[Ilugc] Strange messages from ilugc-request!

  • From: praveen@xxxxxxxxxxx (Praveen Kumar)
  • Date: Fri, 21 May 2004 12:12:07 +0530

This morning by 9:50 AM, I received three strange messages stamped from 
ilugc-request@xxxxxxxxxxxxx (might be spoofed) with the subject tags 
"Protected message", "Re: Message notify" and "Changes." containing some 
attachments with extensions "zip", "vbs" and "hta". I am attaching the 
mail headers below. Can the list administrator look into this? All the 
mails are originated from ve6.com (61.247.244.109). A whois lookup gave 
me the following.

<ravip@lfx1> (Wed May 19 13:04:33) [~/tsp3/linux]
$ whois -h whois.apnic.net 61.247.244.109
[whois.apnic.net]
% [whois.apnic.net node-1]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      61.247.240.0 - 61.247.255.0
netname:      BHARTI-IN
descr:        For DSL Customer South
descr:        Bharti Broadband Network Ltd.
descr:        234
descr:        Okhla Industrial Area
descr:        Phase III
descr:        Delhi
descr:        India
country:      IN
admin-c:      NA40-AP
tech-c:       NA40-AP
mnt-by:       MAINT-IN-BBIL
status:       ASSIGNED NON-PORTABLE
changed:      techsupport@xxxxxxxxxxxxxxxxxxx  20031113
source:       APNIC

person:       Network Administrator
address:      Bharti BT Internet Ltd.,D-189,Okhla Ind. Area,
address:      New Delhi,INDIA-110020
country:      IN
phone:        +91-11-6810088
fax-no:       +91-11-6810083
e-mail:       techsupport@xxxxxxxxxxxxxxxxxxx
nic-hdl:      NA40-AP
mnt-by:       MAINT-IN-BBIL
changed:      techsupport@xxxxxxxxxxxxxxxxxxx 20010813
source:       APNIC

Header #1
---------
 From - Fri May 21 09:51:57 2004
X-UIDL: Tl8!!bJ*"!6k*!!72?"!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
Return-path: <ilugc-request@xxxxxxxxxxxxx>
Envelope-to: praveen@xxxxxxxxxxx
Received: from (ve6.com) [61.247.244.109]
        by symonds.net with smtp (Exim 3.35 #1 (Debian))
        id 1BR1To-0002ge-00; Thu, 20 May 2004 21:17:56 -0700
Date: Fri, 21 May 2004 09:48:13 +0530
To: "Praveen" <praveen@xxxxxxxxxxx>
From: "Ilugc-request" <ilugc-request@xxxxxxxxxxxxx>
Subject: Protected message
Message-ID: <idhutthknvxiifqjnth@xxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: multipart/mixed;
         boundary="--------vtloacdvigqhdigfwlnj"
X-UIDL: Tl8!!bJ*"!6k*!!72?"!

Header #2
---------
 From - Fri May 21 09:51:58 2004
X-UIDL: [_J"!G&p!!]K)!!DZ$#!
X-Mozilla-Status: 0011
X-Mozilla-Status2: 10000000
Return-path: <ilugc-request@xxxxxxxxxxxxx>
Envelope-to: praveen@xxxxxxxxxxx
Received: from (ve6.net) [61.247.244.109]
        by symonds.net with smtp (Exim 3.35 #1 (Debian))
        id 1BR1WF-00030m-00; Thu, 20 May 2004 21:20:28 -0700
Date: Fri, 21 May 2004 09:50:46 +0530
To: "Praveen" <praveen@xxxxxxxxxxx>
From: "Ilugc-request" <ilugc-request@xxxxxxxxxxxxx>
Subject: RE: Message Notify
Message-ID: <hudivzkukclxfbmgnru@xxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: multipart/mixed;
         boundary="--------murghyesidwgvjyupqnu"
X-UIDL: [_J"!G&p!!]K)!!DZ$#!


Header #3
---------
 From - Fri May 21 09:51:58 2004
X-UIDL: ~N8!!VhT"!#g/"!g-d!!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
Return-path: <ilugc-request@xxxxxxxxxxxxx>
Envelope-to: praveen@xxxxxxxxxxx
Received: from (ve6.com) [61.247.244.109]
        by symonds.net with smtp (Exim 3.35 #1 (Debian))
        id 1BR1WJ-00030y-00; Thu, 20 May 2004 21:20:31 -0700
Date: Fri, 21 May 2004 09:50:50 +0530
To: "Praveen" <praveen@xxxxxxxxxxx>
From: "Ilugc-request" <ilugc-request@xxxxxxxxxxxxx>
Subject: Changes..
Message-ID: <hyzltrobvmciucuagxp@xxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: multipart/mixed;
         boundary="--------oapucbkaoghnieortujd"
X-UIDL: ~N8!!VhT"!#g/"!g-d!!
-- 
http://puggy.symonds.net/~praveen


Other related posts: