mysterious complaints from my ISP - could it be Beagle?

Claude Jones claude_jones at levitjames.com
Thu Jan 18 04:36:33 UTC 2007


On Wed January 17 2007 9:33 pm, P Jones wrote:
> On 1/17/07, Claude Jones <claude_jones at levitjames.com> wrote:

> > 7784 | 207.188.230.120 | 2007-01-16 14:53:27 cbl SPAM | ATLANTECH -
> > Atlantech Online, Inc.
> > 7784 | 209.183.239.194 | 2007-01-16 17:46:43 cbl SPAM | ATLANTECH -
> > Atlantech Online, Inc.
> > 7784 | 65.79.236.162 | 2007-01-16 01:57:58 w.php srcport 2875 BEAGLE |
> > ATLANTECH - Atlantech Online, Inc.
> > 7784 | 65.79.236.162 | 2007-01-16 06:30:47 w.php srcport 4544 BEAGLE |
> > ATLANTECH - Atlantech Online, Inc.
> > 7784 | 65.79.236.162 | 2007-01-16 15:44:26 w.php srcport 3805 BEAGLE |
> > ATLANTECH - Atlantech Online, Inc.
> >
>
> Claude;
>
> Looks like Atlantech is your ISP, and the three last IPs are infected
> with a Beagle trojan variant:
>
> http://www.symantec.com/security_response/writeup.jsp?docid=2005-122421-014
>6-99&tabid=2
>

OK - I'm still not sure those last are relevant since they don't refer to my 
machines IP

> It also looks like your IP and the second IP are being flagged as spam
> sources. Your IP is in the CBL, you can see it here:
>
> http://cbl.abuseat.org/lookup.cgi?ip=207.188.230.120&.submit=Lookup
>
> There are directions on the pagge referenced to delist your IP.
>

Yes, very good explanations, too, about what to look for! Thank you. 

-- 
Claude Jones
Brunswick, MD, USA




More information about the fedora-list mailing list