Sobig.F resurgence

[Rose, Bobby]

Check your logs to see if you can determine who it is.  It may just be
one or two systems pounding the heck out of you.  I found a comcast.net
host that was hitting me close to 3000 times on Monday and blocked it at
the firewall.

I also started using the dynablock.easynet.nl RBL which is similar to
the MAPS-DUL RBL where it has listings of the DHCP netblocks used by
ISPS for dialup, ASDL, etc basically all those stupid home users with
infected machines which should be directly sending  messages anyway.

-----Original Message-----
From: David Hooton [mailto:david at PLATFORMHOSTING.COM] 
Sent: Thursday, September 04, 2003 11:16 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Sobig.F resurgence


So it doesn't sound like you're seeing this then:
http://www.platformhosting.com/mailscanner-mrtg/virus/virus.html

I wonder if it is a new variant or something?
--
Regards,

David Hooton
Senior Partner
Platform Hosting
1300 85 HOST
www.platformhosting.com


Mike Kercher wrote:

> The flow here has been trickling but steady.  I am blocking LOTS of 
> tehm with a sendmail rule though, so they never even make it to 
> MailScanner.
>
> Mike
>
>
> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On 
> Behalf Of David Hooton
> Sent: Thursday, September 04, 2003 10:02 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Sobig.F resurgence
>
>
> Hi All,
>
> A little off topic, but we've started noticing about a 10 fold 
> increase in Sobig.F traffic over the last 48 hours.
>
> Is anyone else noticing this?
> --
> Regards,
>
> David Hooton
> Senior Partner
> Platform Hosting
> 1300 85 HOST
> www.platformhosting.com
>
>
>
========================================================================
>    This message has been scanned for viruses and unsafe content by
>    Platform Mail Security
>
>    To report SPAM forward the message to:    spam at mailsecurity.net.au
>    To report incorrectly tagged messages: notspam at mailsecurity.net.au
>
>    Platform Mail Security                     www.mailsecurity.net.au
>    Platform Hosting                           www.platformhosting.com
>
> ======================================================================
> ==
>
>
========================================================================
>    This message has been scanned for viruses and unsafe content by
>    Platform Mail Security
>
>    To report SPAM forward the message to:    spam at mailsecurity.net.au
>    To report incorrectly tagged messages: notspam at mailsecurity.net.au
>
>    Platform Mail Security                     www.mailsecurity.net.au
>    Platform Hosting                           www.platformhosting.com
>
> ======================================================================
> ==
>
>
>



========================================================================
   This message has been scanned for viruses and unsafe content by
   Platform Mail Security

   To report SPAM forward the message to:    spam at mailsecurity.net.au
   To report incorrectly tagged messages: notspam at mailsecurity.net.au

   Platform Mail Security                     www.mailsecurity.net.au
   Platform Hosting                           www.platformhosting.com

========================================================================