Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Possible Duplicate:
What are common/official methods of reporting spam/phishing/nasty-grams to organizations?

My production application receives a lot of emails and I can easily detect spam from it. From that spam, I can parse the dangerous URLs found in the emails. What can I do with this list of hacked sites? Can it be submitted to any organization to help protect from those sites? I know about phishtank.com, but they only want phishing sites.

Also, most of my spam comes from hacked yahoo/aol/hotmail/etc accounts.

Please recommend sites that I could post my list.

share|improve this question
add comment

migrated from serverfault.com Sep 13 '11 at 21:33

This question came from our site for professional system and network administrators.

marked as duplicate by Rory Alsop Sep 14 '11 at 7:48

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

3 Answers

There is no site to report it to. You have to report it to the provider hosting the site. This is the only practical way which leads to a shutdown of a site.

You have to address reports directly to the Abuse Desk. Normally it is something like abuse@microsoft.com (Hotmail) or network-abuse@aol (AOL) and others. You find the addresses in the WHOIS database for the IP-range.

When you do it the report must be in the format defined in RFC 5965.

This is how I do report around 10,000 incidents per day.

share|improve this answer
add comment

It's like a yard of weeds: you kill one generation and the next comes back twice as strong. I've been trying to find a way to help others with spam, and the only method I've found, is http://www.google.com/safebrowsing/report_badware/ or http://help.yahoo.com/l/us/yahoo/search/spam_abuse.html for yahoo or http://www.google.com/contact/spamreport.html another google one.

Other than that, Cloudflare.com offers "bad visitor" protection for sites you host with them.

Gmail's got a nice spam filter, since it learns every day from people reporting stuff as spam.

But unless it's causing YOU problems, let others deal with it on their own. You might make the spam sites angry and they might somehow conspire against your inbox. Trust me, though they are making email vaccines, they don't prevent every type of spam yet. There are only a few doctors that cure spam. Only spam back if it makes you less angry. Other than that, make your web app less vulnerable: Include some sort of "verification" to get the message sent. Captcha is a very nice solution.

Best to you.

share|improve this answer
5  
Damn. NEVER EVER spam back! This does not work! All sender addresses are faked so you reach innocent people. Beware of following these recommendations! This will bring you bad reputation. –  mailq Sep 13 '11 at 21:15
    
It gets your frustration out. That's plenty good for most internet users. –  U4iK_HaZe Sep 13 '11 at 21:16
add comment

By hacked you probably mean hacked and used for phishing - you really should report them here or on another site which does the similar. FBI once e-mailed me to warn me about phishing page on my server

And nobody needs to hack anybody's AOL, hotmail nor yahoo accounts, e-mail sender isn't needed to be authorized

share|improve this answer
add comment