[Mimedefang] Spammer zombie group behaviour

David F. Skoll dfs at roaringpenguin.com
Thu Apr 22 15:20:17 EDT 2004


One more followup:  We have dramatic evidence of coordination.
Please see, for example:

http://www.roaringpenguin.com/canit/reports.php?what=hit-n-run-dom&domain=t-online.de

Log in as "demo" with password "demo"

You can see clusters of machines with each cluster comprising a spam
attack.  The largest attack was around 2004/04/22 09:11 and involved
21 different machines.

Regards,

David.



More information about the MIMEDefang mailing list