mailbombed from very closeto home IP

plug-discuss@lists.PLUG.phoenix.az.us plug-discuss@lists.PLUG.phoenix.az.us
14 Apr 2001 20:52:18 -0700


well,
thats more or less what I thought.
However, I was able to ping that address and traceroute it back
at the time I sent the e-mail. so it was active, if only for a few hours.

in fact, as I type this, I am able to pingthat address...

I know most of the tricks for spoofing headers, but spoofing a path on the e-mail
is a whole different critter. I did send a query to sprintbbd about it. won't know until
tomorrow (monday) what the results are.

Hawke

On Sat, 14 April 2001, "Brian Cluff" wrote:

> 
> More than likely, it's a spoofed address.  That address is indeed assigned
> in the same chunk of IP's, but there is currently no machine on that IP at
> all, and never has been.  There are only 2 machines on that chunk of
> bandwidth and both of them are completely intact and running smooth as ever.
> 
> Whatever it was that you got, it didn't actually come from us.
> 
> Brian
> 


Signup for your free USWEST.mail Email account http://www.uswestmail.net