I'll trade you - somewhere in MIT (20K+ computers) is hitting me twice per second with ICMP packets, and netops can't find who....
I had to degrade the logging on my snort-inline because the system was drowning. Mike- On Tue, 5 Feb 2008 13:58:30 -0500, you wrote: >Has anyone else noticed a similar pattern or does someone out there hate me? >:) The top 100 SPAM senders on my network (1 minute snapshot below) are all >forgeries starting with jr- or jq- > >24 [EMAIL PROTECTED] >22 [EMAIL PROTECTED] >22 [EMAIL PROTECTED] >22 [EMAIL PROTECTED] >21 [EMAIL PROTECTED] >20 [EMAIL PROTECTED] >20 [EMAIL PROTECTED] >19 [EMAIL PROTECTED] >19 [EMAIL PROTECTED] >19 [EMAIL PROTECTED] >18 [EMAIL PROTECTED] >18 [EMAIL PROTECTED] >18 [EMAIL PROTECTED] >18 [EMAIL PROTECTED] >18 [EMAIL PROTECTED] >17 [EMAIL PROTECTED] >17 [EMAIL PROTECTED] >17 [EMAIL PROTECTED] >16 [EMAIL PROTECTED] >16 [EMAIL PROTECTED] >16 [EMAIL PROTECTED] >16 [EMAIL PROTECTED] >16 [EMAIL PROTECTED] >16 [EMAIL PROTECTED] >15 [EMAIL PROTECTED] >15 [EMAIL PROTECTED] >14 [EMAIL PROTECTED] >14 [EMAIL PROTECTED] >14 [EMAIL PROTECTED] >13 [EMAIL PROTECTED] >13 [EMAIL PROTECTED] >13 [EMAIL PROTECTED] >13 [EMAIL PROTECTED] >13 [EMAIL PROTECTED] >13 [EMAIL PROTECTED] >13 [EMAIL PROTECTED] >13 [EMAIL PROTECTED] >12 [EMAIL PROTECTED] >12 [EMAIL PROTECTED] >12 [EMAIL PROTECTED] >12 [EMAIL PROTECTED] >11 [EMAIL PROTECTED] >11 [EMAIL PROTECTED] >11 [EMAIL PROTECTED] >11 [EMAIL PROTECTED] >11 [EMAIL PROTECTED] >11 [EMAIL PROTECTED] >11 [EMAIL PROTECTED] >11 [EMAIL PROTECTED] >11 [EMAIL PROTECTED] >11 [EMAIL PROTECTED] >11 [EMAIL PROTECTED] >11 [EMAIL PROTECTED] >10 [EMAIL PROTECTED] >10 [EMAIL PROTECTED] >10 [EMAIL PROTECTED] >10 [EMAIL PROTECTED] >10 [EMAIL PROTECTED] >10 [EMAIL PROTECTED] >10 [EMAIL PROTECTED] >10 [EMAIL PROTECTED] >10 [EMAIL PROTECTED] >10 [EMAIL PROTECTED] >10 [EMAIL PROTECTED] >10 [EMAIL PROTECTED] >10 [EMAIL PROTECTED] >9 [EMAIL PROTECTED] >9 [EMAIL PROTECTED] >9 [EMAIL PROTECTED] >9 [EMAIL PROTECTED] >9 [EMAIL PROTECTED] >9 [EMAIL PROTECTED] >9 [EMAIL PROTECTED] >9 [EMAIL PROTECTED] >9 [EMAIL PROTECTED] >9 [EMAIL PROTECTED] >9 [EMAIL PROTECTED] >8 [EMAIL PROTECTED] >8 [EMAIL PROTECTED] >8 [EMAIL PROTECTED] >8 [EMAIL PROTECTED] >8 [EMAIL PROTECTED] >8 [EMAIL PROTECTED] >8 [EMAIL PROTECTED] >8 [EMAIL PROTECTED] >8 [EMAIL PROTECTED] >7 [EMAIL PROTECTED] >7 [EMAIL PROTECTED] >7 [EMAIL PROTECTED] >7 [EMAIL PROTECTED] >7 [EMAIL PROTECTED] >7 [EMAIL PROTECTED] >7 [EMAIL PROTECTED] >7 [EMAIL PROTECTED] >7 [EMAIL PROTECTED] > >The annoying thing is, nothing particularly similar about the SPAM being >relayed... > >-Vlad -- If you're not confused, you're not trying hard enough. -- Please note - Due to the intense volume of spam, we have installed site-wide spam filters at catherders.com. If email from you bounces, try non-HTML, non-encoded, non-attachments,
