[Dshield] Virus emails

Nguyen Nhu Hao nhuhao at vnuhcm.edu.vn
Wed Jan 28 18:48:54 GMT 2004


Dear list,
My servers have recieved many virus emails, how should I do to stop ? they
used real domain so I cannot deny their domains.
Thanks for your help
Nguyen Nhu Hao

----- Original Message -----
From: "Doug White" <doug at clickdoug.com>
To: "General DShield Discussion List" <list at dshield.org>
Sent: Tuesday, January 27, 2004 7:17 PM
Subject: Re: [Dshield] Virus emails


> So far I am receiving them from the following IP numbers, at the rate of
about
> 100 per hour.
>
> 128.233.95.230
> 204.244.251.35
> 212.205.175.76
> 65.216.132.114
> 207.115.63.91
> 128.233.95.230
> 213.24.18.13
> 202.47.65.210
> 217.126.82.76
> 212.205.175.76
> 212.73.32.158
> 206.253.23.169
> 64.74.190.3
> 81.31.99.8
> 194.158.96.113
> 156.153.255.205
> 194.25.134.85
> 212.210.7.208
> 209.218.88.3
> 198.186.202.147
> 80.140.116.78
> 68.107.37.4
> 193.219.91.132
> 65.205.71.101
> 204.0.50.2
> 66.12.8.214
> 66.147.142.138
> 172.18.2.149
> 128.101.142.119
> 216.201.155.210
> 166.84.1.72
> 67.124.232.173
> 208.180.93.162
> 66.76.2.39
> 204.244.251.35
> 193.219.91.132
> 216.183.44.86
> 216.99.225.227
> 213.177.146.6
> 212.55.195.90
> 208.47.174.152
> 199.247.156.3
>
>
>
> ======================================
> Stop spam on your domain, Anti-spam solutions
> http://www.clickdoug.com/mailfilter.cfm
> For hosting solutions http://www.clickdoug.com
> ======================================
> Aspire to Inspire before you Retire or Expire!
>
>
> ----- Original Message -----
> From: "Keith Bergen" <keith at keithbergen.com>
> To: <list at dshield.org>
> Sent: Tuesday, January 27, 2004 4:41 PM
> Subject: [Dshield] Virus emails
>
>
> : Folks,
> :
> : I noticed a pattern with my virus emails. They all come from:
> : Return-Path: <brian at aol.com>
> : Received: from aol.com (roc-66-66-2-162.rochester.rr.com [66.66.2.162])
> :
> : All stem from the same rr.com IP. I have notified abuse at rr.com (don't
know
> : if I can expect much of a response.
> :
> : It just seemed odd to me that ALL of my emails seemed to come from the
same
> : IP.
> :
> : Keith.
> :
> : --
> :
> : "Life is like an analogy"
> :
> : _______________________________________________
> : list mailing list
> : list at dshield.org
> : To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list
> :
> :
>
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list





More information about the list mailing list