[109241] in North American Network Operators' Group
RE: [funsec] McColo: Major Source of Online Scams
daemon@ATHENA.MIT.EDU (Nick Newman)
Wed Nov 12 16:52:37 2008
Date: Wed, 12 Nov 2008 16:52:12 -0500
In-Reply-To: <491B42C4.7080805@wvi.com>
From: "Nick Newman" <NNewman@nw3c.org>
To: "Jeff Shultz" <jeffshultz@wvi.com>,
"NANOG list" <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org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