North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: "Make love, not spam"....

  • From: Hannigan, Martin
  • Date: Mon Nov 29 13:20:21 2004 
> -----Original Message-----
> From: [email protected] [mailto:[email protected]]
> Sent: Monday, November 29, 2004 12:45 PM
> To: [email protected]
> Subject: RE: "Make love, not spam"....
> 
> 
> 
> >  > -----Original Message-----
> >>  From: [email protected] [mailto:[email protected]]
> >>  Sent: Monday, November 29, 2004 11:54 AM
> >>  To: [email protected]
> >>  Subject: RE: "Make love, not spam"....
> >>
> >>
> >>
> >[ SNIP ]
> >
> >>
> >>  The big difference between Lycos Europe, and a script kiddie with
> >>  zombies is that Lycos is mature enough to use restraint 
> and not knock
> >>  down websites with brute force.  They're attempting to use the
> >>  politically correct "grown up" way to attack someone:  economics.
> >
> >I didn't know there was a politically correct way to create a
> >BotMonster and rule the Internet by emminent domain.
> >
> >-M<
> 
> 
> Yeah, that's exactly what they're doing!  It's a plot to TAKE OVER 
> THE WORLD.  You figured it out!
> 
> It's about giving the spammers what they want:  More traffic to their 
> websites.  How can it be wrong when they send out 1 million emails 
> that all say "click on this link" and 1 million computers actually 
> click the link?  Who's in the wrong there?
> 
> Besides: "rule the Internet by emminent domain."  Isn't' that 
> Verisign's job?



For all who are interested, the controller appears to live at
230.136.241.83

Interesting. I started it up and it immediately attacked 

Yahoo/Akamai: premium3.geo.yahoo.akadns.net

Then it went and attacked a slew of other sites and had nothing
but errors coming back. 

It also appears to attack sequentially from the top each time the dll
loads. They've miscalculated the speed at which spammers relocate. 
RBL's aren't realtime. Spammers are near real time.




<makeLOVEnotSPAM>(bhGBX5Und`p\|kr3<&D4=RfF#o:4F'^!?)TC:[email protected])hm"tw!g;E6=uaKe
.a*iNb</makeLOVEnotSPAM>
</&D4=RfF#o:4F'^!?)TC:[email protected])hm"tw!g;E6=uaKe.a*iNb</makeLOVEnotSPAM></makeLOV
EnotSPAM>.<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>403 Forbidden</TITLE>
</HEAD><BODY>
<H1>Forbidden</H1>
You don't have permission to access /
on this server.<P>
</BODY></HTML>

<makeLOVEnotSPAM>@1w0tu|aG/)*kzM*L&quot;8xbj{GN<y/ZZA\5zg('PIM`6MD$+V&Ta8f"h
M3lQvAWZ}iv</makeLOVEnotSPAM>
</y/ZZA\5zg('PIM`6MD$+V&Ta8f"hM3lQvAWZ}iv</makeLOVEnotSPAM></makeLOVEnotSPAM
>.<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>501 Method Not Implemented</TITLE>
</HEAD><BODY>
<H1>Method Not Implemented</H1>
&lt;makeLOVEnotSPAM&gt;@1w0tu|aG/)*kzM*L&amp;quot;8xbj{GN&lt;y/ZZA\5zg('PIM`
6MD$+V&amp;Ta8f"hM3lQvAWZ}iv&lt;/makeLOVEnotSPAM&gt; to / not supported.<P>
Invalid method in request
&lt;makeLOVEnotSPAM&gt;@1w0tu|aG/)*kzM*L&amp;quot;8xbj{GN&lt;y/ZZA\\5zg('PIM
`6MD$+V&amp;Ta8f\"hM3lQvAWZ}iv&lt;/makeLOVEnotSPAM&gt;<P>
</BODY></HTML>

> 
> -Jerry
>