Strange Email

  • Thread starter Thread starter jd.smithuk
  • Start date Start date
J

jd.smithuk

I have just recieved 87 emails all the same as the one below :-

This mail was generated automatically.
More info about --MCTAVISH-RAMSAY-- under:
http://www.mctavish-ramsay.com

-------
Occured_Errors:

132.115.181.113_does_not_like_recipient.
% 189: MAILBOX NOT FOUND
% 192: Giving_up_on_132.115.181.113.

End
-------

The full mail is attached.

Auto_Mail.System: [mctavish-ramsay]



*-*-* Attachment: No Virus found
*-*-* Mycompany.CO- Anti_Virus Service
*-*-* http://www.mycompany.co.uk


The mail has an attachment mail1804.xls.zip ( an empty zip file) Its
as if I tried to send an email to this company and its been bounced
back but I havent is this some sort of email address spoofing can I
do anything about it ?


Thanks
 
In
I have just recieved 87 emails all the same as the one below :-

This mail was generated automatically.
More info about --MCTAVISH-RAMSAY-- under:
http://www.mctavish-ramsay.com

-------
Occured_Errors:

132.115.181.113_does_not_like_recipient.
% 189: MAILBOX NOT FOUND
% 192: Giving_up_on_132.115.181.113.

End
-------

The full mail is attached.

Auto_Mail.System: [mctavish-ramsay]



*-*-* Attachment: No Virus found
*-*-* Mycompany.CO- Anti_Virus Service
*-*-* http://www.mycompany.co.uk


The mail has an attachment mail1804.xls.zip ( an empty zip file) Its
as if I tried to send an email to this company and its been bounced
back but I havent is this some sort of email address spoofing can I
do anything about it ?


Thanks
Click to expand...
The IP address given is as folows

11/22/04 11:39:04 whois (e-mail address removed)

whois -h whois.geektools.com 132.115.181.113 ...
GeekTools Whois Proxy v5.0.4 Ready.

Checking access for 82.37.43.94... ok.

Final results obtained from whois.arin.net.

Results:

OrgName: Army National Guard Bureau
OrgID: ANGB-1
Address: 111 S. George Mason Dr.
City: Arlington
StateProv: VA
PostalCode: 22204-1373
Country: US

NetRange: 132.110.0.0 - 132.116.255.255
CIDR: 132.110.0.0/15, 132.112.0.0/14, 132.116.0.0/16
NetName: NG-CONC4
NetHandle: NET-132-110-0-0-1
Parent: NET-132-0-0-0-0
NetType: Direct Allocation
NameServer: NS01.ARMY.MIL
NameServer: NS02.ARMY.MIL
NameServer: NS03.ARMY.MIL
Comment:
RegDate: 1990-03-05
Updated: 2001-05-24

TechHandle: JS727-ARIN
TechName: Shamp, Judith
TechPhone: +1-703-607-4320
TechEmail: (e-mail address removed)

OrgTechHandle: LJ28-ARIN
OrgTechName: Jones, Linda
OrgTechPhone: +1-520-538-6840
OrgTechEmail: (e-mail address removed)

# ARIN WHOIS database, last updated 2004-11-21 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.


The URL is as follows

11/22/04 11:42:11 whois /www.mctavish-ramsay.com
..com is a domain of USA & International Commercial
Searches for .com can be run at http://www.crsnic.net/

whois -h whois.crsnic.net mctavish-ramsay.com ...
Redirecting to NETWORK SOLUTIONS, LLC.


Registrant:
McTavish Ramsay & Company Limited (MCTAVISH-RAMSAY-DOM)
Fowler Rd
West Pitkerro Industrial Estat
Dundee DD5 3RN
UK

Domain Name: MCTAVISH-RAMSAY.COM

Administrative Contact, Technical Contact:
Demon Internet -Thus Plc (TIETXJJWZO) (e-mail address removed)
Thus PLC
Gateway House
322 Regents Park Road
Finchley, London N3 2QQ
UK
448452720666 fax: 448452700097

Record expires on 26-Apr-2005.
Record created on 27-Apr-1998.
Database last updated on 22-Nov-2004 06:41:22 EST.

Domain servers in listed order:

NS0.DEMON.CO.UK 158.152.1.65
NS1.DEMON.CO.UK 158.152.1.193
NS2.DEMON.NET 209.246.126.109


Probably Spam
 
Back
Top