Re: strange e-mail from root

2002-11-09 Thread M. Kolar
[EMAIL PROTECTED] wrote: I checked the website yesterday, wondering if there was someone to complain to. Apart from some images, everything's in Chinese. Not a hope. Here are some addresses, phone numbers from whois.apnic.net: inetnum: 211.101.128.0 - 211.101.255.255 netname: CAPITAL

Re: strange e-mail from root

2002-11-09 Thread psyche
On Thu, 7 Nov 2002, jdow wrote: > The Chinese are at it again, either second hand through a hacked host or > first hand. Send them a nice email thanking them for the order for 1000 > reprints of the Falun Gong Handbook. That should shut them up REAL quick. > > {^_-} > I checked the website yest

Re: strange e-mail from root

2002-11-09 Thread psyche
On Thu, 7 Nov 2002, Michael Schwendt wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 07 Nov 2002 08:19:52 -0800, Michael Knepher wrote: > > > I got one on this account as well. I think someone on the list has the > > virus. > > Same here, but posted to an old address which I'm n

Re: strange e-mail from root

2002-11-08 Thread jdow
I might add that the "quality" of the attacks from the .cn addresses is different from that *I* see most here in the US. The US generates the stray probes on NetBios most often. That's pure script kiddie. The ADSL connection went wonkity tonight - rain in the wires I suspect. I got knocked off line

RE: strange e-mail from root

2002-11-08 Thread Cochran Robert L (NO)
Title: RE: strange e-mail from root I have to agree with jdow also. I'm getting hit with attacks from 21cn.com too. They make up the bulk of the attacks on me. Someone out there has the time and resources to do these attacks; every time I block an IP address a new one gets used. Ma

Re: strange e-mail from root

2002-11-08 Thread jdow
From: "Ed Wilts" <[EMAIL PROTECTED]> > On Thu, Nov 07, 2002 at 05:24:14PM -0800, jdow wrote: > > The Chinese are at it again, either second hand through a hacked host or > > first hand. > > I don't think that's called for in this forum. After all, we don't > claim "The Americans are at it again"

Re: strange e-mail from root

2002-11-07 Thread Robert L. Cochran
I'd like to agree with Ed. Bob Cochran Greenbelt, Maryland, USA On Thu, 2002-11-07 at 20:46, Ed Wilts wrote: > On Thu, Nov 07, 2002 at 05:24:14PM -0800, jdow wrote: > > The Chinese are at it again, either second hand through a hacked host or > > first hand. > > I don't think that's called for

Re: strange e-mail from root

2002-11-07 Thread Ed Wilts
On Thu, Nov 07, 2002 at 05:24:14PM -0800, jdow wrote: > The Chinese are at it again, either second hand through a hacked host or > first hand. I don't think that's called for in this forum. After all, we don't claim "The Americans are at it again" when the majority of the hacker attempts come fr

Re: strange e-mail from root

2002-11-07 Thread jdow
dbook. That should shut them up REAL quick. {^_-} - Original Message - From: "Mike Chambers" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, November 07, 2002 16:34 PM Subject: Re: strange e-mail from root > - Original Message - > From: "Christia

Re: strange e-mail from root

2002-11-07 Thread Mike Chambers
- Original Message - From: "Christian Thibodeau" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, November 07, 2002 2:13 PM Subject: Re: strange e-mail from root > I also received one, and it originated from the same IP address as the > ones

Re: strange e-mail from root

2002-11-07 Thread Michael Schwendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07 Nov 2002 12:13:37 -0800, Christian Thibodeau wrote: > I also received one, and it originated from the same IP address as the > ones mentioned on the list so far: 211.101.140.97. The address does > not resolve, and traceroute is not very informat

Re: strange e-mail from root

2002-11-07 Thread Christian Thibodeau
On Thu, 2002-11-07 at 11:13, Michael Schwendt wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 07 Nov 2002 08:19:52 -0800, Michael Knepher wrote: > > > I got one on this account as well. I think someone on the list has the > > virus. > > Same here, but posted to an old address whi

Re: strange e-mail from root

2002-11-07 Thread Michael Schwendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07 Nov 2002 08:19:52 -0800, Michael Knepher wrote: > I got one on this account as well. I think someone on the list has the > virus. Same here, but posted to an old address which I'm no longer subscribed with. Therefore it looks like someone has h

Re: strange e-mail from root

2002-11-07 Thread Michael Knepher
I got one on this account as well. I think someone on the list has the virus. On Thu, 2002-11-07 at 08:05, Marc Deslauriers wrote: > Looks like a windows virus. I got one this morning myself. > > http://www.sarc.com/avcenter/venc/data/w32.brid.a@;mm.html > > Marc. > > > > On Thu, 2002-11-07 a

Re: strange e-mail from root

2002-11-07 Thread Marc Deslauriers
Looks like a windows virus. I got one this morning myself. http://www.sarc.com/avcenter/venc/data/w32.brid.a@;mm.html Marc. On Thu, 2002-11-07 at 10:48, Joshua Andrews wrote: > Sorry, I know this is not Psyche specific but this is the most active list. > > I received an email, (virus packed n

strange e-mail from root

2002-11-07 Thread Joshua Andrews
Sorry, I know this is not Psyche specific but this is the most active list. I received an email, (virus packed no doubt), on 2 different mail servers, 2 different domains; the message claims to come from root but the relay IP is in SOA somewhere in China. I don't understand why sendmail allowed