-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Fri, Dec 5, 2008 at 11:10 PM, Paul Kelly :: Blacknight
<[EMAIL PROTECTED]> wrote:
> We saw a dramatic decrease. Attached is our dnsbl mirror in .ie, it
> mirrors spamhaus amoungst other things.
>
McColo was just an exercise in "managing" cyber cri
We saw a dramatic decrease. Attached is our dnsbl mirror in .ie, it mirrors
spamhaus amoungst other things.
The numbers are in 1000s of 1000s per 5 minute window. (so 2500k = 2.5m)
You can see a dramatic decrease that corresponds with them going offline and
then the spam level gradually coming
We experienced exactly no decrease with the McColo shut down a few weeks
back, even though we receive 2M+ messages per day. It's interesting that
each service provider's spam populations are as different as they are. Some
experienced gigantic decreases, others didn't. And it's not like we have
j
Seen behind my ISP (gmx.de),
I get almost no spam. Looking into the spam folder I
see some 10% of what I used to see.
On the other other hand when they closed I got an
alarm for my homepage. I got so many wordbooks on
my ssh that they exceeded my traffic limit.
I had to move my sshd to IPv6 only
I thought it was mostly control serversI doubt any 'botnet master'
would hardcode an IP address of a server without some sort of backup
using some domains that they can always change the DNS on. They update
that and the bots will then start connecting to the new 'control
servers' and thus spam
Also, where I live, if the power goes out hard (for example, during
the last Hurricane),
the cell phone will not have service either.
hello
What about GPS ?
simply sending such data would help more then a "unreliable mobile
phone call " right ?
(we have enough places where i live an
We have not seen any decrease. In the last 24 hours we have seen 3.5
million messages blocked.
-Mike
-Original Message-
From: Revolver Onslaught [mailto:[EMAIL PROTECTED]
Sent: Friday, December 05, 2008 2:14 PM
To: nanog
Subject: McColo and SPAM
Hello,
Since McColo closed, we noticed
Certainly, I have seen a perceptual, yet completely subjective increase.
I know major operators who have claimed to see a gigantic decrease.
Peter
On Fri, Dec 5, 2008 at 12:51 PM, Skywing <[EMAIL PROTECTED]> wrote:
> McColo hosted the command and control servers for spam botnets and didn't
> or
On Dec 5, 2008, at 12:51 PM, Skywing wrote:
McColo hosted the command and control servers for spam botnets and
didn't originate spam directly, at least primarily, according to my
understanding.
- S
That is correct. Srizbi and Rustok, primarily.
--
bk
McColo hosted the command and control servers for spam botnets and didn't
originate spam directly, at least primarily, according to my understanding.
- S
-Original Message-
From: Peter Serwe [mailto:[EMAIL PROTECTED]
Sent: Friday, December 05, 2008 3:49 PM
To: nanog@nanog.org
Subject: R
On Fri, Dec 5, 2008 at 11:34 AM, <[EMAIL PROTECTED]> wrote:
> Message: 1
> Date: Fri, 05 Dec 2008 20:14:08 +0100
> From: Revolver Onslaught <[EMAIL PROTECTED]>
> Subject: McColo and SPAM
> To: nanog <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> Content-Type: text/plain; charset=ISO-8859
Hi...
> According to the 0.75 sorcecode ICMP is still the default prot used,
> and the definition of MTR from bitwizards homepage disagress with you:
>
> "mtr combines the functionality of the 'traceroute' and 'ping'
> programs in a single network diagnostic tool.
> As mtr starts, it investigates
Sorry, and we have the premium spam add-on too.
-Original Message-
From: Charles Wyble [mailto:[EMAIL PROTECTED]
Sent: Friday, December 05, 2008 2:28 PM
To: Dave Larter
Cc: Revolver Onslaught; nanog
Subject: Re: McColo and SPAM
Is that an off the shelf tool or custom built?
It Symantec SMTP gateway v smssmtp501-2007-11-07_02
I have setup another new version Symantec Brightmail Gateway 7.7 product
which is in the config stage and only handling a few test domains right
now.
-Original Message-
From: Charles Wyble [mailto:[EMAIL PROTECTED]
Sent: Friday, Decemb
And delivered spam is about the same too. This is just spam I receive, May was
when I brought our new smtp gateways online.
-Original Message-
From: Revolver Onslaught [mailto:[EMAIL PROTECTED]
Sent: Friday, December 05, 2008 2:25 PM
To: Dave Larter
Cc: nanog
Subject: Re: McColo and
Same here, with the same subject. Picked up only recently.
--
Erik
Caneris
Tel: 647-723-6365
Fax: 647-723-5365
Toll-free: 1-866-827-0021
www.caneris.com
From: Charles Wyble [EMAIL PROTECTED]
Sent: Friday, December 05, 2008 2:26 PM
To: Jeff Shultz
Cc: NANO
Is that an off the shelf tool or custom built?
Jeff Shultz wrote
I've been getting an fair number of e-mails (up from zero) from
customers asking about spam they are getting with their e-mail address
being in the From: address. I know that this has always been
happening, I'm just wondering if it's been buried under the McColo
stuff so th
Very stange. I could notice our Spamhaus rejects were the same as before
Dave Larter a écrit :
> It is still way down for me, see attached.
>
> Dave
>
> -Original Message-
> From: Revolver Onslaught [mailto:[EMAIL PROTECTED]
> Sent: Friday, December 05, 2008 2:14 PM
> To: nanog
> S
It is still way down for me, see attached.
Dave
-Original Message-
From: Revolver Onslaught [mailto:[EMAIL PROTECTED]
Sent: Friday, December 05, 2008 2:14 PM
To: nanog
Subject: McColo and SPAM
Hello,
Since McColo closed, we noticed the spam was far more intensive than
before.
However
Revolver Onslaught wrote:
Hello,
Since McColo closed, we noticed the spam was far more intensive than before.
However, it seems the amount of spam is similar than than before.
Do you feel the same ?
Many thanks,
RO
I've been getting an fair number of e-mails (up from zero) from
customers
Hello,
Since McColo closed, we noticed the spam was far more intensive than before.
However, it seems the amount of spam is similar than than before.
Do you feel the same ?
Many thanks,
RO
This is an automated weekly mailing describing the state of the Internet
Routing Table as seen from APNIC's router in Japan.
Daily listings are sent to [EMAIL PROTECTED]
For historical data, please see http://thyme.apnic.net.
If you have any comments please contact Philip Smith <[EMAIL PROTECTED]
Aaron Wendel wrote:
Hmm... Florida and the entire Gulf Coast and probably Eastern US...
Hurricanes, and the West Coast, Earthquakes... and the northern US, severe
winter storms. Where does that leave? Utah? Everyone move to Utah!
Aaron
Inland Pacific NW. Minor (but really minor) earthquake
Hmm... Florida and the entire Gulf Coast and probably Eastern US...
Hurricanes, and the West Coast, Earthquakes... and the northern US, severe
winter storms. Where does that leave? Utah? Everyone move to Utah!
Aaron
-Original Message-
From: Jack Bates [mailto:[EMAIL PROTECTED]
Sent:
On Fri, Dec 5, 2008 at 10:34 AM, Jack Bates <[EMAIL PROTECTED]> wrote:
> Yeah, I've been telling them for years that everyone should just vacate
> Oklahoma, and Kansas.
And anywhere in Florida within 50 miles of the coast.
-- Ben
On Dec 5, 2008, at 10:07 AM, David Cantrell wrote:
On Fri, Dec 05, 2008 at 09:21:53AM -0500, Marshall Eubanks wrote:
On Dec 5, 2008, at 9:01 AM, David Cantrell wrote:
On Thu, Dec 04, 2008 at 11:08:49AM -0600, Jack Bates wrote:
Unless you live in a natural disaster prone location.
So don't d
David Cantrell wrote:
A "natural disaster prone location" would, by a normal person, be
taken to be one where there is a high probability of being visited by
nature's Fuckup Fairies. Such as flood plains (eg much of the Thames
estuary) and the sides of active volcanoes (Naples). Most places hav
Mobiles are usually (much) cheaper than a landline in such places. Inbound
calls are usually free too, so they are becoming quite common (relatively),
even in underdeveloped areas, at least according to my understanding.
- S
-Original Message-
From: David Cantrell [mailto:[EMAIL PROTEC
On Fri, Dec 05, 2008 at 09:21:53AM -0500, Marshall Eubanks wrote:
> On Dec 5, 2008, at 9:01 AM, David Cantrell wrote:
> >On Thu, Dec 04, 2008 at 11:08:49AM -0600, Jack Bates wrote:
> >>Unless you live in a natural disaster prone location.
> >So don't do that.
> There is literarily no place on the p
I definately agree would be cheaper if was available on site.
BTW, they should be back up now.
On Fri, Dec 5, 2008 at 10:31 AM, Alex Rubenstein <[EMAIL PROTECTED]> wrote:
> I wonder if having a spare card there would have been cheaper than this
> outage and resulting flights and labour?
>
> >
> >
for the guy that will replace the card RoadTrip!!! lol
On Fri, Dec 5, 2008 at 8:31 AM, Alex Rubenstein <[EMAIL PROTECTED]> wrote:
> I wonder if having a spare card there would have been cheaper than this
> outage and resulting flights and labour?
>
>>
>> Yup, there is a defective card in the
I wonder if having a spare card there would have been cheaper than this outage
and resulting flights and labour?
>
> Yup, there is a defective card in the Bahamas. They should be flying in
> this
> morning to have it replaced.
> It's been out since yesterday evening.
>
This report has been generated at Fri Dec 5 21:22:08 2008 AEST.
The report analyses the BGP Routing Table of AS2.0 router
and generates a report on aggregation potential within the table.
Check http://www.cidr-report.org for a current version of this report.
Recent Table History
Date
BGP Update Report
Interval: 03-Nov-08 -to- 04-Dec-08 (32 days)
Observation Point: BGP Peering with AS131072
TOP 20 Unstable Origin AS
Rank ASNUpds % Upds/PfxAS-Name
1 - AS9583 220468 1.9% 174.8 -- SIFY-AS-IN Sify Limited
2 - AS4538 206468 1.8%
Thanks for the confirmation.
Regards
Reggie
_
From: Sharlon R. Carty [mailto:[EMAIL PROTECTED]
Sent: Friday, December 05, 2008 9:16 AM
To: Beavis
Cc: [EMAIL PROTECTED]; nanog@nanog.org
Subject: Re: ARCOS Outage
Yup, there is a defective card in the Bahamas. They should be flying in t
On Dec 5, 2008, at 9:01 AM, David Cantrell wrote:
On Thu, Dec 04, 2008 at 11:08:49AM -0600, Jack Bates wrote:
911 services are heavily used when a geographical area has an
emergency,
and that emergency usually includes not having power.
Yes, and it usually involves several thousand people
Yup, there is a defective card in the Bahamas. They should be flying in
this morning to have it replaced.
It's been out since yesterday evening.
On Fri, Dec 5, 2008 at 9:30 AM, Beavis <[EMAIL PROTECTED]> wrote:
> I ran through ARCOS(CN) and I didn't get any connectivity disruption
> yesterday.
>
Folks,
I doubt the incumbents are the most vulnerable in this situation. It is
debt-laden competitive providers that face the greatest difficulty.
Look at balance sheets and who is struggling to generate a profit or who has
never generated a profit.
Roderick S. Beck
Director of European Sal
On Thu, Dec 04, 2008 at 11:08:49AM -0600, Jack Bates wrote:
> 911 services are heavily used when a geographical area has an emergency,
> and that emergency usually includes not having power.
Yes, and it usually involves several thousand people all phoning to
report the same damned thing, cloggin
I ran through ARCOS(CN) and I didn't get any connectivity disruption yesterday.
On Fri, Dec 5, 2008 at 5:49 AM, Reginald CHAUVET ( H )
<[EMAIL PROTECTED]> wrote:
>
> This is my first post on this list.
>
> Does anyone on the list knows what happened with the ARCOS submarine cable
> last night?
>
This is my first post on this list.
Does anyone on the list knows what happened with the ARCOS submarine cable
last night?
Last night at 07H14PM Two out of the Three ISP from HAITI connected to the
internet backbone on the ARCOS submarine cable through the Dominican
Republic at Puerto Plata, ex
42 matches
Mail list logo
