nanog mailing list archives

Re: I got a live one! - Spam source


From: Jon Lewis <jlewis () lewis org>
Date: Wed, 25 Nov 2009 08:07:11 -0500 (EST)

On Wed, 25 Nov 2009, Rich Kulawiec wrote:

On Tue, Nov 24, 2009 at 10:22:36PM -0500, Russell Myba wrote:
Looks like of our customers has decided to turn their /24 into a nice little
space spewing machine.  Doesn't seem like just one compromised host.

1. This is possibly/probably better on spam-l.
2. This is a very common operational model.   Any number of spamgangs
have been busy doing this with multiple /24's scattered over numerous
providers in order to distribute the workload and minimize the impact
of any takedown.

One of them actually patented it. Further proof that you can patent just about anything in the US.

http://www.faqs.org/patents/app/20090271475

----------------------------------------------------------------------
 Jon Lewis                   |  I route
 Senior Network Engineer     |  therefore you are
 Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________


Current thread: