McColo and SPAM

Skywing Skywing at
Fri Dec 5 20:51:16 UTC 2008

McColo hosted the command and control servers for spam botnets and didn't originate spam directly, at least primarily, according to my understanding.

- S

-----Original Message-----
From: Peter Serwe [mailto:peter.serwe at] 
Sent: Friday, December 05, 2008 3:49 PM
To: nanog at
Subject: Re: McColo and SPAM

On Fri, Dec 5, 2008 at 11:34 AM,  <nanog-request at> wrote:

> Message: 1
> Date: Fri, 05 Dec 2008 20:14:08 +0100
> From: Revolver Onslaught <revolver.onslaught at>
> Subject: McColo and SPAM
> To: nanog <nanog at>
> Message-ID: <49397D80.701 at>
> Content-Type: text/plain; charset=ISO-8859-1
> Hello,
> Since McColo closed, we noticed the spam was far more intensive than before.
> However, it seems the amount of spam is similar than than before.
> Do you feel the same ?
> Many thanks,
> RO

It would seem that the sources of SPAM have merely moved since McColo
was shut down and it's going to
take some time for everyone's blackhole routes and RBL's to catch up.
I have personally noticed a higher
delivered spam content in my own email accounts.



More information about the NANOG mailing list