Oh my god - it’s full of stars!
Based on “The Spinning Cube of Potential Doom” and many other similar projects - I present Spam Cloud. What’s Spam Cloud about? It’s just pretty visualisation of spamming areas of internet. It shows hosts as blinking points for each spam record in your log. Recipe to make Spam Cloud:
- Get your /var/log/maillog.
- grep all lines with “Rejected: you’re in (hostname) rbl list”
- Get source ips.
- Map a.b.c.d address into 4d space: a->x, b->y, c->z, d->time
- Hack a short program in C / OpenGL and take screenshots:
What does it tell you? Point visible for a long time means a /24 network, that really likes you. Line means that a /16 network full of zombies got your email address. If you see a rectangle, or cube, then you’re in really deep shit. Colours can also be used to indicate number of spam messages from host represented by certain {coordinate, time}.
Of course seeing it without animation will not show you anything special - only stats. So here for example, you can see two groups: ~80../8 and ~200../8, and some nice lines. After zooming in - mostly 2 of them:
*.tpnet.pl was obvious, as it was my network and china is some strange /24 accident without rev-dns. It doesn’t matter - china is in firewall tarpit now. Hopefully, I won’t see any squares soon, but I’d really like to get some large many-months stats file with ip:number_of_spams to visualise… Is there any admin reading this?
Leave a comment