to NetWatchMan
If you are still looking to work on this...

I know you said it might not work because of the backbone providers not providing information, but now that this hit the front page maybe you'll be able to see data from more collection points.

I've got a computer I can put on the DMZ (already ghosted) and open it up for attack. I'm using SBC/Yahoo! and live in Texas.
--
Note : The statements made by myself are my own and not the opinions of my employer or of my coworkers. 14.327 GHz Crunching Power | The Ryan Foundation for MPS Children

reply to NetWatchMan
I'm interested in stopping this spamming of mass e-mail.
I have a Rogers wave connection, and have had a heck of
a time preventing other people from using my system and
ID's to send mass e-mail.. (Spoofing if you may). I had
been shut down by my service provider for a day, and ended
up reconfiguring my system from ground up. (Formatting
Hard Drive, Reinstall software, reinstall internet, and
being provided with a new e-mail address.) I had not givin
this new address out to anyone, and withing the first hour
of being online, I was able to trace a massive amount of
porn e-mail being hubbed through my system.. Any Ideas on
how I can stop this.. I have an entire collection of original
IP addresses, and I am almost tempted to write
a seek and destroy program to take down these spam sites.
I have been a programmer for over 25 years, but have never
had to deal with this type of problem before.

Thanks...

Andy..

StageOne@rogers.com

reply to NetWatchMan

Re: Call for participation! Msgr Spam investigatio

http://www.dslreports.com/forum/remark,8096601~mode=flat~start=80;iframe=1#8287922

said by NetWatchMan:

---

I'm pretty much concluding that this approach to backtracking isn't going to work..it would be just soooo much easier if we had the cooperation of the backbone providers to actually *look* at where the traffic is coming from using their flow data...

---