[HCRA] Viruses anyone?

Stephen Dill steve at krolyses.com
Mon Jul 25 15:43:32 EDT 2005


I got a bit of a mystery on my hands that I thought I would share with
everybody.

Every now and then (3 or 4 times a week) I would receive an e-mail with an
attached PIF.  The sender's e-mail address is always different and the
subject suggests I open the attachment "Your document" "Your bill" "Your
archive" "Excel File" etc.  My defences block the attachment and the body of
the message at the gate, so I can't tell you much about those.

One thing I noticed is that the IP address where the messages come from is
always the same.

68.112.243.120

This address appears to belong to a 'Charter Cable' subscriber in western
mass.

Anybody with Charter Internet might want to check their public IP address to
see if they are the culprit.  You can do this by going to
www.dslreports.com/whois

Sorry if any embarassment happens from this.

Steve, N1NPC



More information about the HCRA mailing list