Stories
Slash Boxes
Comments
NOTE: use Perl; is on undef hiatus. You can read content, but you can't post it. More info will be forthcoming forthcomingly.

All the Perl that's Practical to Extract and Report

use Perl Log In

Log In

[ Create a new account ]

grantm (164)

grantm
  (email not shown publicly)
http://www.mclean.net.nz/

Just a simple [cpan.org] guy, hacking Perl for fun and profit since way back in the last millenium. You may find me hanging around in the monestary [perlmonks.org].

What am I working on right now? Probably the Sprog project [sourceforge.net].

GnuPG key Fingerprint:
6CA8 2022 5006 70E9 2D66
AE3F 1AF1 A20A 4CC0 0851

Journal of grantm (164)

Monday September 15, 2003
03:31 AM

Who turned off the tap?

[ #14708 ]

After being deluged with email bounce messages for weeks, it suddenly struck me last Thursday that it had stopped. My email traffic has dropped from 100MB+ per day back, down to normal levels of 1MB per day or less. Today I've had less that 20 spams. Is there a story behind the sudden decrease?

The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More | Login | Reply
Loading... please wait.
  • Sobig timeout (Score:4, Insightful)

    by Matts (1087) on 2003.09.15 4:27 (#24186) Journal
    The Sobig series of viruses all have an in-built timeout. They simply stop sending after a certain date (this was September 10th for Sobig.F).

    The reason they do this is that the spammer who created Sobig now has his zombie network setup, and wants people to stop knowing what IP addresses they are on. Otherwise people can find out which machines are infected with Sobig.F by looking at the IP address sending them their spam.

      • The reason they do this is that the spammer who created Sobig now has his zombie network setup...

      It's really more of a parasite network. If it were a zombie network, the machines would be dead except for their functions as SPAM relays.