Gary Warner: We Are Well Past Time to Declare a Spam Crisis in China

Home / News

Gary Warner: We Are Well Past Time to Declare a Spam Crisis in China

By CircleID Reporter
June 29, 2009, 6:52 pm PDT Views: 10,137 Comments: 4

BLACK FRIDAY DISCOUNT - CircleID x NordVPN
Get NordVPN [74% +3 extra months, from $2.99/month]

In a blog post last week, Gary Warner, director of research in computer forensics at the University of Alabama’s (UAB) computer and information sciences department, wrote that it is well past time for someone to declare a “Spam Crisis in China”. The warning comes along with UAB’s reports that most of the spam they receive has ties to China.

“It is very normal that more than one-third of the domain names we see each day in spam messages come from China,” Warner wrote. “When one also considers the many ‘.com’ and ‘.ru’ domain names which are also hosted in China, the problem is much worse. More than half of all spam either uses domain names registered in China, is sent from computers in China, or uses computer in China to host their web pages.”

Related Links:
Spam Crisis in China Gary Warner, Jun.20.2009
Chinese Registrars Need Rap on Knuckles, Expert Says PC World, Jun.29.2009

By CircleID Reporter — CircleID’s internal staff reporting on news tips and developing stories. Do you have information the professional Internet community should be aware of? Contact us.
Visit Page

Filed Under

Comments

I can confirm this Suresh Ramasubramanian – Jun 30, 2009 4:23 AM

Our statistics indicate that a huge majority of this originates from at the most three or four registrars based in China

Xiamen Ename - which is the registrar for over 50% of domains we find in unsolicited bulk email every week - quite often fastflux

Xinnet is another one that has several such domains (a few hundred compared to over a thousand a week on ename)

Also others like Onlinenic and Paycenter.com.cn

# 1 Reply | Link | Report Problems

The above statistics are from analyzing domains listed on the SURBL blocklist - http://www.surbl.org Suresh Ramasubramanian – Jun 30, 2009 4:24 AM

Just to clarify the above data point.

# 2 Reply | Link | Report Problems

We should clean up our own house first Edward Falk – Jun 30, 2009 6:49 PM

The spam may be coming through Chinese servers, but if you track it back to its source, half the time you’ll find it actually originated here in the U.S.

Remember last November when McColo in San Jose, California was finally disconnected? Spam dropped 60-70% worldwide over night. The shutdown of rogue site 3fn, also in San Jose, earlier this month led to another significant drop in spam.

And frankly, if you dropped a nuke on Boca Raton, you’d probably see a huge reduction in worldwide spam.

If the U.S. were to take spam seriously, it would be the single most effective thing that could be done to combat the problem.

# 3 Reply | Link | Report Problems

Granted / point taken about chinese IP space Suresh Ramasubramanian – Jul 1, 2009 1:07 AM

The point Gary’s making though is a bit different. Domains registered in spam, through registrars (in fact just two or three registrars for the most part) based in China.

As for origins, you’d be closer if you looked at eastern europe than at boca raton.

# 4 Reply | Link | Report Problems

The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.