--On Monday, December 31, 2007 4:00 PM -0700 Mike Cisar <[EMAIL PROTECTED]> wrote:
I haven't counted, but based on the flow, I'd estimate I've seen about 1000 distinct IP's... that is what leads me to believe it's some sort of distributed attack. There are some repeat recipients, from different IP's at different times. Like a whole bunch of little zombies all working off of the same list.
That's what a spam botnet looks like. There are usually a few hundred thousand hosts working the same list. If you have not seen this many times before, lucky you. Joseph Brennan Columbia University Information Technology
