[Dshield] Virus emails

Doug White doug at clickdoug.com
Wed Jan 28 03:17:35 GMT 2004


So far I am receiving them from the following IP numbers, at the rate of about
100 per hour.

128.233.95.230
204.244.251.35
212.205.175.76
65.216.132.114
207.115.63.91
128.233.95.230
213.24.18.13
202.47.65.210
217.126.82.76
212.205.175.76
212.73.32.158
206.253.23.169
64.74.190.3
81.31.99.8
194.158.96.113
156.153.255.205
194.25.134.85
212.210.7.208
209.218.88.3
198.186.202.147
80.140.116.78
68.107.37.4
193.219.91.132
65.205.71.101
204.0.50.2
66.12.8.214
66.147.142.138
172.18.2.149
128.101.142.119
216.201.155.210
166.84.1.72
67.124.232.173
208.180.93.162
66.76.2.39
204.244.251.35
193.219.91.132
216.183.44.86
216.99.225.227
213.177.146.6
212.55.195.90
208.47.174.152
199.247.156.3



======================================
Stop spam on your domain, Anti-spam solutions
http://www.clickdoug.com/mailfilter.cfm
For hosting solutions http://www.clickdoug.com
======================================
Aspire to Inspire before you Retire or Expire!


----- Original Message ----- 
From: "Keith Bergen" <keith at keithbergen.com>
To: <list at dshield.org>
Sent: Tuesday, January 27, 2004 4:41 PM
Subject: [Dshield] Virus emails


: Folks,
:
: I noticed a pattern with my virus emails. They all come from:
: Return-Path: <brian at aol.com>
: Received: from aol.com (roc-66-66-2-162.rochester.rr.com [66.66.2.162])
:
: All stem from the same rr.com IP. I have notified abuse at rr.com (don't know
: if I can expect much of a response.
:
: It just seemed odd to me that ALL of my emails seemed to come from the same
: IP.
:
: Keith.
:
: --
:
: "Life is like an analogy"
:
: _______________________________________________
: list mailing list
: list at dshield.org
: To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
:
:




More information about the list mailing list