dcom worm - curious
Stephen J. Wilcox
steve at telecomplete.co.uk
Thu Aug 14 11:43:45 UTC 2003
Got a few emails in with the Mimail worm attached, the thing is who is sending
them as these are not email addresses/domain names that I use altho they do
exist in some old websites that are still live.
Is someone spidering and spamming out this worm or something??
Steve
------------------------- BEGIN HEADERS -----------------------------
Received: from mail-0.telecomplete.net ([193.0.249.4] helo=mail.telecomplete.net)
by mx-0.telecomplete.net with esmtp (Exim 4.10)
id 19nGAW-0003Gn-00
for rjnr at thedogsbollocks.co.uk; Thu, 14 Aug 2003 11:21:24 +0000
Received: from [203.122.2.209] (helo=localhost)
by mail.telecomplete.net with smtp (Exim 4.20)
id 19nGAH-0005Hi-Tj
for rjnr at thedogsbollocks.co.uk; Thu, 14 Aug 2003 12:21:14 +0100
From: admin at thedogsbollocks.co.uk
To: Rjnr <rjnr at thedogsbollocks.co.uk>
Reply-To: admin at thedogsbollocks.co.uk
X-Mailer: The Bat! (v1.61)
X-Priority: 2 (High)
Subject: your account rspdhjri
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------FC242CEF000E8E3"
Message-Id: <E19nGAH-0005Hi-Tj at mail.telecomplete.net>
Date: Thu, 14 Aug 2003 12:21:14 +0100
-------------------------- END HEADERS ------------------------------
More information about the NANOG
mailing list