PDA

View Full Version : Project Honey Pot - Track and stop email harvesters



Resurrection
09.12.10, 04:56
The Web's Largest Community Tracking Online Fraud & Abuse | Project Honey Pot (http://www.projecthoneypot.org/)


------


About Project Honey Pot

Project Honey Pot is the first and only distributed system for identifying spammers and the spambots they use to scrape addresses from your website. Using the Project Honey Pot system you can install addresses that are custom-tagged to the time and IP address of a visitor to your site. If one of these addresses begins receiving email we not only can tell that the messages are spam, but also the exact moment when the address was harvested and the IP address that gathered it.

To participate in Project Honey Pot, webmasters need only install the Project Honey Pot software somewhere on their website. We handle the rest — automatically distributing addresses and receiving the mail they generate. As a result, we anticipate installing Project Honey Pot should not increase the traffic or load to your website.

We collate, process, and share the data generated by your site with you. We also work with law enforcement authorities to track down and prosecute spammers. Harvesting email addresses from websites is illegal under several anti-spam laws, and the data resulting from Project Honey Pot is critical for finding those breaking the law.

Additionally, we will periodically collate the email messages we receive and share the resulting corpus with anti-spam developers and researchers. The data participants in Project Honey Pot will help to build the next generation of anti-spam software.

Project Honey Pot was created by Unspam Technologies, Inc (http://www.unspam.com/) — an anti-spam company with the singular mission of helping design and enforce effective anti-spam laws. We are always looking to partner with top software developers and enforcement authorities. If there is some way we can help you fight spam, please don't hesitate to contact us (http://www.projecthoneypot.org/contact_us.php?ft=Business%20Inquiries).



Trap Addresses Monitored
50,045,772

Trap Monitoring Capability
499,070,000,000

Spam Servers Identified
79,128,492

IPs Monitored
81,385,088

Harvesters Identified
93,222


Dictionary Attackers
13,732,567

Comment Spammers
341,401

Search Engines
314,382

Rule Breakers
1,902

[New Feature] Bad Web Hosts [New Feature]
113,572

-------

slikrapid
09.12.10, 17:56
f one of these addresses begins receiving email we not only can tell that the messages are spam, but also the exact moment when the address was harvested and the IP address that gathered it.

only in the case when spam is being sent automatically shortly after the harvesting and if it is being sent by the same computer that did the original harvesting, furthermore there is a good chance that what they will detect is simply hacked computers whose owners aren't even aware of spreading spam around


To participate in Project Honey Pot, webmasters need only install the Project Honey Pot software somewhere on their website.

sounds like getting a back-door vulnerability with the owners consent


Harvesting email addresses from websites is illegal under several anti-spam laws,

strange, since its out there for everyone to see/access/collect/...


an anti-spam company with the singular mission of helping design and enforce effective anti-spam laws.

seems that laws addressing the 'field of interest'/subject are more important to them than the actual field itself, with a telling accent on prosecution/enforcing :P

Resurrection
09.12.10, 18:48
so you'd rather live with the spam then?

anon
09.12.10, 19:07
I don't think that's what slik wanted to say, but rather than this specific solution has some flaws. And he's right with the "hacked computers" comment, I think most spam is sent by zombie computers part of botnets nowadays.