[91141] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: NANOG Spam?

daemon@ATHENA.MIT.EDU (Gregory Hicks)
Wed Jul 5 15:11:09 2006

Date: Wed, 5 Jul 2006 11:43:53 -0700 (PDT)
From: Gregory Hicks <ghicks@cadence.com>
Reply-To: Gregory Hicks <ghicks@cadence.com>
To: joe@sendjoeanemail.com
Cc: nanog@merit.edu
Errors-To: owner-nanog@merit.edu



> Subject: NANOG Spam?
> Date: Wed, 5 Jul 2006 12:56:19 -0500
> From: "Joe Johnson" <joe@sendjoeanemail.com>
> To: <nanog@merit.edu>
>=20
>=20
> Am I the only one to get this email?  Headers say merit.edu sent it. =20
I
> have NANOG whitelisted, though, so it came to my mailbox.
>=20
[...snip spam...]

No, I got it as well but Postini caught it for me.  So I hadn't seen
it...

Just a "joe-job" though.  The headers are forged.  See the IP address
in thi FIRST "Received-by:" header.  Came from Spain.

[...snip later headers...]
Received: from trapdoor.merit.edu (unknown [84.232.124.32])
=09by trapdoor.merit.edu (Postfix) with SMTP id AD0CF91265
=09for <nanog@trapdoor.merit.edu>; Wed,  5 Jul 2006 13:39:15 -0400=20
(EDT)
From: "nanog@enterzone.net" <nanog@enterzone.net>
To: nanog@trapdoor.merit.edu
Content-type: text/html;
 Charset=3DWindows-1251
-------------------------------

% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Information related to '84.232.124.0 - 84.232.125.255'

inetnum:        84.232.124.0 - 84.232.125.255
netname:        TELELEPE-NET
descr:          Television Por Cable
descr:          Hermanos Ponce Garcia S.L.
descr:          Local TV and ISP Provider
country:        es
admin-c:        GPP18-RIPE
tech-c:         GPP18-RIPE
status:         ASSIGNED PA
mnt-by:         SERVIHOSTING-MNT
source:         RIPE
changed:        ripe@servihosting.es 20060126

person:         Gregorio Ponce Pozuelo
address:        C/Ni=F1a, 31
address:        21440 Lepe (Huelva) SPAIN
phone:          +34 959645086
fax-no:         +34 959158409
e-mail:         cablehnosponcegarcia@hotmail.com
nic-hdl:        GPP18-RIPE
notify:         ripe@servihosting.es
mnt-by:         SERVIHOSTING-MNT
changed:        ripe@servihosting.es 20060126
source:         RIPE

% Information related to '84.232.0.0/17AS29119'

route:          84.232.0.0/17
descr:          ServiHosting Networks S.L.
descr:          First Allocation
remarks:        **********************************************
remarks:        |        For ABUSE/SPAM/SCANS issues         |
remarks:        |    send mail to abuse@servihosting.es      |
remarks:        |    or Fax at number +34.966982510          |
remarks:        **********************************************
origin:         AS29119
mnt-by:         SERVIHOSTING-MNT
notify:         m.tecles@servihosting.es
changed:        ripe@servihosting.es 20060113
source:         RIPE

Regards,
Gregory Hicks

---------------------------------------------------------------------
Gregory Hicks                           | Principal Systems Engineer
Cadence Design Systems                  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 9B1
San Jose, CA 95134

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton


home help back first fref pref prev next nref lref last post