[Dshield] Friendgreetings.com mass emailer

Russell Washington russ.washington at vaultsentry.com
Mon Oct 28 15:21:29 GMT 2002

Eeeeek... I read the AT&T WorldNet Services and I stopped reading...

/whack over head, /whack /whack

Thank you :)

-----Original Message-----
From: John Sage [mailto:jsage at finchhaven.com] 
Sent: Saturday, October 26, 2002 3:10 PM
To: list at dshield.org
Subject: Re: [Dshield] Friendgreetings.com mass emailer

umm.. no

On Fri, Oct 25, 2002 at 01:38:34PM -0700, Russell Washington wrote:
> Interesting.  Still sounds fishy tho, given that the 12.x range is 
> assigned to AT&T Worldnet.  Maybe a DSL user or something? (scratching 
> head)

The 12.x.x.x range is assigned via AT&T to *all* sorts of stuff; for this
(, try Installshield:

BW whois 2.9 by Bill Weinman (http://whois.bw.org/)
(c) 1999-2001 William E. Weinman 

Enter an IP address or a domain name:

AT&T WorldNet Services ATT (NET-12-0-0-0-1)

INSTALLSHIELD INSTALLSHI557-125 (NET-12-107-125-0-1)

OrgID:      ISTS 

NetRange: -
NetName:    INSTALLSHI557-125
NetHandle:  NET-12-107-125-0-1
Parent:     NET-12-0-0-0-1
NetType:    Reassigned
RegDate:    2001-08-25
Updated:    2001-08-25 TechHandle: CG347-ARIN
TechName:   Galager, Conal
TechPhone:  +1-847-619-7085
TechEmail:  conal at installshield.com

[toot at sparky /tmp]# lynx -head -dump HTTP/1.1 403
Access Forbidden
Server: Microsoft-IIS/5.0
Date: Sat, 26 Oct 2002 22:04:02 GMT
Content-Type: text/html
Content-Length: 172

- John
"Broken pipe"

PGP key:     http://www.finchhaven.com/pages/gpg_pubkey.html
Fingerprint: C493 9F26 05A9 6497 9800  4EF6 5FC8 F23D 35A4 F705

Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see:

More information about the list mailing list