Re: [Asrg] SANOG/APCAUCE presentation: Tracking A Zombie Army

["Walter Dnes" <waltdnes at waltdnes.org>]

On Fri, Jul 30, 2004 at 04:32:26PM +0800, James Lick wrote
> I'm a little bit behind in reading this list, but this is a followup to 
> the recent discussions about zombie hosts sending spam.  I gave a 
> presentation at SANOG/APCAUCE conference this week outline the operation 
> of such a network.  This might be of interest, as a lot of the existing 
> information is based on anecdotal evidence and speculation.
> 
> http://jameslick.com/zombies/Tracking%20A%20Zombie%20Army.pdf
> 
> I hope to present this in more detail at a later date (perhaps APRICOT 
> 2005) after further analysis of the data is done.

  Interesting; check http://www.waltdnes.org/spam/zombielists/2004/ for
monthly lists of zombie attacks.  You can download the zipfile to get
the month's data.  On a really slow day, my rules block under 10 email
deliveries.  Every once in a while, my logs show a co-ordinated attack
from all over the planet, in some cases totalling several hundred.  I've
listed these attacks, going back to May, on my webpage.

-- 
Walter Dnes <waltdnes at waltdnes.org>
Email users are divided into two classes;
1) Those who have effective spam-blocking
2) Those who wish they did

_______________________________________________
Asrg mailing list
Asrg at ietf.org
https://www1.ietf.org/mailman/listinfo/asrg