Re: FN-FORUM: China site spam

date posted 6th May 2006 18:17

Sam,

You do not say whether you host the server or whether your ISP does, and
therefore if you can do the blocking.

On a general note though, you could send an email back with a message
something like this, preferably in English and Chinese:

"We have detected you are illegally sending mail to and through our servers.
We have notified PSB in Beijing of your activity."

This should be enough to encourage IP pirates to go elsewhere.

The PSB are China's state Police - hugely feared in China they are in fact
quite good at tracking things and dealing with them (at 2% China has the
lowest crime rate in the world). Although they monitor over 30% of China's
email activity a direct contact will guide them to track things down, thus
helping you and detecting Internet bandits in their homeland. You can make
contact and complaint in English to their consular department of commerce in
the UK at [EMAIL REMOVED] Include header information. It may
not look like it to you but the department will pass your message to PSB who
will track things. They are very keen to have a good world image in the
run-up to the Beijing Olympics and cooperate with the terms of the WTO.

If you have on any of your servers information negative to China, such as
about Falun Gung, then that could be the cause of people targetting your
systems.

Be aware that if you look at China's official website you should after
closing your browser immediately run cleaning software like Crap Cleaner.

HTH,

Mike A.

Craig wrote:
> I'm getting that as well. Every week I get a couple of emails from
> my sites contact page and it's all in Chinese. I even went to the
> trouble of displaying their IP address and saying it would be
> recorded (though of course it isn't) and then even doing a random
> background behind a random number you have to enter before the page
> will submit! So they're obviously keen enough to do this by hand!
>
> Craig
>
> -----Original Message-----
>
>
> Hi Guys,
>
> Need some advice. My web server is being bombarded by calls to non
> existent WebPages (hit and hope hacking AFAICS) on two different
> sites on the same server all from IPs in China. I've read about this
> happening in a few forums but don't know what to do about it. Can
> anyone advise?
>
> Should I just let it happen or try to block the huge range of ips
> these calls are coming from or what? Any advice would be great full.
>
> Regards
>
> Sam Morgan
>
> WiredEyes / WebClickGo
> tel (Uk): +44 (0)20 7100 2178 / tel (Italy): +39 070 766 242
> fax (uk): 0871 433 2278 / fax (Italy): 070 330 9939
> web : www.wiredeyes.com / www.webclickgo.com
> ----
> umop ap!sdn w,! aw dlaH