On Tue, 30 Jan 2001, Glen Lee Edwards wrote:
> Do any of you know if this file is a virus file?
>
> MAPPJJMA.exe
>
> A client of mine received it from an unknown source.
so delete it and go one with life... easy enough... never open strange
attachments, never take candy from strangers, blah blah... heh heh
>
> How do I find out what ISP owns the IP address: 206.228.67.73?
Heres the traceroute for that IP:
[root@silentbob /root]# traceroute 206.228.67.73
traceroute to 206.228.67.73 (206.228.67.73), 30 hops max, 38 byte packets
6 POS6-0.BR2.DCA8.ALTER.NET (152.63.35.189) 13.294 ms 12.007 ms
12.211 ms
7 sl-bb20-rly-6-0.sprintlink.net (144.232.18.169) 14.241 ms 14.250 ms
14.364 ms
8 sl-bb21-rly-13-0.sprintlink.net (144.232.25.18) 14.831 ms 14.272 ms
15.246 ms
9 sl-bb20-pen-10-0.sprintlink.net (144.232.9.241) 15.278 ms 15.197 ms
15.630 ms
10 sl-gw18-pen-0-0.sprintlink.net (144.232.16.250) 18.485 ms 17.684 ms
17.174 ms
11 sl-cumberlandtech-3-0.sprintlink.net (144.228.175.6) 75.891 ms
sl-cumberlandtech-13-0.sprintlink.net (144.228.175.118) 97.769 ms
sl-cumberlandtech-7-0.sprintlink.net (144.228.175.34) 93.533 ms
12 206.228.70.18 (206.228.70.18) 103.489 ms 92.351 ms 96.247 ms
13 206.228.71.119 (206.228.71.119) 108.904 ms 129.858 ms 80.006 ms
14 206.228.67.73 (206.228.67.73) 179.251 ms 195.647 ms 180.281 ms
the first 5 hops were left out (have to keep some secrets you know?)
but looks like it hits ALTER.NET then picks up on sprints network, then
goes to some place called cumberlandtech that is using a pipe from sprint,
then it goes to straight IPs...
couldnt find anything on the IPs, using ping, ssh, telnet, etc... but a
nslookup on www.cumberlandtech.com gives me this:
Name: pop3.cumberlandtech.com
Address: 206.72.152.67
Aliases: www.cumberlandtech.com
nothing useful with a portscan, and going to www.cumberlandtech.com gives
me an interesting site with some contact address and phone... you may
wnat to email these, or call them to find out, if it is that important to
you:
Cumberland Technologies Inc., Home of Cumberland Casualty and Surety
Company
For more information, E-Mail us at:
[EMAIL PROTECTED]
OR CALL TOLL FREE:(800) 723-0171
PHONE:(813) 885-2112
FAX:(813) 885-6734
4311 West Waters Avenue #401
Tampa, Florida 33614
But FWIW, this is probably another email virus, or something of that
nature, and really, you should just delete it and go on. but there's the
info if you want to follow up on it.
cheers
--
(-0-) (-0-) (-0-) <-0-> (-0-) (-0-) (-0-)
Jeffrey D Lane, RHCE, RHCX, EMT-ST
Geek, Star Wars Fanatic, and collector of
obselete technologies.
2600 Meridian Parkway (919) 547-0012x168
Durham, NC 27713 (888) REDHAT1x168
"Ignorance can be cured,
But Stupidity is forever."
(-0-) (-0-) (-0-) <-0-> (-0-) (-0-) (-0-)
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
