[119652] in North American Network Operators' Group
Re: I got a live one! - Spam source
daemon@ATHENA.MIT.EDU (Jon Lewis)
Wed Nov 25 08:08:20 2009
Date: Wed, 25 Nov 2009 08:07:11 -0500 (EST)
From: Jon Lewis <jlewis@lewis.org>
To: Rich Kulawiec <rsk@gsp.org>
In-Reply-To: <20091125114955.GA18546@gsp.org>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Wed, 25 Nov 2009, Rich Kulawiec wrote:
> On Tue, Nov 24, 2009 at 10:22:36PM -0500, Russell Myba wrote:
>> Looks like of our customers has decided to turn their /24 into a nice little
>> space spewing machine. Doesn't seem like just one compromised host.
>
> 1. This is possibly/probably better on spam-l.
> 2. This is a very common operational model. Any number of spamgangs
> have been busy doing this with multiple /24's scattered over numerous
> providers in order to distribute the workload and minimize the impact
> of any takedown.
One of them actually patented it. Further proof that you can patent just
about anything in the US.
http://www.faqs.org/patents/app/20090271475
----------------------------------------------------------------------
Jon Lewis | I route
Senior Network Engineer | therefore you are
Atlantic Net |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________