[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

administrivia: klez forensics (Attention Global Imports BMW)



i've not figured out the actual person involved (or their email address),
but there is a klez infection which i can identify from my mail reject
logs. the pertinent data from ARIN whois is as follows:

whois 65.218.135.16@domain.elided
[whois.arin.net]
UUNET Technologies, Inc. UUNET65 (NET-65-192-0-0-1) 
                                  65.192.0.0 - 65.223.255.255
Global Imports - BMW UU-65-218-135-D8 (NET-65-218-135-0-1) 
                                  65.218.135.0 - 65.218.135.63

so some system at "Global Imports -- BMW" with an ip address of
65.218.135.16 is infected with klez. please fix your system.

thanks,
  richard
- --
Richard Welty                                         rwelty@domain.elided
Averill Park Networking                                         518-573-7592
              Unix, Linux, IP Network Engineering, Security

------------------------------

End of bmw-digest V9 #2318
**************************