Since I havent updated my scanner I dont know which it was.
Quite alot spoof addresses
the virus sender and Sir Fox are from two different computers but may be
close together
they are both from Virginia but different ISPs
this was from 69.19.68.46 69% chance is Warrenton, Virginia
It has a webserver running on port 80