[Mimedefang] Spammer zombie group behaviour

[David F. Skoll]

One more followup:  We have dramatic evidence of coordination.
Please see, for example:

http://www.roaringpenguin.com/canit/reports.php?what=hit-n-run-dom&domain=t-online.de

Log in as "demo" with password "demo"

You can see clusters of machines with each cluster comprising a spam
attack.  The largest attack was around 2004/04/22 09:11 and involved
21 different machines.

Regards,

David.