U.S. is World Leader in Spam

adept256 writes "Sophos outs 'dirty dozen' spam producing countries. And the USA is in the lead by a country mile. 'The United States is far and away the worst offender, accounting for nearly 60 percent of the world's spam. Even though European countries are responsible for less spam, they are still generating millions of junk emails a day,' said Graham Cluley, senior technology consultant at Sophos."

Comments

While they're at it...

[Hayzeus]

...maybe Sophos could also get around to changing their default "notify recipient" setting on their email virus scanner.

That way, Sophos themselves might produce a little less spam...

Its no supprise.

[psycht]

So many broadband & other high-speed connections left wide open that can relay data.

Re:Its no supprise.

[hendridm]

Or perhaps it's all the aspiring entrepreneurs who are trying to make a quick buck with no regard for ethics or other people.

I was born and raised in the U.S., but some of the scams I see just sicken me and the lengths people will go to to make a quick buck. Some people will even take advantage of their friends and family! Who needs enemies when your own brother or sister is trying to guilt you into their latest multi-level marketing endeavor.

When was this sample taken?

[nebaz]

I wonder if the recently passes Federal Anti-Spam legislation has had any effect on these numbers. Obviously not a big enough one, since according to these figures, so much spam still comes from the U.S. If these numbers can be tabulated, can they not also report the offenders to the police?

I also wonder if there is any way to bring the issue of unprotected computers to the public. Perhaps negligence penalties of some sort? I don't want to punish the wrong people, but it would be a lot harder to hack into all of these systems if they were administered properly.

How about normalizing that data?

[Mr. Underbridge]

Yes, so the US generates 60% of the world's spam. However, what fraction of the world's total email traffic does the US generate? I bet it's near 60%.

Without having some idea of what fraction of a country's email traffic is spam, these numbers just tell you which countries have a bigger internet presence, and absolutely nothing more.

Re:So much for the AXIS OF EVIL...

[mwood]

Nah, it's just because we have so many more computers for the bad guys to zombify. (Or, more or less equivalently, we have so many more clueless computer owners.)

The report isn't really valid

[Moryath]

For example, a Nigerian email sent from a hotmail/yahoo account (they almost all are) would seemingly, by this standard, come from the US.

And then there's the thing they themselves point out; their methods of determining origin only go so far, hijacked machines / email routers configured to "wash" the headers of relayed stuff also go a long way to making the numbers invalid.

I still say the ultimate revenge is to paper-spam the big spammers. Sign them up for hundreds of thousands of magazines and all the rest.

The coup de grace would be then to package and mail a spammer the contents of my cats' litterbox the day after feeding them beef 'n' bean leftovers.

Re:Much from compromised computers

[gowen]

high position of Canada

Well, taking my twenty-odd thousand spams as a sample, a lot of Canadian spams come from compromised machines at shawcable / shaw.caclient*.comcast.net and attbi.com, the abuse departments are too lazy^H^H^H^Hoverwhelmed to do anything about them (even easy solutions, such blocking port 25 and insisting mail is relayed through their own SMTP servers, which would kill this spam stone dead at a stroke).

Wrong

[Mr. Underbridge]

B.S. it isn't a case of "one spam for every x legitimate emails" the number of spam emails and legitimate emails are completely unrelated.

Read the response by the second guy to respond to me. Both legitimate and illegitimate email are going to track with the number of total servers (scaled by how many are unprotected) and number of internet-connected citizens (scaled by how many are internet-connected) among other variables he mentioned.

I mean, actually think about what you're saying. You would congratulate Antarctica for generating 0 spam. If you want to look at this without considering "ham" emails, look at the spam difference - (spam sent = spam received). I would argue that even this difference should be fractioned by how many total emails are sent received which really is a decent measure of internet presence, but even without it, you at least separate net spam "donors" from "recipients"

Honestly, if you don't normalize variables in comparing large sample sets with small, you absolutely cannot compare raw numbers. I could recommend statistical reference texts if you like.

A NEW UNCOVER SECRETS ABOUT ANYONES!! teheknfd

[Westech]

Nah, it's just because we have so many more computers for the bad guys to zombify.

I agree. Just looking at the horribly butchered English that is in 95% of the spam that I get tells me that it not written by someone who's first language is English.

Re:So much for the AXIS OF EVIL...

[tolan-b]

"What's your point? One's a continent and one's a country dumbass. I bet Asia has more people online than the USA too."

RTFC, 60% of spam comes from the US, but there are more computers outside the US than inside, that means that the claim that the US is only so high because it has so many computers is provably wrong.

ISPs, please block egress port 25!

[RT Alec]

I think it is time that ISPs block, by default, all outbound port 25 traffic. Customers can either:

• Use the ISPs mail server (this accomodates 90% right away)
• Use a VPN or SMTP+AUTH(+SSL) on an alternate port to connect to their SMTP server of choice (this accomodates another 9%)
• For the remaining few that just have to run their own SMTP server, let them have a static IP and open up the ports

Of course, some consumer ISPs won't be willing to deal with the headaches of option #3, or perhaps might charge a bit more for it, which is entirely fair. Businesses need to block all egress port 25 period, there is rarely a legitamate need for an employee to run their own SMTP server (unless they work in the IT department, but then they can probably open the port up themselves).