[60876] in North American Network Operators' Group
Fwd: Re: Virus emails from nanog mail list
daemon@ATHENA.MIT.EDU (David Diaz)
Tue Aug 19 15:15:44 2003
Date: Tue, 19 Aug 2003 14:01:06 -0400
To: nanog@merit.edu
From: David Diaz <techlist@smoton.net>
Errors-To: owner-nanog-outgoing@merit.edu
Forwarding this for Mark, he deserved some credit for verifying the
IP but did not want his other addy harvested.
It's like you need a wing man now for posting to mail lists!
Cougar
>Subject: Re: Virus emails from nanog mail list
>From: "Mark J. Scheller"
>To: David Diaz <techlist@smoton.net>
>Date: Tue, 19 Aug 2003 13:21:55 -0400
>X-MailScanner-Information: Please contact the ISP for more information
>X-MailScanner: Found to be clean
>
>On Tue, 2003-08-19 at 12:42, David Diaz wrote:
>> Spam may be off topic but in this case relevant. Has anyone else
>> noticed bounced emails that appear to have origionated from their
>> nanog email boxes and contain viruses?
>>
>> Obviously some bot has gone threw the nanog list and is now forging
>> headers such that they appear to come from those addresses, and they
>> are attaching viruses.
>>
>> The IP address (which may or may not be accurate) appears to be
>> [195.157.87.253].
>>
>> Has anyone else noticed this recently?
>
>Earlier today I received 2 bounce messages from AOL stating they were
>not delivered due to a virus and originated from that very IP! So
>you're not alone and/or imagining things.... thanks for mentioning its
>harvesting source.
>
>mS (mjs@yoink.net)
>
