Last modified: Sat Jan 26 10:02:39 2019
This page lists anti-spam tool(s) developed by Bruce Barnett.
- FF - Find Friends or FF (Text)- Give this a list of
hostnames and/or URL's, and it will look up the associated names,
aliases, IP addresses, name servers, and mail servers. If a URL is
given, it will extract the host name and do the above. It will also
query the URL, looking for additional URL's and hostnames to add to
the search. The program will then recurse through the list again
(limited by the -# argument) and repeat the process. When done, the
program will print the results sorted by IP address, and report wich
of these IP addresses are blocklisted, and on which list.
Therefore this program is designed to find ISP's that provide
support for spammers. The new version has improved HTTP scanning, and
a mechanism to not scan specific addresses, like w3.org, perl.org,
etc.
As an example output, here is a list of addresses I've seen in
spam: Webfinity.www
the command
cat Webfinity.www | FF.pl -T10 -x
I am generating the results weekly and placing it on my web page. I am dedicating this tool to the Python Video/Webfinity spammers, without whom this tool would not have been written.
The weekly results of the query be seen
here
Here is a second list, using this file as input Webfinity.list which was the list of all of the hosts sharing the same address - 216.130.213.253 - on Jan 28/2006.
The output can be seen here
ISRAEL FAGBEMI has been sending out USENET spam, and I'm tired of it. I added his list of domains found here
and once a week I feed this into my Find Friends program to find out who is affiliated with this spammer.
The output - which shows a lot of people affiliated with this spammer - can be seen here
Note that the results tends to change as the spammers hop around
from one ISP to another. So the results given above are temporary.
Also note that this is just a diagnostic tool which I have found
useful in the past. Sites unrelated to the spam often show up. A
spammer can reference any other site on their web page, and falsely
implicate a relationshiop. Use common sense.
Also - the FF spider uses the file $HOME/.ff to list domains that are "trusted" or rather - if found, the spider won't examing those pages. The file I use can be found here but you have to rename it for your machine.
- FF - Find Friends (Old) - Older version
Also check out
Chip Rosenthal's tools http://www.unicom.com/sw/ - which was the inspiration.