Re: PING: Greg Millen

Oct 25, 2004 4 Replies

Dave in Fairfax wrote in news: snipped-for-privacy@fairfax.com:


Hey Greg, the one you sent me tracks back to the NL

Really? Mine traces back to Turkey, just like most of the other recent forgeries.

Dave in Fairfax wrote in news: snipped-for-privacy@fairfax.com:

Didn't you say that yours traced to NL? I presumed you meant Netherlands. Was it Netherlands or Turkey? Maybe I'm not tracing right. (not that it matters much..the perp is unlike to be in either of those jurisdictions)

In the headers, it appears to be originating from a mail server at LIDYA.NET, which is in Istanbul.

A whois on the IP returns:

inetnum: 212.79.114.0 - 212.79.114.255 netname: Avr001 descr: Omurga - Satel Peering country: TR admin-c: MS2000 admin-c: CK1000-RIPE tech-c: CK1000-RIPE status: ASSIGNED PA mnt-by: AS12987-MNT mnt-lower: AS12987-MNT mnt-routes: AS12987-MNT notify: snipped-for-privacy@omurga.com notify: snipped-for-privacy@omurga.com changed: snipped-for-privacy@omurga.com 20040119 changed: snipped-for-privacy@omurga.com 20040119 source: RIPE

person: Mustafa Sokullu address: OMURGA NSP Services address: Buyukdere cad 121 Ercan Han II.Blok Kat 2 Gayrettepe address: Istanbul 80300 TURKEY phone: +90 216 5450410 fax-no: +90 216 5450583 e-mail: snipped-for-privacy@omurga.com nic-hdl: MS2000 mnt-by: AS12987-MNT notify: snipped-for-privacy@omurga.com changed: snipped-for-privacy@omurga.com 20021211 source: RIPE

person: Cumhur KIZILARI address: Tophanelioglu Caddesi No: 66 A:1 34718 address: Kosuyolu - Uskudar Istanbul phone: +90 216 5450410 fax-no: +90 216 5450583 e-mail: snipped-for-privacy@omurga.com nic-hdl: CK1000-RIPE mnt-by: AS12987-MNT notify: snipped-for-privacy@omurga.com changed: snipped-for-privacy@omurga.com 20040106 source: RIPE

Dave Balderstone wrote in news:251020041417592008%dave@N_O_T_T_H_I_S.balderstone.ca:

That's what I got.

I emailed them but have had no reply. Big surprise...

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required