mailbombed from very closeto home IP

Brian Cluff plug-discuss@lists.PLUG.phoenix.az.us
Sun, 15 Apr 2001 02:00:36 -0700


Oh wait.... I just noticed that your IP has a 10 in it and not a 56.  Thats
definatly nothing to do with me then.  The only address I have are in
24.221.56.x range.

Thats makes it a whole lot less confusing as to why you are getting a ping
and traceroute from that addess and I'm not. :)

Brian
----- Original Message -----

> well,
> thats more or less what I thought.
> However, I was able to ping that address and traceroute it back
> at the time I sent the e-mail. so it was active, if only for a few hours.
>
> in fact, as I type this, I am able to pingthat address...
>
> I know most of the tricks for spoofing headers, but spoofing a path on the
e-mail
> is a whole different critter. I did send a query to sprintbbd about it.
won't know until
> tomorrow (monday) what the results are.
>
> Hawke
>
> On Sat, 14 April 2001, "Brian Cluff" wrote:
>
> >
> > More than likely, it's a spoofed address.  That address is indeed
assigned
> > in the same chunk of IP's, but there is currently no machine on that IP
at
> > all, and never has been.  There are only 2 machines on that chunk of
> > bandwidth and both of them are completely intact and running smooth as
ever.
> >
> > Whatever it was that you got, it didn't actually come from us.
> >
> > Brian
> >
>
>
> Signup for your free USWEST.mail Email account http://www.uswestmail.net
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't
post to the list quickly and you use Netscape to write mail.
>
> PLUG-discuss mailing list  -  PLUG-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss