Multiple virus-laden emails coming from same sorce.

  • Thread starter Thread starter Dave
  • Start date Start date
D

Dave

I'm trying to ID the city for this dial port. I'm getting emails from
someone in mass quantity, all containing infected files:

Received: from sdn-ap-005scfairp0166.dialsprint.net ([63.184.232.166]
helo=Gumpofvk)

Any help would be appreciated!
 
I'm trying to ID the city for this dial port. I'm getting emails from
someone in mass quantity, all containing infected files:

Received: from sdn-ap-005scfairp0166.dialsprint.net ([63.184.232.166]
helo=Gumpofvk)

Any help would be appreciated!
Click to expand...

IP |= location.
If you are sure where the e-mail is coming from, contact Sprint and
tell them their customer has a problem, and ask them to let the
customer know. Forward an entire received e-mail, without the viral
attachment, to them. If it's a dial-up, they will know from the
connection logs what caller it is.
 
In
John Elsbury said:
I'm trying to ID the city for this dial port. I'm getting emails from
someone in mass quantity, all containing infected files:

Received: from sdn-ap-005scfairp0166.dialsprint.net ([63.184.232.166]
helo=Gumpofvk)

Any help would be appreciated!
Click to expand...

IP |= location.
If you are sure where the e-mail is coming from, contact Sprint and
tell them their customer has a problem, and ask them to let the
customer know. Forward an entire received e-mail, without the viral
attachment, to them. If it's a dial-up, they will know from the
connection logs what caller it is.
Click to expand...

Earthlink operates the network. I know this is the origination point. I
can't get anyone from earthlink to tell me where in the world this port is
located. Sprint used to use pseudo-clli codes in naming their locations (so
this should be South Carolina someplace, but I no not where - or if it is
South Carolina).

I was hoping there was someone more of a geek than me who knows the cipher
for their location coding.
 
Dave said:
In
John Elsbury said:
I'm trying to ID the city for this dial port. I'm getting emails from
someone in mass quantity, all containing infected files:

Received: from sdn-ap-005scfairp0166.dialsprint.net ([63.184.232.166]
helo=Gumpofvk)

Any help would be appreciated!
Click to expand...

IP |= location.
If you are sure where the e-mail is coming from, contact Sprint and
tell them their customer has a problem, and ask them to let the
customer know. Forward an entire received e-mail, without the viral
attachment, to them. If it's a dial-up, they will know from the
connection logs what caller it is.
Click to expand...

Earthlink operates the network. I know this is the origination point. I
can't get anyone from earthlink to tell me where in the world this port is
located. Sprint used to use pseudo-clli codes in naming their locations (so
this should be South Carolina someplace, but I no not where - or if it is
South Carolina).

I was hoping there was someone more of a geek than me who knows the cipher
for their location coding.
Click to expand...

This may (or may not) help:

http://www.dnsstuff.com/

--J
Replies to: jNpolak(at)Ojuno(dot)Tcom
 
Earthlink operates the network. I know this is the origination point. I
can't get anyone from earthlink to tell me where in the world this port is
located. Sprint used to use pseudo-clli codes in naming their locations (so
this should be South Carolina someplace, but I no not where - or if it is
South Carolina).

I was hoping there was someone more of a geek than me who knows the cipher
for their location coding.
Click to expand...
What good would it do you to know? Leave it up to Earthlink - they
are the only people who can explicitly identify the physical origin.
If they are prepared to help, well and good. If they are not, tough.
 
Back
Top