I was looking at that earlier it seems to come from an
address
200.0.214.34 . Not registered to anyone but has ssh and web active. Is
the a members machine with a virus ?
I think this address tracks down to this report form LACNIC registry. (Latin
America & Caribbean registry)
I entered the address 200.0.214.34 in
whois.lacnic.net for the report below
which did not format correctly.
I use Sam Spade for my initial tracing. I like it to find where strange mail
comes from.
Copyright LACNIC
lacnic.net
The data below is provided for information purposes
and to assist persons in obtaining information about or
related to AS and IP numbers registrations
By submitting a whois query, you agree to use this data
only for lawful purposes.
2004-06-22 14:59:51 (BRT -03:00)inetnum: 200.0.214/24status:
reallocatedowner: PSINet Argentinaownerid: AR-PSAR-LACNICaddress: Av.
de Mayo 881address: Buenos Aires, Buenos Aires 1084country: ARowner-c:
CH69-ARINinetrev: 200.0.214/24nserver: NS1.ISOL.NET.AR nsstat:
20040620 AAnslastaa: 20040620nserver: DNS1.SSDNET.COM.AR nsstat:
20040620 UHnslastaa: 20020830created: 20000911changed:
20000911inetnum-up: 200.0.208/21source: ARIN-LACNIC-TRANSITIONnic-hdl:
CH69-ARINperson: System Engineer Carlos Alberto Horowicze-mail:
carlosh(a)ISOL.NETaddress: PSINet Argentinaaddress: Hornos 690address: Buenos
Aires, Buenos Aires 1272country: ARphone: +54-1-313-8082source:
ARIN-LACNIC-TRANSITION
whois.lacnic.net accepts only direct match queries.
Types of queries are: POCs, ownerid, CIDR blocks, IP
and AS numbers.
Paxton
Astorta, OR