[109786] in North American Network Operators' Group
RE: McColo and SPAM
daemon@ATHENA.MIT.EDU (Paul Kelly :: Blacknight)
Sat Dec 6 02:14:04 2008
From: "Paul Kelly :: Blacknight" <paul@blacknight.com>
To: Frank Bulk <frnkblk@iname.com>, 'Peter Serwe' <peter.serwe@gmail.com>,
Skywing <Skywing@valhallalegends.com>
Date: Sat, 6 Dec 2008 07:10:12 +0000
In-Reply-To: <!&!AAAAAAAAAAAuAAAAAAAAAKTyXRN5/+lGvU59a+P7CFMBAN6gY+ZG84BMpVQcAbDh1IQAAAATbSgAABAAAAC5qnGv/T8YRLNDUcR/U7U4AQAAAAA=@iname.com>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
--_002_D175CB0A04FE634587DA0987F3C4231021D1D6E3B7iddawgblackni_
Content-Type: text/plain; charset="iso-2022-jp"
Content-Transfer-Encoding: quoted-printable
We saw a dramatic decrease. Attached is our dnsbl mirror in .ie, it mirrors=
spamhaus amoungst other things.
The numbers are in 1000s of 1000s per 5 minute window. (so 2500k =3D 2.5m)
You can see a dramatic decrease that corresponds with them going offline an=
d then the spam level gradually coming back, but it's certainly not back fu=
ll tilt yet.
Paul
Paul Kelly
Technical Director
Blacknight Internet Solutions ltd
Hosting, Colocation, Dedicated servers
IP Transit Services
Tel: +353 (0) 59 9183072
Lo-call: 1850 929 929
DDI: +353 (0) 59 9183091
e-mail: paul@blacknight.ie
web: http://www.blacknight.ie
Blacknight Internet Solutions Ltd,
Unit 12A,Barrowside Business Park,
Sleaty Road,
Graiguecullen,
Carlow,
Ireland
Company No.: 370845
________________________________________
From: Frank Bulk [frnkblk@iname.com]
Sent: 06 December 2008 03:33
To: 'Peter Serwe'; Skywing
Cc: nanog@nanog.org
Subject: RE: McColo and SPAM
We experienced exactly no decrease with the McColo shut down a few weeks
back, even though we receive 2M+ messages per day. It's interesting that
each service provider's spam populations are as different as they are. Som=
e
experienced gigantic decreases, others didn't. And it's not like we have
just one domain.
I know MessageLabs examines spam rates per industry type.
Frank
-----Original Message-----
From: Peter Serwe [mailto:peter.serwe@gmail.com]
Sent: Friday, December 05, 2008 2:57 PM
To: Skywing
Cc: nanog@nanog.org
Subject: Re: McColo and SPAM
Certainly, I have seen a perceptual, yet completely subjective increase.
I know major operators who have claimed to see a gigantic decrease.
Peter
On Fri, Dec 5, 2008 at 12:51 PM, Skywing <Skywing@valhallalegends.com>
wrote:
> McColo hosted the command and control servers for spam botnets and didn't
originate spam directly, at least primarily, according to my understanding.
>
> - S
>
> -----Original Message-----
> From: Peter Serwe [mailto:peter.serwe@gmail.com]
> Sent: Friday, December 05, 2008 3:49 PM
> To: nanog@nanog.org
> Subject: Re: McColo and SPAM
>
> On Fri, Dec 5, 2008 at 11:34 AM, <nanog-request@nanog.org> wrote:
>
>> Message: 1
>> Date: Fri, 05 Dec 2008 20:14:08 +0100
>> From: Revolver Onslaught <revolver.onslaught@gmail.com>
>> Subject: McColo and SPAM
>> To: nanog <nanog@merit.edu>
>> Message-ID: <49397D80.701@gmail.com>
>> Content-Type: text/plain; charset=3DISO-8859-1
>>
>> Hello,
>>
>> Since McColo closed, we noticed the spam was far more intensive than
before.
>>
>> However, it seems the amount of spam is similar than than before.
>>
>> Do you feel the same ?
>>
>> Many thanks,
>> RO
>
> It would seem that the sources of SPAM have merely moved since McColo
> was shut down and it's going to
> take some time for everyone's blackhole routes and RBL's to catch up.
> I have personally noticed a higher
> delivered spam content in my own email accounts.
>
> Peter
>
>
> --
> =1B$B%T!<%?!<=1B(B
>
>
--
=1B$B%T!<%?!<=1B(B
--_002_D175CB0A04FE634587DA0987F3C4231021D1D6E3B7iddawgblackni_
Content-Type: image/png; name="aggregate-month.png"
Content-Description: aggregate-month.png
Content-Disposition: attachment; filename="aggregate-month.png"; size=4644;
creation-date="Sat, 06 Dec 2008 07:13:04 GMT";
modification-date="Sat, 06 Dec 2008 07:13:04 GMT"
Content-Transfer-Encoding: base64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--_002_D175CB0A04FE634587DA0987F3C4231021D1D6E3B7iddawgblackni_--
