Re: McColo and SPAM

[Neil <kngspook () gmail com>]

What's very interesting to me is the very rhythmic peaks-and-valleys  
you show...  Seems to go up every day, down during the night;  
gradually rising mon-wed, slight drops thurs-fri, and then big drop  
sat, lower drop sun, and then jumps back on monday.

On 6 Dec 2008, at 02:10, Paul Kelly :: Blacknight wrote:

> We saw a dramatic decrease. Attached is our dnsbl mirror in .ie, it  
> mirrors spamhaus amoungst other things.
>
> The numbers are in 1000s of 1000s per 5 minute window. (so 2500k =  
> 2.5m)
>
> You can see a dramatic decrease that corresponds with them going  
> offline and then the spam level gradually coming back, but it's  
> certainly not back full tilt yet.
>
> Paul
>
> Paul Kelly
> Technical Director
> Blacknight Internet Solutions ltd
> Hosting, Colocation, Dedicated servers
> IP Transit Services
> Tel: +353 (0) 59 9183072
> Lo-call: 1850 929 929
> DDI: +353 (0) 59 9183091
>
> e-mail: paul () blacknight ie
> web: http://www.blacknight.ie
>
> Blacknight Internet Solutions Ltd,
> Unit 12A,Barrowside Business Park,
> Sleaty Road,
> Graiguecullen,
> Carlow,
> Ireland
>
> Company No.: 370845
> ________________________________________
> From: Frank Bulk [frnkblk () iname com]
> Sent: 06 December 2008 03:33
> To: 'Peter Serwe'; Skywing
> Cc: nanog () nanog org
> Subject: RE: McColo and SPAM
>
> We experienced exactly no decrease with the McColo shut down a few  
> weeks
> back, even though we receive 2M+ messages per day.  It's interesting  
> that
> each service provider's spam populations are as different as they  
> are.  Some
> experienced gigantic decreases, others didn't.  And it's not like we  
> have
> just one domain.
>
> I know MessageLabs examines spam rates per industry type.
>
> Frank
>
> -----Original Message-----
> From: Peter Serwe [mailto:peter.serwe () gmail com]
> Sent: Friday, December 05, 2008 2:57 PM
> To: Skywing
> Cc: nanog () nanog org
> Subject: Re: McColo and SPAM
>
> Certainly, I have seen a perceptual, yet completely subjective  
> increase.
>
> I know major operators who have claimed to see a gigantic decrease.
>
> Peter
>
> On Fri, Dec 5, 2008 at 12:51 PM, Skywing <Skywing () valhallalegends com>
> wrote:
> > McColo hosted the command and control servers for spam botnets and  
> > didn't
> originate spam directly, at least primarily, according to my  
> understanding.
> > - S
> >
> > -----Original Message-----
> > From: Peter Serwe [mailto:peter.serwe () gmail com]
> > Sent: Friday, December 05, 2008 3:49 PM
> > To: nanog () nanog org
> > Subject: Re: McColo and SPAM
> >
> > On Fri, Dec 5, 2008 at 11:34 AM,  <nanog-request () nanog org> wrote:
> >
> > > Message: 1
> > > Date: Fri, 05 Dec 2008 20:14:08 +0100
> > > From: Revolver Onslaught <revolver.onslaught () gmail com>
> > > Subject: McColo and SPAM
> > > To: nanog <nanog () merit edu>
> > > Message-ID: <49397D80.701 () gmail com>
> > > Content-Type: text/plain; charset=ISO-8859-1
> > >
> > > Hello,
> > >
> > > Since McColo closed, we noticed the spam was far more intensive than
> before.
> > > However, it seems the amount of spam is similar than than before.
> > >
> > > Do you feel the same ?
> > >
> > > Many thanks,
> > > RO
> >
> > It would seem that the sources of SPAM have merely moved since McColo
> > was shut down and it's going to
> > take some time for everyone's blackhole routes and RBL's to catch up.
> > I have personally noticed a higher
> > delivered spam content in my own email accounts.
> >
> > Peter
> >
> >
> > --
> > ピーター
>
>
>
> --
> ピーター
>
>
> <aggregate-month.png>