[Mono-list] Viruses from big@boss.com

Kenneth Benson sdhmis@sheratondover.com
Mon, 21 Apr 2003 09:02:18 -0400


This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C30806.3D1B4850
Content-Type: text/plain;
	charset="iso-8859-1"



-----Original Message-----
From: Miguel de Icaza [mailto:miguel@ximian.com]
Sent: Friday, April 18, 2003 12:45 PM
To: Kenneth Benson
Cc: 'mono-list@ximian.com'
Subject: Re: [Mono-list] Viruses from big@boss.com


Hello,

> I researched this and it is coming from Hanaro Telecom in Seoul, S.
> Korea.
> They have an abuse email at security@hanaro.com and the ip address
> sending it is 218.39.133.25.
> It would probably be better if Ximian was the one who acted on this
> since they host the list (sorry).

It does not seem to come from a single source, every copy I have gotten
comes from a different address ;-(

----------------------------

I see...
Are they all coming from 218.39.xxx.xxx?

Because I think that Hanaro has a large block of address.

I can't check further at the moment as I delete the ones I received after
emailing the list.

Thanks
Ken

------_=_NextPart_001_01C30806.3D1B4850
Content-Type: text/html;
	charset="iso-8859-1"

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
<TITLE>RE: [Mono-list] Viruses from big@boss.com</TITLE>
</HEAD>
<BODY>
<BR>
<BR>

<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Miguel de Icaza [<A HREF="mailto:miguel@ximian.com">mailto:miguel@ximian.com</A>]</FONT>
<BR><FONT SIZE=2>Sent: Friday, April 18, 2003 12:45 PM</FONT>
<BR><FONT SIZE=2>To: Kenneth Benson</FONT>
<BR><FONT SIZE=2>Cc: 'mono-list@ximian.com'</FONT>
<BR><FONT SIZE=2>Subject: Re: [Mono-list] Viruses from big@boss.com</FONT>
</P>
<BR>

<P><FONT SIZE=2>Hello,</FONT>
</P>

<P><FONT SIZE=2>&gt; I researched this and it is coming from Hanaro Telecom in Seoul, S.</FONT>
<BR><FONT SIZE=2>&gt; Korea.</FONT>
<BR><FONT SIZE=2>&gt; They have an abuse email at security@hanaro.com and the ip address</FONT>
<BR><FONT SIZE=2>&gt; sending it is 218.39.133.25.</FONT>
<BR><FONT SIZE=2>&gt; It would probably be better if Ximian was the one who acted on this</FONT>
<BR><FONT SIZE=2>&gt; since they host the list (sorry).</FONT>
</P>

<P><FONT SIZE=2>It does not seem to come from a single source, every copy I have gotten</FONT>
<BR><FONT SIZE=2>comes from a different address ;-(</FONT>
</P>

<P><FONT SIZE=2>----------------------------</FONT>
</P>

<P><FONT SIZE=2>I see...</FONT>
<BR><FONT SIZE=2>Are they all coming from 218.39.xxx.xxx?</FONT>
</P>

<P><FONT SIZE=2>Because I think that Hanaro has a large block of address.</FONT>
</P>

<P><FONT SIZE=2>I can't check further at the moment as I delete the ones I received after emailing the list.</FONT>
</P>

<P><FONT SIZE=2>Thanks</FONT>
<BR><FONT SIZE=2>Ken</FONT>
</P>

</BODY>
</HTML>
------_=_NextPart_001_01C30806.3D1B4850--