How many backbones here are filtering the makelovenotspam scr eensaver site?

Thu Dec 2 22:39:42 UTC 2004

> -----Original Message-----
> From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu]
> Sent: Thursday, December 02, 2004 5:21 PM
> To: nanog at merit.edu
> Subject: RE: How many backbones here are filtering the makelovenotspam
> scr eensaver site?
> 
> 
> 
[SNIP]

> 
> > As for go180.net, you don't show up much on my radar, but on 
> > Nov 9th we were hit by a spammer from 
> > SpokaneHotZone-63.go180.net [66.225.5.63].
> > I trust this is not a legitimate mail server and I can block 
> > it and any other host that looks like it within the same 
> > domain, right? Thanks.
> > Otherwise, you may want to do something to distinguish it 
> > from the other generic hosts in the same range.
> 
> Glad you don't see much from us, must mean that the effort put forth
> by some of our team is not going to waste.  You are correct, that is
> not a legitimate mail server but is an IP from a City Wide wireless
> network.  That network has since been secured to restrict TCP 25
> outbound (along with other typical miscreant traffic) so you
> shouldn't see anything again from that network on port 25. If we rise
> up on your radar in the future feel free to make use of the typical
> NOC and Abuse e-mail addresses, they do get answered and acted upon
> here.
> 
> 

Glad to hear that. Overall, I'm offering some operational
content on the publicity intensive Lycos botnet and provide
some level of operational analysis free of judgement of Lycos. 

I'd be happy to argue about breadth, depth, and width of botnets
and their commodity status in email. :)

-M<