Hey netscalibur! (was: Re: Hijacked email)

Wed Aug 20 19:14:45 UTC 2003

On Wed, 20 Aug 2003, Christopher Chin wrote:

  Okie doke....  is Netscalibur in the house?  I might assume so
  based on the "nanog-ish" return address on the received e-mail
  from [195.157.87.253].  This IP is sourcing Sobig.F to me, and
  *as* me.

  The received mail:

    From nanog at ehlke.net Wed Aug 20 10:03:00 2003
    Received: from KYAN ([195.157.87.253])

I got six various examples from this exact machine, until I just
nullrouted Netscalibur's /16. They have been the only virus messages
I've seen so far.

matto

--mghali at snark.net------------------------------------------<darwin><
   Flowers on the razor wire/I know you're here/We are few/And far
   between/I was thinking about her skin/Love is a many splintered
   thing/Don't be afraid now/Just walk on in. #include <disclaim.h>