Slashdot Mirror


U.S. World's Foremost Spam Nation In 2004

der Kopf writes "As reported by ZDNet, '42 percent of all spam sent this year came from the United States,' which makes the U.S. the unthreatened king of the 2004 spam hill. Number two on the list is South Korea (with 13.43%), while China can be found in third place (with 8.44%). The U.S. put out more spam this year than all the other countries in the top 12 combined." All depends who's counting, I guess.

29 of 274 comments (clear)

  1. Woohoo! by Primotech · · Score: 5, Funny

    We're good where it counts.

    1. Re:Woohoo! by seanadams.com · · Score: 4, Funny

      We're good where it counts.

      Where's that? The enl@rjd p3njs?

    2. Re:Woohoo! by bsharitt · · Score: 4, Insightful

      This would be a good thing if it's accurate, that would mean that close to half of all spam would be under US jurisdiction, which means they can be sued and shut down in the US.

  2. Yay! by Anonymous Coward · · Score: 5, Funny

    Finally, something to be proud of.

  3. Who's counting? by cperciva · · Score: 3, Insightful

    All depends who's counting, I guess.

    This study comes from the UK; given recent electoral history, I'm far more inclined to trust that they can count than I am to trust any study which comes out of the US.

    1. Re:Who's counting? by 1u3hr · · Score: 5, Insightful
      All depends who's counting, I guess.

      What the fuck was that editorialil comment supposed to mean anyway?

      Every time spam comes up as a topic here we get dozens of xenophobic rednecks proudly explaining that since they've "blocked all APNIC" they "don't get any spam, and who cares about communicating with them anyway". Even in the face of data like this, I'm sure they'll continue to lecture the rest of the world on how thay have to shut down "their" spammers or be cut off.

      Personally, living in Hong Kong, about 1% of my spam is local, 2-5% Nigerian, the rest American.

  4. And it's mostly coming from fucking idiots... by Anonymous Coward · · Score: 5, Interesting

    ...with owned, unpatched Windows machines sitting directly on cable or DSL connections.

    If Comcast and Verizon spent half as much on cracking down on their moron customers as they do on mailers begging me to use their Internet services, they'd have this problem under control in no time.

    1. Re:And it's mostly coming from fucking idiots... by MeanSolutions · · Score: 3, Insightful

      What gets me is that the spammers bother to send the spam outside Jesusland. The uptake on 'Low Cost Mortgages from USA' in Europe has to be 0.00%.

      --
      Swedish, but resident in the UK since 1996.
  5. Simple solution by ringer9cs · · Score: 3, Funny

    I am going to block USA, Korea and China on my firewall!

  6. Good news in disguise? by Magus424 · · Score: 5, Insightful

    If most of the spam comes from the US, that means that any anti-spam legislation passed here could have a huge effect.

    Of course, now we have to wait for Congress to actually do something about it. ;-)

    --
    -- Gone Crazy, Back Later
  7. It's funny cuz by Rosco+P.+Coltrane · · Score: 4, Funny

    The US is supposed to have a legal tool against spam, and yet it's the worst offender in the world.

    I guess we CAN-SPAM and we're mighty proud of it...

    --
    "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
  8. Wonderful news... by Faust7 · · Score: 4, Funny

    So we hold the majority on manhood enhancement, hot free teens, and low low mortgage rates.

    *sniff* I've never been so proud of my country.

  9. A better question... by Mhrmnhrm · · Score: 3, Interesting

    How did they come up with their numbers? I can easily see the US leading because of zombified Windows machines, but where are the ISP mail relays those zombies are using?

    --
    I suspect that one of these choices is incorrect. Correct.
  10. Inspiration by CaptainZapp · · Score: 4, Funny
    The U.S. put out more spam this year than all the other countries in the top 12 combined.

    They must have gotten their inspiration from military spending.

    Fucking spammers!

    --
    ich bin der musikant

    mit taschenrechner in der hand

    kraftwerk

  11. flawed data by +Addict-09+ · · Score: 3, Informative

    These reports use records at arin/apnic/ripe/lanic to determine country of origin. Just because an ip was issued by ripe (for instance) doesn't mean it's being used in Europe.

    1. Re:flawed data by kaarlov · · Score: 3, Informative

      Usually there is information about the country where the ip is assigned in the registries' whois-records. And there are compiled lists which quite accurately tells in which country ip-address is located. On of these is http://countries.nerd.dk/. Of course they aren't 100% accurate, but enough for purposes like this.

  12. Spamvertised web sites in China by MightyYar · · Score: 5, Interesting
    I report all my spam via Spamcop.net, and while I don't have any numbers, it seems like almost all of the spamvertised web sites reside in China.

    My understanding is that if you could close down the spamvertised sites, spam would largely be restricted to phishing attacks. If I didn't believe this, I probably wouldn't bother using spamcop!

    --
    W..w..W - Willy Waterloo washes Warren Wiggins who is washing Waldo Woo.
    1. Re:Spamvertised web sites in China by Zocalo · · Score: 3, Interesting
      it seems like almost all of the spamvertised web sites reside in China.

      Not for long I suspect, I do quite a bit of statistical analysis of spam and there are definitely changes in progress. Over the two years or so, there has a swing from using open relays and "bullet proof" hosted servers to actually send the spam to using compromised boxes on broadband connections. This is reflected in the report; a move from IPs in China to those in DSL pools countries with sizable adoption of broadband connectivity.

      The actual sites being spamvertised however have remained solidly in the traditional havens where ISPs with questionable anti-spam policies can be found. However, over the last few months in particular I have seen steadily growing numbers of spamvertised sites that are also being hosted in DSL pools, undoubtably on compromised boxes. From a spammer's perspective this is a no-brainer (no more hosting fees) so it's fairly obvious that this trend will continue I think.

      There are both good and bad points to this. The bad is that it makes traditional SpamCop style IP reporting almost unworkable - there are so many unpatched boxes that an ISP has no chance at dealing with them all. It was a game of Whack-a-Mole to start with, only now the number of holes that the moles can pop up from has gone up by a few orders of magnitude. The good however is that DNSBLs of the actual domains being used instead of the IPs, such as the SURBL lists, that can be generated from SpamCop submissions are *incredibly* good indicators of spam - so keep up that SpamCop reporting!

      More contentious though, is how ISPs might respond to this new spammer tactic. The simplest solution is probably going to be further restrictions on what an IP on a broadband connection can and cannot do. I expect to see more DSL services that are blocked prevented from running servers on certain ports, forced to send email through the ISP's gateway server, and possibly even outright firewalling of certain "remote access" ports like NetBIOS, RPC and so on.

      Frankly, given the rising tide of spam, ever increasing port scans bouncing off my firewall and almost total apathy of J.Sixpack in keeping his/her PC patched, I'm getting more fond of this idea every day. What I'd like to see is ISPs offering "standard" DSL packages with the kind of restrictions I mentioned above stated up front, alongside an unrestricted "premium" package - it could even cost a little extra. Alternatively, there is the middleground approach that my ISP uses: you can't run an email server by default, but send tech support and email and they'll unblock port 25 for free and periodically check that you are not running an open relay.

      One thing's for sure, if/when ISPs do respond to this latest spammer tactic, the spammers simply move the goalposts yet again. :(

      --
      UNIX? They're not even circumcised! Savages!
  13. Right! by Anonymous Coward · · Score: 4, Informative

    I live in Austria (Europe) and all the spams I get at home and at work (over a hundred a day) are in English and address subjects relating to the US. All the mortgage spams refer to US mortgages, all the Viagra Spams refer to pharmacies that deliver to the USA, all prices are in dollars, and so on.

    Most European countries have tough anti-spam laws. I get practically no spams that come from Europe or specifically target Europeans. The last Spam I got in German was from some dumbass dot-com newbie who had bought a CD-ROM full of "guaranteed legal e-mail addresses" from some US scammer.

    The problem with spam is a problem with the USA.
    Fix it.
    Now.

  14. Makes sense... by }InFuZeD{ · · Score: 4, Funny

    Hormel is located in the United States.

  15. Ahh the Irony of Slashdot by Khuffie · · Score: 5, Insightful
    When an article came out sometime last month about how a lot of spam is coming from China, people here were complaining about the damned Chinese, how they should just block the whole country and be done with it, that they do nothing at all and that China just blame sucks.

    Now an article with research backing it shows the US as the major culprit, and what does everyone do? Make excuses or jokes. What makes you think the Chinese don't have zombie machines? Or is it ok for the US to spam, but no one else?

    And the fact of the matter is, aside from a few random Russian/Chinese emails (1 in 100), most of the spam I receive is offering goods and services in English, directed at the North American market. 'Where' the spam comes from doesn't really matter, what the spam is selling and where that thing is should.

  16. Re:The undisputed kings of bullshit by interstellar_donkey · · Score: 5, Interesting

    You've managed to put your finger on the biggest problem in the Western social and economic system, that corps have the same rights than humans but none of the responsibility .

    Though I don't think hitting the corporations financially as punishment really works. Large corporations will typically build in potential losses from economic punishments for misdeeds into their business model. A company may knowingly release a product they know to be unsafe, and simply put a portion of their profits aside for paying out of court settlements to victims.

    In essense, this is akin to saying that it's alright for me to go around killing people without fear of jail if I can afford to pay the victim's families a large portion of money.

    What I'd like to see is criminal charges brought on descision makers in corporations who knowingly use unsafe methods to produce a product that they know to be dangerous. In other words, a manager who makes the decision to save $0.02 on each product produced by using a less safe part won't be hedging those cost savings against the potential court costs from the families his company's product kills, he'll be hedging it against the very real possibility that he himself may face prison time for multiple murder charges.

    We cannot give large corporations exemption from responsibility on a human level. We see corporations as faceless entities, but there are always human beings behind the scenes making decisions on how that corporation acts. If we start making those humans accountable for the actions of the company for whom they make decisions, I think we'd start seeing quite a bit more safety, envrionmental and social responsibility in the corporate world.

    --
    The Internet is generally stupid
  17. Targets, too by Tom · · Score: 3, Insightful

    It isn't just the source of spam - 95% or so of the spam is very obviously targetted at americans, too.

    Ok, porn sites are international, but mortgage refinancing and what else the other crap is seems totally US-centric to me.

    I'm sure 95% of the idiots who buy from spammers can be found in the US, too.

    --
    Assorted stuff I do sometimes: Lemuria.org
  18. Who is the real badguy? by mahesh_gharat · · Score: 4, Interesting

    Yeah, most of the spam is also US centric. It mainly contains either Via9ra or P3ni5 enlargement programs. Most of the people out side US receive these mails and some stupid amongst those who really want to purchase those products by reading the mails can not buy since most of these products even don't have distribution network outside US.

    One of my friends, who work for a US based company, which sells cigarretes online. All this guy has to do is get some working email ids and send the mail drafted by the US based company. He does this from location outside US though. This guy has written a UserAgent (Robot) which goes to Yahoo and grabs the email ids at random and mails them. Untill this it looks very bad but if you see inside they do get enough business through this channel for their survival at least. They do not have any other business channel other than this and they are doing fine.

    Even if this guy is generating the SPAM from the location outside US, he is doing it for his master sitting there in US.
    Now, who is the real badguy?

  19. Re:Wrong: China is Still # by TFGeditor · · Score: 4, Informative

    Lame reply to my own comment, but forgot something.

    The majority of U.S.-sourced SPAM I receive comes from the following ISPs:

    Comcast
    Road Runner
    EarthLink
    Pacbell
    Ameritech

    In that order.

    --
    Ignorance is curable, stupid is forever.
  20. Not surprising. by Renaud · · Score: 3, Insightful

    All depends who's counting, I guess.

    Yeah, right...
    If I were counting, that would be more like 99% than 42%, sadly.

    More precisely, I'd say that 42% of the spam being relayed from computers in the US sounds about right. But when it comes to the target audience, or the companies/individuals behind the spamvertised goods/services/scams, it suddenly looks like a 99% american problem in my (and most people's) view.

    I had already commented on this

    Sad, but certainly not Slashdot headline-worthy.

  21. U.S. head start on 2005 begins today by phillymjs · · Score: 4, Interesting

    Just after Christmas last year I noticed quite an uptick in spam attempts on my mailserver from U.S. residential broadband IPs. Clearly this was from new computers received as Christmas gifts getting quickly zombied.

    All the people who came downstairs this year to find a shiny new Dell or Gateway under the tree should be getting their machines owned by spammers right about..... now. So prepare for another post-Christmas onslaught as the spammers play with all their newly-acquired toys.

    ~Philly

  22. Listen, asshole... by PontifexPrimus · · Score: 4, Insightful

    Just because you're a mentally challenged, nazi-voting, mouth-breathing American doesn't give you the right to condescend to other countries. Apart from that, most of the spam I get advertises American websites, American fake Rolex watches and American drugs - in fact, I can use that as a pretty good spamfilter, since I'm a German living in Germany; I need only check for American English as the language and can dump it in my spam folder.

    --
    -- Language is a virus from outer space.
  23. Re:Wrong: China is Still # by ScrewMaster · · Score: 3, Interesting

    I can believe Comcast is still #1. That's my ISP and the number of spams I get (not to mention the number of worm propagation attempts) from Comcast addresses is remarkable. Of course, they do have a lot of IPs. I do know that, in my area at least, they've implemented a policy whereby if you send more than some {undefined} number of emails within some {undefined} interval, SMTP access is suspended automatically. I know because I had accidentally set my mail server to bounce unknown messages back to the sender. Since I receive over a thousand spams a day that made me a spammer, so far as Comcast was concerned. Okay, my bad ... but Comcast couldn't be bothered to let me know what was going on. Their assumption was that I was deliberately spamming: the fact that I might have been zombied didn't seem to occur to them. All I knew was that my SMTP access had been blocked, for no apparent reason, and their tech support had no idea what was going on. I finally found a person who had a clue, and he said it would take a couple of days for my access to return automatically.

    I hear all kinds of noise about how to deal with spam from the standpoint of broadband users running as unwitting spam relays. Everything from "make it the ISPs responsibility" to "require users to get training and get a license in order to get online". What is the real solution? I don't know, but anything that requires passing a Federal law will probably cause more harm than good. Doesn't mean they won't try to pass one, though.

    Personally, I liken people that run unprotected, unpatched machines as being "bad neighbors". You know the kind: the one that lets his dog run free and crap all over your yard. Yes, I realize that most of these zombied systems are in that situation because of the ignorance of their owners. But if that neighbor started building a garage extension on your side of the property line, you wouldn't let him off the hook because he couldn't read a survey.

    People don't really think of security as being a social issue as well as a personal one. I believe that most people want to be good neighbors, and would take steps if you reported their dog taking a dump on your property. But there are hundreds of thousands, if not millions, of zombies out there whose owners have no idea that their systems are crapping in everyone's back yard. Somehow, we need to close the loop on these people so they a. know that they've been taken over and b. give them easy, effective steps to take care of the problem. Tall order, I know. Comcast is heading in the right direction with their policy, but they need to let people know when they've been disabled, and why. Maybe they are now, I don't know.

    --
    The higher the technology, the sharper that two-edged sword.