[Dshield] Virus emails

Josh Tolley josh at raintreeinc.com
Tue Jan 27 23:00:08 GMT 2004

Probably because only one person you know is infected. Reminds me of the 
sobig infections a while ago -- almost all my infected emails came from 
one computer off in Tennessee somewhere. Since when this infects you, it 
emails everyone in your address book, you have to know someone that has 
you in their address book to get infected. So if you have a fairly savvy 
(or lucky) circle of friends, you don't get too many infections.


Keith Bergen wrote:

> Folks,
> I noticed a pattern with my virus emails. They all come from:
> Return-Path: <brian at aol.com>
> Received: from aol.com (roc-66-66-2-162.rochester.rr.com [])
> All stem from the same rr.com IP. I have notified abuse at rr.com (don't know
> if I can expect much of a response.
> It just seemed odd to me that ALL of my emails seemed to come from the same
> IP.
> Keith.

More information about the list mailing list