Fwd: Re: Virus emails from nanog mail list

David Diaz techlist at smoton.net
Tue Aug 19 18:01:06 UTC 2003


Forwarding this for Mark, he deserved some credit for verifying the 
IP but did not want his other addy harvested.

It's like you need a wing man now for posting to mail lists!

Cougar




>Subject: Re: Virus emails from nanog mail list
>From: "Mark J. Scheller"
>To: David Diaz <techlist at smoton.net>
>Date: Tue, 19 Aug 2003 13:21:55 -0400
>X-MailScanner-Information: Please contact the ISP for more information
>X-MailScanner: Found to be clean
>
>On Tue, 2003-08-19 at 12:42, David Diaz wrote:
>>  Spam may be off topic but in this case relevant.  Has anyone else
>>  noticed bounced emails that appear to have origionated from their
>>  nanog email boxes and contain viruses?
>>
>>  Obviously some bot has gone threw the nanog list and is now forging
>>  headers such that they appear to come from those addresses, and they
>>  are attaching viruses.
>>
>>  The IP address (which may or may not be accurate) appears to be
>>  [195.157.87.253].
>>
>>  Has anyone else noticed this recently?
>
>Earlier today I received 2 bounce messages from AOL stating they were
>not delivered due to a virus and originated from that very IP!  So
>you're not alone and/or imagining things.... thanks for mentioning its
>harvesting source.
>
>mS (mjs at yoink.net)
>




More information about the NANOG mailing list