Our first review is the 3M company (Ticker MMM). In 23 days we collected 11 spam from 69.6.84.102 which is delegated to 3M by ARIN:

OrgName:    3M Company
OrgID:      3MCOMP
Address:    3M Center
Address:    Bldg 224-4N-27
City:       St. Paul
StateProv:  MN
PostalCode: 55144-1000
Country:    US

NetRange:   169.4.0.0 - 169.7.255.255
CIDR:       169.4.0.0/14
NetName:    NETBLK-B-BLK1-3M

The spam were all image based Stock Pump-n-Dump SPAM touting stocks EXVG (up 15% today) BTOD (up 13% today) and GDKI (down 37%) Stock spam continues to plague companies traded on Over The Counter markets like the Pink Sheets.

We reviewed the routes announced by 3M (AS7792) which announced the entire 169.4.0.0/14 as one block. Our analysis of the routes for this prefix shows no more specific announcements or any other origin for the 3M block. Once we have reasonably shown there were no route hijacking we can determine that our spamtrap did actually connect with and recieve SPAM from one of 3M's machines.

3M shoulod consider taking a look at the following addresses:

169.6.84.98
192.28.4.40
169.12.80.180
169.6.84.102