[Dshield] Friendgreetings.com mass emailer

John Sage jsage at finchhaven.com
Sat Oct 26 22:10:00 GMT 2002


umm.. no

On Fri, Oct 25, 2002 at 01:38:34PM -0700, Russell Washington wrote:
> Interesting.  Still sounds fishy tho, given that the 12.x range is assigned
> to AT&T Worldnet.  Maybe a DSL user or something? (scratching head)

The 12.x.x.x range is assigned via AT&T to *all* sorts of stuff; for
this (12.107.125.99), try Installshield:


BW whois 2.9 by Bill Weinman (http://whois.bw.org/)
© 1999-2001 William E. Weinman 

Enter an IP address or a domain name: 12.107.125.99

AT&T WorldNet Services ATT (NET-12-0-0-0-1)
                                  12.0.0.0 - 12.255.255.255

INSTALLSHIELD INSTALLSHI557-125 (NET-12-107-125-0-1)
                                  12.107.125.0 - 12.107.125.255


OrgName:    INSTALLSHIELD
OrgID:      ISTS 

NetRange:   12.107.125.0 - 12.107.125.255
CIDR:       12.107.125.0/24
NetName:    INSTALLSHI557-125
NetHandle:  NET-12-107-125-0-1
Parent:     NET-12-0-0-0-1
NetType:    Reassigned
Comment:   
RegDate:    2001-08-25
Updated:    2001-08-25 TechHandle: CG347-ARIN
TechName:   Galager, Conal
TechPhone:  +1-847-619-7085
TechEmail:  conal at installshield.com


[toot at sparky /tmp]# lynx -head -dump http://12.107.125.99/
HTTP/1.1 403 Access Forbidden
Server: Microsoft-IIS/5.0
Date: Sat, 26 Oct 2002 22:04:02 GMT
Content-Type: text/html
Content-Length: 172



- John
-- 
"Broken pipe"

PGP key:     http://www.finchhaven.com/pages/gpg_pubkey.html
Fingerprint: C493 9F26 05A9 6497 9800  4EF6 5FC8 F23D 35A4 F705




More information about the list mailing list