Multiple virus-laden emails coming from same sorce.

[Dave]

I'm trying to ID the city for this dial port. I'm getting emails from
someone in mass quantity, all containing infected files:

Received: from sdn-ap-005scfairp0166.dialsprint.net ([63.184.232.166]
helo=Gumpofvk)

Any help would be appreciated!

 

[John Elsbury]

I'm trying to ID the city for this dial port. I'm getting emails from
someone in mass quantity, all containing infected files:

Received: from sdn-ap-005scfairp0166.dialsprint.net ([63.184.232.166]
helo=Gumpofvk)

Any help would be appreciated!

IP |= location.
If you are sure where the e-mail is coming from, contact Sprint and
tell them their customer has a problem, and ask them to let the
customer know. Forward an entire received e-mail, without the viral
attachment, to them. If it's a dial-up, they will know from the
connection logs what caller it is.

 

[Dave]

In

I'm trying to ID the city for this dial port. I'm getting emails from
someone in mass quantity, all containing infected files:

Received: from sdn-ap-005scfairp0166.dialsprint.net ([63.184.232.166]
helo=Gumpofvk)

Any help would be appreciated!

IP |= location.
If you are sure where the e-mail is coming from, contact Sprint and
tell them their customer has a problem, and ask them to let the
customer know. Forward an entire received e-mail, without the viral
attachment, to them. If it's a dial-up, they will know from the
connection logs what caller it is.

Earthlink operates the network. I know this is the origination point. I
can't get anyone from earthlink to tell me where in the world this port is
located. Sprint used to use pseudo-clli codes in naming their locations (so
this should be South Carolina someplace, but I no not where - or if it is
South Carolina).

I was hoping there was someone more of a geek than me who knows the cipher
for their location coding.

 

[me]

In

I'm trying to ID the city for this dial port. I'm getting emails from
someone in mass quantity, all containing infected files:

Received: from sdn-ap-005scfairp0166.dialsprint.net ([63.184.232.166]
helo=Gumpofvk)

Any help would be appreciated!

IP |= location.
If you are sure where the e-mail is coming from, contact Sprint and
tell them their customer has a problem, and ask them to let the
customer know. Forward an entire received e-mail, without the viral
attachment, to them. If it's a dial-up, they will know from the
connection logs what caller it is.

Earthlink operates the network. I know this is the origination point. I
can't get anyone from earthlink to tell me where in the world this port is
located. Sprint used to use pseudo-clli codes in naming their locations (so
this should be South Carolina someplace, but I no not where - or if it is
South Carolina).

I was hoping there was someone more of a geek than me who knows the cipher
for their location coding.

This may (or may not) help:

http://www.dnsstuff.com/

--J
Replies to: jNpolak(at)Ojuno(dot)Tcom

 

[John Elsbury]

Earthlink operates the network. I know this is the origination point. I
can't get anyone from earthlink to tell me where in the world this port is
located. Sprint used to use pseudo-clli codes in naming their locations (so
this should be South Carolina someplace, but I no not where - or if it is
South Carolina).

I was hoping there was someone more of a geek than me who knows the cipher
for their location coding.

What good would it do you to know? Leave it up to Earthlink - they
are the only people who can explicitly identify the physical origin.
If they are prepared to help, well and good. If they are not, tough.