Just noticed something interesting.

["Basselgia, Barry A Mr (NAF Atsugi)" <BABasselgia () atsugi navy mil>]

Was just correlating some data on my network and found an interesting
pattern.

Every time I send an email to snort-users () lists sourceforge net, my email
gateway virus scanner detects an infected email being sent to me.  I've
looked back as far as the beginning of the year and it's happened every
time.

It's always the W32/Swen@MM virus.  But, it doesn't always come from the
same place, here are some of the sources:

jvdbaan () worldonline nl 195.241.80.19
neringa () aktv lt 213.226.168.129
eric.maneja () wanadoo fr 193.252.22.24
kyowa.y () nifty com 202.248.37.208
allymac () ledanet com au 203.87.94.38

Anybody else notice anything like this?

Barry





-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users