[Dshield] Friendgreetings.com mass emailer

Russell Washington russ.washington at vaultsentry.com
Mon Oct 28 15:21:29 GMT 2002


Eeeeek... I read the AT&T WorldNet Services and I stopped reading...

/whack over head, /whack /whack

Thank you :)

-----Original Message-----
From: John Sage [mailto:jsage at finchhaven.com] 
Sent: Saturday, October 26, 2002 3:10 PM
To: list at dshield.org
Subject: Re: [Dshield] Friendgreetings.com mass emailer


umm.. no

On Fri, Oct 25, 2002 at 01:38:34PM -0700, Russell Washington wrote:
> Interesting.  Still sounds fishy tho, given that the 12.x range is 
> assigned to AT&T Worldnet.  Maybe a DSL user or something? (scratching 
> head)

The 12.x.x.x range is assigned via AT&T to *all* sorts of stuff; for this
(12.107.125.99), try Installshield:


BW whois 2.9 by Bill Weinman (http://whois.bw.org/)
(c) 1999-2001 William E. Weinman 

Enter an IP address or a domain name: 12.107.125.99

AT&T WorldNet Services ATT (NET-12-0-0-0-1)
                                  12.0.0.0 - 12.255.255.255

INSTALLSHIELD INSTALLSHI557-125 (NET-12-107-125-0-1)
                                  12.107.125.0 - 12.107.125.255


OrgName:    INSTALLSHIELD
OrgID:      ISTS 

NetRange:   12.107.125.0 - 12.107.125.255
CIDR:       12.107.125.0/24
NetName:    INSTALLSHI557-125
NetHandle:  NET-12-107-125-0-1
Parent:     NET-12-0-0-0-1
NetType:    Reassigned
Comment:   
RegDate:    2001-08-25
Updated:    2001-08-25 TechHandle: CG347-ARIN
TechName:   Galager, Conal
TechPhone:  +1-847-619-7085
TechEmail:  conal at installshield.com


[toot at sparky /tmp]# lynx -head -dump http://12.107.125.99/ HTTP/1.1 403
Access Forbidden
Server: Microsoft-IIS/5.0
Date: Sat, 26 Oct 2002 22:04:02 GMT
Content-Type: text/html
Content-Length: 172



- John
-- 
"Broken pipe"

PGP key:     http://www.finchhaven.com/pages/gpg_pubkey.html
Fingerprint: C493 9F26 05A9 6497 9800  4EF6 5FC8 F23D 35A4 F705

_______________________________________________
Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list




More information about the list mailing list