A new blog has been posted at Sophos’ website about a spam which tracks the I.P. address of users who click on malicous spam link.

Two images are posted in the blog and both have Chinese letters on them.

Unlike other similar spam, the user cannot access the link to the site once he or she had clicked it.

A text file is posted on the site which lists all the I.P. ranges based on the users who have been tricked. The most dominant I.P. came from machines in Taiwan but it also has I.P.’s from other continents including Australia and North America.

A more detailed explanation is available in the Sophos’ blog which is located in the link below.

Source: Sophos