Seen it before - but mostly for malware rather than for spam. And certainly not long enough / persistent enough for a full fledged spam campaign (4..5 days rather than a day or two at the most when people start noticing and dropping the bogus announcement)
On Wed, Oct 28, 2009 at 6:57 AM, Jon Lewis <[email protected]> wrote: > Unallocated doesn't mean non-routed. All a spammer needs is a > willing/non-filtering provider doing BGP with them, and they can announce > any space they like, send out some spam, and then pull the announcement. > Next morning, when you see the spam and try to figure out who to send > complaints to, you're either going to complain to the wrong people or find > that whois is of no help.
