full-disclosure - Spam sent via spambots?

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

From: measl at mfn.org (J.A. Terranson)
Subject: Spam sent via spambots?

On Mon, 1 Nov 2004, Nick FitzGerald wrote:

> In another thread Hugo van der Kooij wrote:
>
> > Securing every machine on the internet would be a good start. 95% of all
> > spam messages I have seen lately gets send from DSL or Cable IP addresses.
> > These are machine which run spamware without the user knowing (s)he is
> > sending out spam by the buckets untill their ISP shuts them down.
>
> Really?
>
> 95%?
>
> Does anyone have sound statistics on how much spam comes from DSL/Cable
> IP-space?

We see at minimum, several thousand a day, and while I can't give you a
statistic, I can state with great confidence that the vast majority,
likely a lot higher than 95%, comes from zombied machines, almost all on
DSL/Cable space.

> And further, does anyone have any idea how to pick apart how much of
> that is simply relaying type activity vs.dedicated spam-bot activity?

Does it matter?

-- 
Yours,

J.A. Terranson
sysadmin@....org
0xBD4A95BF

	"An ill wind is stalking
	while evil stars whir
	and all the gold apples
	go bad to the core"

	S. Plath, Temper of Time