Welcome, Guest. Please login or register.

Author Topic: Spam Volumes Drop by 2/3 After Firm Goes Offline  (Read 1264 times)

0 Members and 1 Guest are viewing this topic.


  • Administrator
  • Hero Member
  • *****
  • Posts: 10689
  • Karma: 1871
    • View Profile
    • Qwoter
Spam Volumes Drop by 2/3 After Firm Goes Offline
« on: November 12, 2008, 06:32:38 PM »
Spam Volumes Drop by Two-Thirds After Firm Goes Offline

The volume of junk e-mail sent worldwide plummeted on Tuesday after a Web hosting firm identified by the computer security community as a major host of organizations engaged in spam activity was taken offline.

Experts say the precipitous drop-off in spam comes from Internet providers unplugging McColo Corp., a hosting provider in Northern California that was the home base for machines responsible for coordinating the sending of roughly 75 percent of all spam each day.

In an alert sent out Wednesday morning, e-mail security firm IronPort said:

In the afternoon of Tuesday 11/11, IronPort saw a drop of almost 2/3 of overall spam volume, correlating with a drop in IronPort's SenderBase queries. While we investigated what we thought might be a technical problem, a major spam network, McColo Corp., was shutdown, as reported by The Washington Post on Tuesday evening.

Spamcop.net's graphic shows a similar decline, from about 40 spam e-mails per second to around ten per second -- if I'm reading that graphic correctly.

A number of other spam-fighters today reported a similar drop in junk e-mail volumes. I heard from a reader named Martin who works at a small hosting facility in Germany. He wrote in after noticing a lack of spam banging on his company's e-mail servers. He sent in this graphic and asked that we not use his full name or identify his employer.

Security Fix reader Ted wrote in to say his small Internet service provider also charted a massive collapse in spam volumes yesterday and into today. Ted, who also requested we use only his first name, writes:

Dear Mr. Krebs,
Thank you for your outstanding contribution to bringing down McColo Corp.

I can clearly see the impact you've had, by looking at the spam graph of the small ISP which hosts the web site [omitted] for me:

The daily 15 minute graph reports the rate of spam over a 29 hour period. Time is UTC. As I write, it is about 12:00 UTC, and detected spam is arriving at less than half the rate of the same time yesterday.

The world saw a similar -- if short-lived -- drop in spam volumes in September, following the demise of Intercage, a.k.a. "Atrivo," another Northern California based ISP that security experts identified as a major source of badness online. In that case, it only took the spammers a few days to find a new home. It seems likely that the same will happen in this case as well, and that this minor victory will be short but sweet.

Nilesh Bhandari, product manager with IronPort, said the company sees an average of about 190 billion spam e-mails each day. Then, at around 4:30 p.m. ET yesterday, IronPort saw a huge decline in spam levels. For the 24 hour period ending Tuesday, the company tracked about 112 billion spam messages.

Bhandari said he expects the spam volume to recover to normal levels in about a week, as the spam operations that were previously hosted at McColo move to a new home.

"We're seeing a slow recovery," Bhandari. "We fully expect this to recover completely, and to go into the highest ever spam period during the upcoming holiday season."

  • Favorite Stocks: GOOG
Qwoter Stock College" style="border:0


With Quick-Reply you can write a post when viewing a topic without loading a new page. You can still use bulletin board code and smileys as you would in a normal post.

Warning: this topic has not been posted in for at least 350 days.
Unless you're sure you want to reply, please consider starting a new topic.

Name: Email:
Type the letters shown in the picture
Listen to the letters / Request another image
Type the letters shown in the picture:
What color is the Qwoter logo?:

What year was Qwoter founded in?
(hint: look at copyright below):

Related Topics

  Subject / Started by Replies Last post
0 Replies
Last post September 16, 2007, 05:00:40 PM
by The Web Team
0 Replies
Last post January 04, 2008, 12:00:14 PM
by The Web Team
0 Replies
Last post June 17, 2008, 04:19:48 PM
by Deez
0 Replies
Last post August 14, 2008, 02:03:32 PM
by The Web Team
0 Replies
Last post October 02, 2008, 11:00:42 PM
by The Web Team
0 Replies
Last post July 15, 2009, 08:58:59 AM
by godoftrading
0 Replies
Last post August 18, 2009, 10:44:23 AM
by godoftrading
0 Replies
Last post May 24, 2010, 01:35:28 AM
by manishds
0 Replies
Last post January 11, 2011, 12:00:03 AM
by Stock Spam
0 Replies
Last post July 26, 2011, 03:27:26 PM
by MTnews