{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T17:41:55Z","timestamp":1784223715029,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":30,"publisher":"ACM","license":[{"start":{"date-parts":[[2006,8,11]],"date-time":"2006-08-11T00:00:00Z","timestamp":1155254400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2006,8,11]]},"DOI":"10.1145\/1159913.1159947","type":"proceedings-article","created":{"date-parts":[[2006,10,18]],"date-time":"2006-10-18T18:04:00Z","timestamp":1161194640000},"page":"291-302","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":190,"title":["Understanding the network-level behavior of spammers"],"prefix":"10.1145","author":[{"given":"Anirudh","family":"Ramachandran","sequence":"first","affiliation":[{"name":"Georgia Tech"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nick","family":"Feamster","sequence":"additional","affiliation":[{"name":"Georgia Tech"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2006,8,11]]},"reference":[{"key":"e_1_3_2_1_1_1","author":"Bank D.","year":"2005","unstructured":"D. Bank and R. Richmond . Where the Dangers Are. The Wall Street Journal , July 2005 . http:\/\/online.wsj.com\/public\/article\/SB112128442038984802-4qR772hjUeqGT2W0FIcA3FNjE_20060717.html. D. Bank and R. Richmond. Where the Dangers Are. The Wall Street Journal, July 2005. http:\/\/online.wsj.com\/public\/article\/SB112128442038984802-4qR772hjUeqGT2W0FIcA3FNjE_20060717.html.","journal-title":"Where the Dangers Are. The Wall Street Journal"},{"key":"e_1_3_2_1_2_1","volume-title":"Proc. 4th ACM Workshop on Hot Topics in Networks (Hotnets-IV)","author":"Casado M.","year":"2005","unstructured":"M. Casado , T. Garfinkel , W. Cui , V. Paxson , and S. Savage . Opportunistic measurement: Extracting insight from spurious traffic . In Proc. 4th ACM Workshop on Hot Topics in Networks (Hotnets-IV) , College Park, MD , Nov. 2005 . M. Casado, T. Garfinkel, W. Cui, V. Paxson, and S. Savage. Opportunistic measurement: Extracting insight from spurious traffic. In Proc. 4th ACM Workshop on Hot Topics in Networks (Hotnets-IV), College Park, MD, Nov. 2005."},{"key":"e_1_3_2_1_3_1","unstructured":"CNN Technology News. Expert: Botnets No. 1 emerging Internet threat. http:\/\/www.cnn.com\/2006\/TECH\/internet\/01\/31\/furst\/ Jan. 2006.  CNN Technology News. Expert: Botnets No. 1 emerging Internet threat. http:\/\/www.cnn.com\/2006\/TECH\/internet\/01\/31\/furst\/ Jan. 2006."},{"key":"e_1_3_2_1_4_1","unstructured":"Description of coordinated spamming Feb. 2005. http:\/\/www.waltdnes.org\/spam.  Description of coordinated spamming Feb. 2005. http:\/\/www.waltdnes.org\/spam."},{"key":"e_1_3_2_1_5_1","unstructured":"J. Evers. Most spam still coming from the U.S. http:\/\/news.com.com\/Most+spam+still+coming+from+the+U.S.\/2100-1029_3-6030758.html Jan. 2006.  J. Evers. Most spam still coming from the U.S. http:\/\/news.com.com\/Most+spam+still+coming+from+the+U.S.\/2100-1029_3-6030758.html Jan. 2006."},{"key":"e_1_3_2_1_6_1","volume-title":"CAIDA Workshop on Internet Signal Processing","author":"Feamster N.","year":"2004","unstructured":"N. Feamster . Open problems in BGP anomaly detection . In CAIDA Workshop on Internet Signal Processing , San Diego, CA , Nov. 2004 . N. Feamster. Open problems in BGP anomaly detection. In CAIDA Workshop on Internet Signal Processing, San Diego, CA, Nov. 2004."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/781027.781043"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1052812.1052826"},{"key":"e_1_3_2_1_9_1","unstructured":"Goodmail Systems 2006. http:\/\/www.goodmailsystems.com\/.  Goodmail Systems 2006. http:\/\/www.goodmailsystems.com\/."},{"key":"e_1_3_2_1_10_1","volume-title":"IP Addresses in Email Clients. In First Conference on Email and Anti-Spam","author":"Goodman J.","year":"2004","unstructured":"J. Goodman . IP Addresses in Email Clients. In First Conference on Email and Anti-Spam , Mountain View, CA , July 2004 . J. Goodman. IP Addresses in Email Clients. In First Conference on Email and Anti-Spam, Mountain View, CA, July 2004."},{"key":"e_1_3_2_1_11_1","volume-title":"February 5","author":"Hansell S.","year":"2006","unstructured":"S. Hansell . Postage is due for companies sending email , February 5 , 2006 . http:\/\/www.nytimes.com\/2006\/02\/05\/technology\/05AOL.html. S. Hansell. Postage is due for companies sending email, February 5, 2006. http:\/\/www.nytimes.com\/2006\/02\/05\/technology\/05AOL.html."},{"key":"e_1_3_2_1_12_1","unstructured":"Honeynet Project. Know Your Enemy: Tracking Botnets. http:\/\/www.honeynet.org\/papers\/bots\/botnet-commands.html 2006.  Honeynet Project. Know Your Enemy: Tracking Botnets. http:\/\/www.honeynet.org\/papers\/bots\/botnet-commands.html 2006."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028838"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251086.1251119"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/633025.633027"},{"key":"e_1_3_2_1_16_1","unstructured":"MailAvenger 2005. http:\/\/www.mailavenger.org\/.  MailAvenger 2005. http:\/\/www.mailavenger.org\/."},{"key":"e_1_3_2_1_17_1","unstructured":"J. Mason. Spam Forensics: Reverse-Engineering Spammer Tactics. http:\/\/spamassassin.apache.org\/presentations\/2004-09-Toorcon\/html\/ Sept. 2004.  J. Mason. Spam Forensics: Reverse-Engineering Spammer Tactics. http:\/\/spamassassin.apache.org\/presentations\/2004-09-Toorcon\/html\/ Sept. 2004."},{"key":"e_1_3_2_1_18_1","volume-title":"Apr.","author":"Microsoft","year":"2004","unstructured":"Microsoft security bulletin ms04-011. http:\/\/www.microsoft.com\/technet\/security\/bulletin\/ms04-011.mspx , Apr. 2004 . Microsoft security bulletin ms04-011. http:\/\/www.microsoft.com\/technet\/security\/bulletin\/ms04-011.mspx, Apr. 2004."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637244"},{"key":"e_1_3_2_1_20_1","volume-title":"Jan.","author":"Market Shares Operating System","year":"2006","unstructured":"Operating System Market Shares . http:\/\/marketshare.hitslink.com\/report.aspx?qprid=2 , Jan. 2006 . Operating System Market Shares. http:\/\/marketshare.hitslink.com\/report.aspx?qprid=2, Jan. 2006."},{"key":"e_1_3_2_1_21_1","unstructured":"The Open Relay Database 2006. http:\/\/ordb.org\/.  The Open Relay Database 2006. http:\/\/ordb.org\/."},{"key":"e_1_3_2_1_22_1","volume-title":"Second Conference on Email and Anti-Spam","author":"Prince M.","year":"2005","unstructured":"M. Prince , B. Dahl , L. Holloway , A. Keller , and E. Langheinrich . Understanding How Spammers Steal Your E-Mail Address: An Analysis of the First Six Months of Data from Project Honey Pot . In Second Conference on Email and Anti-Spam , Stanford, CA , July 2005 . M. Prince, B. Dahl, L. Holloway, A. Keller, and E. Langheinrich. Understanding How Spammers Steal Your E-Mail Address: An Analysis of the First Six Months of Data from Project Honey Pot. In Second Conference on Email and Anti-Spam, Stanford, CA, July 2005."},{"key":"e_1_3_2_1_23_1","unstructured":"Project Honey Pot. http:\/\/www.projecthoneypot.org\/.  Project Honey Pot. http:\/\/www.projecthoneypot.org\/."},{"key":"e_1_3_2_1_25_1","volume-title":"Jan.","author":"Ramasubramanian S.","year":"2005","unstructured":"S. Ramasubramanian . Port 25 filters - how many here deploy them bidirectionally? http:\/\/www.merit.edu\/mail.archives\/nanog\/2005-01\/msg00127.html , Jan. 2005 . S. Ramasubramanian. Port 25 filters - how many here deploy them bidirectionally? http:\/\/www.merit.edu\/mail.archives\/nanog\/2005-01\/msg00127.html, Jan. 2005."},{"key":"e_1_3_2_1_26_1","unstructured":"The Spam and Open Relay Blocking System (SORBS) 2006. http:\/\/www.sorbs.net\/.  The Spam and Open Relay Blocking System (SORBS) 2006. http:\/\/www.sorbs.net\/."},{"key":"e_1_3_2_1_27_1","unstructured":"SpamAssassin 2005. http:\/\/www.spamassassin.org\/.  SpamAssassin 2005. http:\/\/www.spamassassin.org\/."},{"key":"e_1_3_2_1_28_1","volume-title":"Syngress","author":"X.","year":"2004","unstructured":"Spammer- X. Inside the Spam Cartel . Syngress , Nov 2004 . Spammer-X. Inside the Spam Cartel. Syngress, Nov 2004."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.5555\/647253.720288"},{"key":"e_1_3_2_1_30_1","unstructured":"J. Todd. AS number inconsistencies July 2002. http:\/\/www.merit.edu\/mail.archives\/nanog\/2002-07\/msg00259.html.  J. Todd. AS number inconsistencies July 2002. http:\/\/www.merit.edu\/mail.archives\/nanog\/2002-07\/msg00259.html."},{"key":"e_1_3_2_1_31_1","unstructured":"ZDNet Security News. Most spam genrated by botnets expert says. http:\/\/news.zdnet.co.uk\/internet\/security\/0 39020375 39167561 00.htm Sept. 2004.  ZDNet Security News. Most spam genrated by botnets expert says. http:\/\/news.zdnet.co.uk\/internet\/security\/0 39020375 39167561 00.htm Sept. 2004."}],"event":{"name":"SIGCOMM06: ACM SIGCOMM 2006 Conference","location":"Pisa Italy","acronym":"SIGCOMM06","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication","ACM Association for Computing Machinery"]},"container-title":["Proceedings of the 2006 conference on Applications, technologies, architectures, and protocols for computer communications"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1159913.1159947","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1159913.1159947","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T11:14:15Z","timestamp":1750245255000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1159913.1159947"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006,8,11]]},"references-count":30,"alternative-id":["10.1145\/1159913.1159947","10.1145\/1159913"],"URL":"https:\/\/doi.org\/10.1145\/1159913.1159947","relation":{"is-identical-to":[{"id-type":"doi","id":"10.1145\/1151659.1159947","asserted-by":"object"}]},"subject":[],"published":{"date-parts":[[2006,8,11]]},"assertion":[{"value":"2006-08-11","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}