Honeypot Success

Nearly exactly a year after I donated an MX entry to Project Honeypot, it was used to catch a previously unknown harvester (Project Honeypot sends an email out to let you know that this has happened). The MX is public, so it could have been harvested from my site (not this one, or the Massey one, or the ihug one) or from anyone else’s that participates in Project Honeypot.

It’s interesting that it took a year (and two days) for this to happen. Does that mean that Project Honeypot has a really large number of MX’s compared to the number of new harvesters arriving? I like that theory more than the one that suggests that there are so few harvesters caught that it takes this long. Of course, it could just have been a fluke, and maybe other people’s MXs are successful more quickly.

The number of harvesters for the site seems pretty low, especially considering the amount of spam that must (because the addresses aren’t anywhere else) come from harvesting it. Perhaps I should adjust where the honeypot links are, to try and make them more appealing.

If you’re not already part of Project Honeypot, and you have a website (on which you can use custom cgi scripts), I strongly encourage you to join. You don’t have to donate an MX entry if you don’t have the ability to do that.

technorati tags: , , ,


One response to this post.

  1. […] Back on February 1st, I received notification that a MX entry that I donated to Project Honeypot helped identify a previously unknown email harvester.  Last Thursday, I received notification of another success (Honeypot information). […]

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: