Re: PING: Greg Millen

[Woodchuck Bill]

Dave in Fairfax wrote in news: [e-mail]:

Hey Greg, the one you sent me tracks back to the NL

Really? Mine traces back to Turkey, just like most of the other recent forgeries.

[Woodchuck Bill]

Dave in Fairfax wrote in news: [e-mail]:

Didn't you say that yours traced to NL? I presumed you meant Netherlands. Was it Netherlands or Turkey? Maybe I'm not tracing right. (not that it matters much..the perp is unlike to be in either of those jurisdictions)

[Dave Balderstone]

In the headers, it appears to be originating from a mail server at LIDYA.NET, which is in Istanbul.

A whois on the IP returns:

inetnum: 212.79.114.0 - 212.79.114.255 netname: Avr001 descr: Omurga - Satel Peering country: TR admin-c: MS2000 admin-c: CK1000-RIPE tech-c: CK1000-RIPE status: ASSIGNED PA mnt-by: AS12987-MNT mnt-lower: AS12987-MNT mnt-routes: AS12987-MNT notify: [e-mail] notify: [e-mail] changed: [e-mail] 20040119 changed: [e-mail] 20040119 source: RIPE

person: Mustafa Sokullu address: OMURGA NSP Services address: Buyukdere cad 121 Ercan Han II.Blok Kat 2 Gayrettepe address: Istanbul 80300 TURKEY phone: [phone] fax-no: [phone] e-mail: [e-mail] nic-hdl: MS2000 mnt-by: AS12987-MNT notify: [e-mail] changed: [e-mail] 20021211 source: RIPE

person: Cumhur KIZILARI address: Tophanelioglu Caddesi No: 66 A:1 34718 address: Kosuyolu - Uskudar Istanbul phone: [phone] fax-no: [phone] e-mail: [e-mail] nic-hdl: CK1000-RIPE mnt-by: AS12987-MNT notify: [e-mail] changed: [e-mail] 20040106 source: RIPE

[Woodchuck Bill]

Dave Balderstone wrote in news:251020041417592008%dave@N_O_T_T_H_I_S.balderstone.ca:

That's what I got.

[Dave Balderstone]

I emailed them but have had no reply. Big surprise...