Hello SNF Folks,
We've just seen another very high spike (attached image).
All rulebases appear to be up to date now to handle this content,
however you should be watching for very volumes.
Based on telemetry from systems testing the new SNF alpha we are
seeing an average of 150% of normal spam
Hello Sniffer Folks,
The greeting card malware spam is being pushed right now with amazing
bandwidth!
This is the first 11000+ / hour spike we've seen in quite a while.
Rules are in place for this, but be on the look out in case it hits
you before your update is ready.
_M
--
Pete McNeil
Has anybody notices any new spam storms out there? Since yesterday,
about 10 times the normal spam get's through (normally 2-3 messages a
day, now it's like 2-3 messages per hour). Sniffer returns 0 (clean)
for all of them, while they don't even get a high enough score with
SpamAssasin
-Envelope before
hitting Imail/Declude/Sniffer/...
Markus
-Ursprüngliche Nachricht-
Von: Message Sniffer Community
[mailto:[EMAIL PROTECTED] Im Auftrag von Pete McNeil
Gesendet: Dienstag, 30. Mai 2006 14:45
An: Message Sniffer Community
Betreff: [sniffer]Spam Storm
Hello Sniffer
Hello Sniffer Folks,
Watch out for today's spam storm -- it's a lot bigger than we've seen
in a long while. 48 hour image attached.
A large component of this one is a broken spam with an empty subject
and two empty quoted printable segments.
There is a wide variety of other spam mixed in also
Hi Pete,
Watch out for today's spam storm -- it's a lot bigger than we've seen
in a long while. 48 hour image attached.
This has low priority but. I've tried to find a live version of that
graph you've sent but I cannot find it at
To: Message Sniffer Community
Subject: [sniffer]spam storm
Dear Sniffer Friends,
Our servers are really getting slammed with spam. Is anyone else seeing a
hugh spam storm right now?
Michael Stein
Computer House
#
This message is sent
Sniffer Community
Subject: [sniffer]spam storm
Dear Sniffer Friends,
Our servers are really getting slammed with spam. Is anyone else seeing a
hugh spam storm right now?
Michael Stein
Computer House
#
This message is sent to you
Tuesday, May 23, 2006, 10:35:01 AM, you wrote:
Dear Sniffer Friends,
Our servers are really getting slammed with spam. Is anyone else seeing a
hugh spam storm right now?
Hello Michael Sniffer Folks,
http://reports.messagesniffer.com/Performance/FlowRates.jsp
Logs since about 0523.0100
On Saturday, January 29, 2005, 9:15:23 PM, Glenn wrote:
GR This is question is a little off subject, but do you have any
GR recommendations for Imail queue manager settings? We are running Sniffer
GR with declude 1.82 under Imail 8.15 and the server seems to bog down
GR sometimes.
It is likely
in the IMail archive and/or the
IMail knowledge base.
Bill
-Original Message-
From: Glenn Ratliff [mailto:[EMAIL PROTECTED]
Sent: Saturday, January 29, 2005 6:15 PM
To: 'sniffer@SortMonster.com'
Subject: RE: [sniffer] Spam Storm Alert...
This is question is a little off subject, but do you
Hmmm, a day and a half later this shows up on the list...???
Bill
-Original Message-
From: Landry William
Sent: Saturday, January 29, 2005 6:51 PM
To: sniffer@SortMonster.com
Subject: RE: [sniffer] Spam Storm Alert...
My only suggestion for QM is to disable DNS Cache and Failed Domain
31, 2005 9:19 AM
To: sniffer@SortMonster.com
Subject: RE: [sniffer] Spam Storm Alert...
Hmmm, a day and a half later this shows up on the list...???
Bill
-Original Message-
From: Landry William
Sent: Saturday, January 29, 2005 6:51 PM
To: sniffer@SortMonster.com
Subject: RE: [sniffer] Spam
On Monday, January 31, 2005, 12:28:00 PM, Landry wrote:
LW Well, after a second look (reviewing the headers), it looks like the message
LW got hung-up in the convoluted mess of internal mail gateways that Siemens
LW maintains (which I have no control over). Sorry for the noise...!
Whew!
]
Reply To: sniffer@SortMonster.com
Sent: Monday, January 24, 2005 2:11 PM
To: sniffer@sortmonster.com
Subject: [sniffer] Spam Storm Alert...
Hello sniffer,
Yes folks, in case you haven't already seen it, we have quite a spam
storm going. I've just watched more than
Hello sniffer,
One other note before I go join the rule coders... Many of the new
spam coming through are resurrecting old spam rules... I've seen
this kind of thing before (which is why we have a deep-scan robot
looking for this kind of activity), however I've not seen it in such
Hello sniffer,
Yes folks, in case you haven't already seen it, we have quite a spam
storm going. I've just watched more than a dozen new campaigns with
heavy polymorphism push through the filters since 1300 EST and early
this morning we were already at our daily nominal number for new
11:15 AM
To: sniffer@sortmonster.com
Subject: [sniffer] Spam Storm Alert Follow Up
Hello sniffer,
One other note before I go join the rule coders... Many of the new
spam coming through are resurrecting old spam rules... I've seen
this kind of thing before (which is why we have a deep-scan
At 01:57 AM 3/26/2004, you wrote:
I once noticed that transferring data through TCP/IP is NOT error-free, if
the connection is very slow. At least not if it is going through Microsoft's
software (Windows).
Me 2.
One possibility that has been suggested is that we could gzip these files.
That
]
To: [EMAIL PROTECTED]
Sent: Friday, March 26, 2004 2:17 AM
Subject: RE: [sniffer] Spam storm?
At 02:50 AM 3/26/2004, you wrote:
-Original Message-
From: Pete McNeil [mailto:[EMAIL PROTECTED]
Normally our bandwidth is sufficient. We have considered mirror sites
also,
and we have plans
At 03:39 AM 3/26/2004, you wrote:
-Original Message-
From: Pete McNeil [mailto:[EMAIL PROTECTED]
Since we're both up at this insane hour. Would you mind making a test?
I've just shut down the Sprint line - so we're running through Savvis
exclusively. If I'm right about the connectivity
At 07:42 AM 3/26/04 -0500, Russ Uhte (Lists) wrote:
Pete,
Just wanted to interject a couple observations. I'm connected to the
Internet through a 15Mb frac ds/3 from ATT and a T1 from Sprint. I of
course of no way of telling which pipe our automated downloads are coming
from. However, I too
At 07:42 AM 3/26/2004, you wrote:
Pete,
Just wanted to interject a couple observations. I'm connected to the
Internet through a 15Mb frac ds/3 from ATT and a T1 from Sprint. I of
course of no way of telling which pipe our automated downloads are coming
from. However, I too have noticed
] Behalf Of Pete McNeil
Sent: Friday, March 26, 2004 8:53 AM
To: [EMAIL PROTECTED]
Subject: Re: [sniffer] Spam storm?
At 07:42 AM 3/26/2004, you wrote:
Pete,
Just wanted to interject a couple observations. I'm connected to the
Internet through a 15Mb frac ds/3 from ATT and a T1 from Sprint. I
, Vice President
EI8HT LEGS Web Management Co., Inc.
http://www.getafreewebsite.com
877-483-3393
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Kevin Stanford
Sent: Friday, March 26, 2004 10:22 AM
To: [EMAIL PROTECTED]
Subject: Re: [sniffer] Spam storm?
I
It's starting to come together now.
Wget on windows + errors on the Sprint line since the move = corrupted
downloads for folks who end up routing through sprint along the way?
Could be.
We use Windows 2k, Wget and have our connection at our end from Sprint...
Sheldon
Sheldon Koehler,
: Sheldon Koehler [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 24, 2004 3:19 PM
To: [EMAIL PROTECTED]
Subject: Re: [sniffer] Spam storm?
Well it may not be a spam storm. Log file shows:
nsx4b3eh 20040324200108 De90392330028271a.SMD 421 0 ERROR_BAD_MATRIX 71 0 0
2 5
nsx4b3eh 20040324200117
This has been a bad week here!
A big increase in total email volume, a huge increase in false positives as
well as a huge increase in spam getting past our filters.
Sheldon
Sheldon Koehler, Owner/Partnerhttp://www.tenforward.com
Ten Forward Communications 360-457-9023
, 2004 6:05 PM
Subject: Re: [sniffer] Spam storm?
This helps narrow things down. Specifically we know that the rulebase files
are not corrupted on the server but during the download. That explains why
I haven't been able to recreate a problem in the lab.
I have a suspicion that wget may
PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, March 25, 2004 2:52 PM
Subject: Re: [sniffer] Spam storm?
Big uptick of new and broken spam.
Half way through the day and already at 445 new rules.
We may be getting it under control though... (fingers crossed).
_M
At 06:02 PM 3/24/2004, you wrote:
Am
[EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, March 24, 2004 8:43 PM
Subject: RE: [sniffer] Spam storm?
I see over a 1000 of these ERROR_BAD_MATRIX entries in my Sniffer log
file
today, as well. Is this due to the ruleset issue from earlier today?
Bill
-Original Message
, March 25, 2004 7:06 PM
To: [EMAIL PROTECTED]
Subject: Re: [sniffer] Spam storm?
This helps narrow things down. Specifically we know that the rulebase files
are not corrupted on the server but during the download. That explains why
I haven't been able to recreate a problem in the lab.
I have a suspicion
]
Sent: Wednesday, March 24, 2004 8:43 PM
Subject: RE: [sniffer] Spam storm?
I see over a 1000 of these ERROR_BAD_MATRIX entries in my Sniffer
log file
today, as well. Is this due to the ruleset issue from earlier
today?
Bill
-Original Message-
From: Sheldon
At 06:51 PM 3/25/2004, you wrote:
Looks like a bandwidth issue to me, since even doing the download manually,
my connection stalled 5 times before I could complete a successful download.
And the download speeds were atrocious, many times in bytes/second rather
than even kb/second - and my
there will be no choice but to change the format in order
to prevent this possibility.
_M
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Pete McNeil
Sent: Thursday, March 25, 2004 7:06 PM
To: [EMAIL PROTECTED]
Subject: Re: [sniffer] Spam storm
35 matches
Mail list logo
