Gossamer Forum
Home : General : Perl Programming :

Anti Spam

Quote Reply
Anti Spam
I'm not sure if this belongs here but I'm sure someone will let me know if I'm in error.

My site has been hit several times by e-mail harvesting bots. I have created a small script that is accessed through a hidden link, an invisible 2x2 gif, which creates 3000 bogus e-mail addresses for an unscrupulous spammers database then captures the client information which is e-mailed back to me. An explicit copyright notices is also displayed forbidding copying / harvesting any of the information generated. The problem is that I'm having trouble finding out exactly who activated the script. Tracert isn't telling me anything useful. Can anyone help me find out who might be harvesting my e-mail addresses? The following was captured from the last activation:

Date: 9/26/2000
Time: 05:43:31
OS: Other
Browser: Other
IP Address: 216.34.109.192

Thanks in advance!






Quote Reply
Re: Anti Spam In reply to
Using tracert and nslookup, it looks like that IP Address is coming from:

http://www.exodus.net

This particular site spiders a lot of sites...I believe if you search for exodus.net in ALL the forums, you might find some relevant Threads.

BTW: You might find the following Thread useful:

http://www.gossamer-threads.com/...w=collapsed&sb=5

Regards.

Eliot Lee

Quote Reply
Re: Anti Spam In reply to
Throwing it into spamcop:

http://spamcop.net/hostracker.shtml

outputs:

Tracking ip 216.34.109.192:
"nslookup 216.34.109.192" (getting name) [show] no name
"dig -x 216.34.109.192 soa " (digging for Start Of Authority) [show] - hostmaster@exodus.net
abuse.net exodus.net=abuse@exodus.net

Statistics:
ISP score:1620
Note, this is not necessarily a reflection on the specific address given. It is rather based on the overall ISP score.
"nslookup 192.109.34.216.rbl.maps.vix.com." (checking ip) [show] not found
"nslookup 192.109.34.216.inputs.orbs.org." (checking ip) [show] not found
Email from this host would be detained by SpamCop Filters: isp score:1620
Found abuse address:abuse@exodus.net


So you should contact abuse@exodus.net if you are interested in persuing who did this, as it came from their network.

Cheers,

Alex

--
Gossamer Threads Inc.