[LINK] Nice little Conflicker spreader email.

Chris Maltby chris at sw.oz.au
Tue Oct 20 11:04:01 AEDT 2009


On Tue, Oct 20, 2009 at 09:52:46AM +1000, Chris Maltby wrote:
> As you say - well crafted and from crooks.  Here's the headers from a
> copy I got... (The elipsis are mine).
> 
>   Return-Path: <barneyrm at rothmanandtobin.com>
>   Received: from unknown (HELO CUMHPKZ) (193.17.208.215)
> 	  by ... with SMTP; 19 Oct 2009 13:56:29 -0000
>   Received: from 193.17.208.215 by sbserver.rothmanandtobin.com;
> 	  Mon, 19 Oct 2009 16:56:22 +0200

That IP address seems to be located in Odessa. Must be the local
Microsoft research lab eh?

Chris



More information about the Link mailing list