nanog mailing list archives
Re: malware warning
From: "Glen A. Pearce" <nanog () ve4 ca>
Date: Thu, 20 Jul 2023 00:31:35 -0600
I've also gotten these, ironic that it was in "reply" to my "Not sure if this is a phishing E-mail or real..." thread. I initially thought someone was spamming the whole list, it took a while before I looked close enough to realize it was directly to the address I use for the mailing list and not through the mailing list. (Which explained why it wasn't showing up in the list archive on the web.) Also continued much after the thread died out in my case too. On 18/07/2023 6:06 p.m., Matt Corallo wrote:
I get quite a bit of spam that is a "reply" to old NANOG posts (some dating back a year or more). Seems to only happen on some specific threads, dunno why though.Definitely recommend using a nanog-specific alias and auto-spam-folder'ing anything to that alias that isn't CC nanog@nanog, that seems to get rid of it.Matt On 7/18/23 5:02 PM, Randy Bush wrote:malware email is so common i normally do not warn of it. but, in this case, the attacker is extracting quotes from nanog and luring folk into clicking. e.g. From: takahashi () fukushitrust com Subject: Re: jon postel To: Randy Bush <randy () psg com> Date: Mon, 17 Jul 2023 04:01:47 -0700 Hello!We would like to present to you several alternatives for presentations and find out your thoughts andopinions, please let us know whatever you think about it. https://dognibs.com/8jh/ogr/g0h436ttqbw Waiting for your reply> Does anyone have any stories about working with or near John they > would like to share with the list? It would definitely make my day > to hear more about the early internet somewhere around i have a protocol violation ticket he issued. --- Who says that routing unallocated address space is ungood? -- Randy Bush Routing unallocated address space is ungood! -- Jon Postel randy---- and From: office () daimontrade com ua Subject: Re: Reverse DNS for eyeballs? To: Randy Bush <randy () psg com> Date: Tue, 18 Jul 2023 02:56:36 -0700 Hello,Modified paperwork regarding For this month. Kindly read through it attentively.https://soocoop.net/e24/1s0/7ckl0icu7h We appreciate your attention.> I would say the absence of reverse DNS tells useful info to receiving > MTAs - to preferably notaccept. yep
-- Glen A. Pearce gap () ve4 ca Network Manager, Webmaster, Bookkeeper, Fashion Model and Shipping Clerk. Very Eager 4 Tees http://www.ve4.ca ARIN Handle VET-17
Current thread:
- malware warning Randy Bush (Jul 18)
- Re: malware warning Matt Corallo (Jul 18)
- Re: malware warning L F (Jul 18)
- Re: malware warning Glen A. Pearce (Jul 19)
- Re: malware warning Peter Potvin via NANOG (Jul 18)
- Re: malware warning Josh Luthman (Jul 18)
- Re: malware warning Randy Bush (Jul 18)
- Re: malware warning Bryan Fields (Jul 21)
- Re: malware warning borg (Jul 22)
- Re: malware warning Niels Bakker (Jul 22)
- Re: malware warning borg (Jul 22)
- Re: malware warning Josh Luthman (Jul 18)
- Re: malware warning Matt Corallo (Jul 18)