North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Fwd: Re: Virus emails from nanog mail list

  • From: David Diaz
  • Date: Tue Aug 19 14:08:24 2003


Forwarding this for Mark, he deserved some credit for verifying the IP but did not want his other addy harvested.

It's like you need a wing man now for posting to mail lists!

Cougar




Subject: Re: Virus emails from nanog mail list
From: "Mark J. Scheller"
To: David Diaz <[email protected]>
Date: Tue, 19 Aug 2003 13:21:55 -0400
X-MailScanner-Information: Please contact the ISP for more information
X-MailScanner: Found to be clean

On Tue, 2003-08-19 at 12:42, David Diaz wrote:
 Spam may be off topic but in this case relevant.  Has anyone else
 noticed bounced emails that appear to have origionated from their
 nanog email boxes and contain viruses?

 Obviously some bot has gone threw the nanog list and is now forging
 headers such that they appear to come from those addresses, and they
 are attaching viruses.

 The IP address (which may or may not be accurate) appears to be
 [195.157.87.253].

 Has anyone else noticed this recently?
Earlier today I received 2 bounce messages from AOL stating they were
not delivered due to a virus and originated from that very IP!  So
you're not alone and/or imagining things.... thanks for mentioning its
harvesting source.

mS ([email protected])