Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: "Make love, not spam"....

  • From: Hannigan, Martin
  • Date: Mon Nov 29 13:20:21 2004


> -----Original Message-----
> From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]
> Sent: Monday, November 29, 2004 12:45 PM
> To: nanog@merit.edu
> Subject: RE: "Make love, not spam"....
> 
> 
> 
> >  > -----Original Message-----
> >>  From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]
> >>  Sent: Monday, November 29, 2004 11:54 AM
> >>  To: nanog@merit.edu
> >>  Subject: RE: "Make love, not spam"....
> >>
> >>
> >>
> >[ SNIP ]
> >
> >>
> >>  The big difference between Lycos Europe, and a script kiddie with
> >>  zombies is that Lycos is mature enough to use restraint 
> and not knock
> >>  down websites with brute force.  They're attempting to use the
> >>  politically correct "grown up" way to attack someone:  economics.
> >
> >I didn't know there was a politically correct way to create a
> >BotMonster and rule the Internet by emminent domain.
> >
> >-M<
> 
> 
> Yeah, that's exactly what they're doing!  It's a plot to TAKE OVER 
> THE WORLD.  You figured it out!
> 
> It's about giving the spammers what they want:  More traffic to their 
> websites.  How can it be wrong when they send out 1 million emails 
> that all say "click on this link" and 1 million computers actually 
> click the link?  Who's in the wrong there?
> 
> Besides: "rule the Internet by emminent domain."  Isn't' that 
> Verisign's job?



For all who are interested, the controller appears to live at
230.136.241.83

Interesting. I started it up and it immediately attacked 

Yahoo/Akamai: premium3.geo.yahoo.akadns.net

Then it went and attacked a slew of other sites and had nothing
but errors coming back. 

It also appears to attack sequentially from the top each time the dll
loads. They've miscalculated the speed at which spammers relocate. 
RBL's aren't realtime. Spammers are near real time.




<makeLOVEnotSPAM>(bhGBX5Und`p\|kr3<&D4=RfF#o:4F'^!?)TC:X@Sri)hm"tw!g;E6=uaKe
.a*iNb</makeLOVEnotSPAM>
</&D4=RfF#o:4F'^!?)TC:X@Sri)hm"tw!g;E6=uaKe.a*iNb</makeLOVEnotSPAM></makeLOV
EnotSPAM>.<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>403 Forbidden</TITLE>
</HEAD><BODY>
<H1>Forbidden</H1>
You don't have permission to access /
on this server.<P>
</BODY></HTML>

<makeLOVEnotSPAM>@1w0tu|aG/)*kzM*L&quot;8xbj{GN<y/ZZA\5zg('PIM`6MD$+V&Ta8f"h
M3lQvAWZ}iv</makeLOVEnotSPAM>
</y/ZZA\5zg('PIM`6MD$+V&Ta8f"hM3lQvAWZ}iv</makeLOVEnotSPAM></makeLOVEnotSPAM
>.<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>501 Method Not Implemented</TITLE>
</HEAD><BODY>
<H1>Method Not Implemented</H1>
&lt;makeLOVEnotSPAM&gt;@1w0tu|aG/)*kzM*L&amp;quot;8xbj{GN&lt;y/ZZA\5zg('PIM`
6MD$+V&amp;Ta8f"hM3lQvAWZ}iv&lt;/makeLOVEnotSPAM&gt; to / not supported.<P>
Invalid method in request
&lt;makeLOVEnotSPAM&gt;@1w0tu|aG/)*kzM*L&amp;quot;8xbj{GN&lt;y/ZZA\\5zg('PIM
`6MD$+V&amp;Ta8f\"hM3lQvAWZ}iv&lt;/makeLOVEnotSPAM&gt;<P>
</BODY></HTML>

> 
> -Jerry
> 




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.