SCOUG-HELP Mailing List Archives

<< Previous Message << >> Next Message >>

Date:	Sat, 12 Jun 2004 07:53:16 PDT7
From:	Peter Skye <pskye@peterskye.com >
Reply-To:	scoug-help@scoug.com
To:	scoug-help@scoug.com
Subject:	SCOUG-Help: The "Hi" virus msg to this list yesterday

Content Type: text/plain

=====================================================
If you are responding to someone asking for help who
may not be a member of this list, be sure to use the
REPLY TO ALL feature of your email program.
=====================================================

Bob wrote:
>
> That spam came from an ISP at uninet.net.mx. When I
> received it yesterday I sent a message to abuse@uninet.net.mx
> to let then know one of their customers had a virus.

Thanks, Bob.

How did you trace it to uninet.net.mx? The applicable header line is

Received: from scoug.com (dup-200-95-122-102.prod-infinitum.com.mx [200.95.122.102] ) by scoug.com
(Hethmon Brothers Smtpd) ; Wed, 9 Jun 2004 16:44:25 -0700

Tracerte shows the final hops as:

uninet.net.mx, then
*.uninet-ide.com.mx, then
*.prod-infinitum.com.mx

How did you determine that uninet.net.mx was the ISP?

- Peter

=====================================================

To unsubscribe from this list, send an email message
to "steward@scoug.com". In the body of the message,
put the command "unsubscribe scoug-help".

For problems, contact the list owner at
"rollin@scoug.com".

=====================================================

Return to [ 12 | June | 2004 ]

SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group. OS/2, Workplace Shell, and IBM are registered trademarks of International Business Machines Corporation. All other trademarks remain the property of their respective owners.