Re: [Air-L] Setting Up a Honeypot
I don't think that's a good idea. I just checked a gmail account I set up over a year ago, without using it. And no spam turned up. Google has one of the best spam detection software there is. Most of it will not even reach your spam folder. On a daily basis, my regular gmail account only shows 4 to 5 spam emails. The best think might be to setup a emailserver without a spam filter. Then make sure to publish your email on a webpage and maybe in some discussion groups and wait. Another more sophisticated option seems to do the job you want: https://github.com/shiva-spamphttps://github.com/shiva-spampot/shiva I have no experience with the software but you might want to setup a VM and try it out. hope that helps. Maurice On Fri, May 12, 2017 at 7:44 PM, Richard Forno <rforno@infowarrior.org> wrote:
A better way to collect spam would be to either setup a GMail account and subscribe it to anything and everything you can -- and then wait for the spam to roll in. LOL Or, you could play with some of the spam corpus collections out there perhaps. (ie http://csmining.org/index.php/ spam-email-datasets-.html)
-- rick
On May 12, 2017, at 14:33, Roderick Graham < roderickshawngraham@gmail.com> wrote:
AOIR List:
I am interested in collecting spam emails for analysis. Does anyone know of a "how to guide" or website that gives a tutorial on setting up a "honeypot"? I know that the basic idea is to create fake emails...but after that I am kind of in the dark.
Rod Graham
Roderick Graham Assistant Professor, Department of Sociology and Criminal Justice Old Dominion University 6012 Batten Arts and Letters
Norfolk, VA 23508
Phone: 757-683-5539 _______________________________________________ The Air-L@listserv.aoir.org mailing list is provided by the Association of Internet Researchers http://aoir.org Subscribe, change options or unsubscribe at: http://listserv.aoir.org/listinfo.cgi/air-l-aoir.org
Join the Association of Internet Researchers: http://www.aoir.org/
_______________________________________________ The Air-L@listserv.aoir.org mailing list is provided by the Association of Internet Researchers http://aoir.org Subscribe, change options or unsubscribe at: http://listserv.aoir.org/listinfo.cgi/air-l-aoir.org
Join the Association of Internet Researchers: http://www.aoir.org/
-- ________________________________________________ Maurice Vergeer To contact me, see http://mauricevergeer.nl/node/5 For yesterday's news in perspective: http://www.echovannl.nl/ To see my publications, see http://mauricevergeer.nl/node/1 PGP public key: https://keys.mailvelope.com/pks/lookup?op=get&search=0xE7BF2 4D19BE34017 ________________________________________________
Gmail's spam detection is indeed good, but it routinely gets 4-5 false positives per week just from messages to this AoIR list, so I have to sift through my spam folder regularly and click "Not Spam." - Brian On Friday, May 12, 2017, Maurice Vergeer <m.vergeer@maw.ru.nl> wrote:
I don't think that's a good idea. I just checked a gmail account I set up over a year ago, without using it. And no spam turned up. Google has one of the best spam detection software there is. Most of it will not even reach your spam folder. On a daily basis, my regular gmail account only shows 4 to 5 spam emails. The best think might be to setup a emailserver without a spam filter. Then make sure to publish your email on a webpage and maybe in some discussion groups and wait.
Another more sophisticated option seems to do the job you want: https://github.com/shiva-spamphttps://github.com/shiva-spampot/shiva I have no experience with the software but you might want to setup a VM and try it out.
hope that helps. Maurice
On Fri, May 12, 2017 at 7:44 PM, Richard Forno <rforno@infowarrior.org <javascript:;>> wrote:
A better way to collect spam would be to either setup a GMail account and subscribe it to anything and everything you can -- and then wait for the spam to roll in. LOL Or, you could play with some of the spam corpus collections out there perhaps. (ie http://csmining.org/index.php/ spam-email-datasets-.html)
-- rick
On May 12, 2017, at 14:33, Roderick Graham < roderickshawngraham@gmail.com <javascript:;>> wrote:
AOIR List:
I am interested in collecting spam emails for analysis. Does anyone
know
of a "how to guide" or website that gives a tutorial on setting up a "honeypot"? I know that the basic idea is to create fake emails...but after that I am kind of in the dark.
Rod Graham
Roderick Graham Assistant Professor, Department of Sociology and Criminal Justice Old Dominion University 6012 Batten Arts and Letters
Norfolk, VA 23508
Phone: 757-683-5539 _______________________________________________ The Air-L@listserv.aoir.org <javascript:;> mailing list is provided by the Association of Internet Researchers http://aoir.org Subscribe, change options or unsubscribe at: http://listserv.aoir.org/listinfo.cgi/air-l-aoir.org
Join the Association of Internet Researchers: http://www.aoir.org/
_______________________________________________ The Air-L@listserv.aoir.org <javascript:;> mailing list is provided by the Association of Internet Researchers http://aoir.org Subscribe, change options or unsubscribe at: http://listserv.aoir.org/listinfo.cgi/air-l-aoir.org
Join the Association of Internet Researchers: http://www.aoir.org/
-- ________________________________________________ Maurice Vergeer To contact me, see http://mauricevergeer.nl/node/5 For yesterday's news in perspective: http://www.echovannl.nl/ To see my publications, see http://mauricevergeer.nl/node/1 PGP public key: https://keys.mailvelope.com/pks/lookup?op=get&search= 0xE7BF2 4D19BE34017 ________________________________________________ _______________________________________________ The Air-L@listserv.aoir.org <javascript:;> mailing list is provided by the Association of Internet Researchers http://aoir.org Subscribe, change options or unsubscribe at: http://listserv.aoir.org/ listinfo.cgi/air-l-aoir.org
Join the Association of Internet Researchers: http://www.aoir.org/
Hi, Depends on what your exact use case is, but one way I can think of is to use a public temporary mail box site like mailinator.com .. and track inboxes for popular names, such as 'john' or 'mary' .. for instance: https://www.mailinator.com/inbox2.jsp?public_to=john Regards, Kiran Garimella, Aalto University https://users.ics.aalto.fi/kiran/ On Sat, May 13, 2017 at 1:28 AM, Brian Dear <brian@platohistory.org> wrote:
Gmail's spam detection is indeed good, but it routinely gets 4-5 false positives per week just from messages to this AoIR list, so I have to sift through my spam folder regularly and click "Not Spam."
- Brian
On Friday, May 12, 2017, Maurice Vergeer <m.vergeer@maw.ru.nl> wrote:
I don't think that's a good idea. I just checked a gmail account I set up over a year ago, without using it. And no spam turned up. Google has one of the best spam detection software there is. Most of it will not even reach your spam folder. On a daily basis, my regular gmail account only shows 4 to 5 spam emails. The best think might be to setup a emailserver without a spam filter. Then make sure to publish your email on a webpage and maybe in some discussion groups and wait.
Another more sophisticated option seems to do the job you want: https://github.com/shiva-spamphttps://github.com/shiva-spampot/shiva I have no experience with the software but you might want to setup a VM and try it out.
hope that helps. Maurice
On Fri, May 12, 2017 at 7:44 PM, Richard Forno <rforno@infowarrior.org <javascript:;>> wrote:
A better way to collect spam would be to either setup a GMail account
and
subscribe it to anything and everything you can -- and then wait for the spam to roll in. LOL Or, you could play with some of the spam corpus collections out there perhaps. (ie http://csmining.org/index.php/ spam-email-datasets-.html)
-- rick
On May 12, 2017, at 14:33, Roderick Graham < roderickshawngraham@gmail.com <javascript:;>> wrote:
AOIR List:
I am interested in collecting spam emails for analysis. Does anyone know of a "how to guide" or website that gives a tutorial on setting up a "honeypot"? I know that the basic idea is to create fake emails...but after that I am kind of in the dark.
Rod Graham
Roderick Graham Assistant Professor, Department of Sociology and Criminal Justice Old Dominion University 6012 Batten Arts and Letters
Norfolk, VA 23508
Phone: 757-683-5539 _______________________________________________ The Air-L@listserv.aoir.org <javascript:;> mailing list is provided by the Association of Internet Researchers http://aoir.org Subscribe, change options or unsubscribe at: http://listserv.aoir.org/listinfo.cgi/air-l-aoir.org
Join the Association of Internet Researchers: http://www.aoir.org/
_______________________________________________ The Air-L@listserv.aoir.org <javascript:;> mailing list is provided by the Association of Internet Researchers http://aoir.org Subscribe, change options or unsubscribe at: http://listserv.aoir.org/listinfo.cgi/air-l-aoir.org
Join the Association of Internet Researchers: http://www.aoir.org/
-- ________________________________________________ Maurice Vergeer To contact me, see http://mauricevergeer.nl/node/5 For yesterday's news in perspective: http://www.echovannl.nl/ To see my publications, see http://mauricevergeer.nl/node/1 PGP public key: https://keys.mailvelope.com/pks/lookup?op=get&search= 0xE7BF2 4D19BE34017 ________________________________________________ _______________________________________________ The Air-L@listserv.aoir.org <javascript:;> mailing list is provided by the Association of Internet Researchers http://aoir.org Subscribe, change options or unsubscribe at: http://listserv.aoir.org/ listinfo.cgi/air-l-aoir.org
Join the Association of Internet Researchers: http://www.aoir.org/
The Air-L@listserv.aoir.org mailing list is provided by the Association of Internet Researchers http://aoir.org Subscribe, change options or unsubscribe at: http://listserv.aoir.org/ listinfo.cgi/air-l-aoir.org
Join the Association of Internet Researchers: http://www.aoir.org/
-- -- Kiran
On Fri, May 12, 2017 at 04:28:09PM -0600, Brian Dear wrote:
Gmail's spam detection is indeed good, but it routinely gets 4-5 false positives per week just from messages to this AoIR list, so I have to sift through my spam folder regularly and click "Not Spam."
I don't know if this is applicable to your use case, but in order to avoid that I check the box "Never mark it as spam" when creating mailing lists filters on the Gmail interface. Sometimes, when checking the e-mail via web or phone, I get some warnings that a particular message would have been sent to spam but it wasn't because of the way the filter was set up. Cheers, JMM.
participants (4)
-
Brian Dear -
José María Mateos -
kiran gvr -
Maurice Vergeer