Re: [botnets] Suspicious IP for redirected DNS

Tue, 07 Nov 2006 11:55:11 -0800 

To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------



  Those look familiar.  We had a machine here, 
maybe 8 months back or so, that got infected with something that would 
periodically reset its DNS pointers to machines in that subnet (which is 
somewhere in Eastern Euope and has been a dource of much spam and 
malware...).


 


  I think PestPatrol rooted it out at the 
time.


 


David Gillett


 




  

  

  From: John Holan [mailto:[EMAIL PROTECTED] 
  
Sent: Monday, November 06, 2006 5:16 PM
To: 
  [email protected]
Subject: [botnets] Suspicious IP for 
  redirected DNS


  

  

  
Hi

  
Found a Laptop that had got its 
  DNS redirected to the following addresses

  
85.255.115.22

  
85.255.112.101

  
Any request is resolved back to 
  this two addresses.

  
Are looking for the source of 
  it. Will keep you all 
  posted.

  
 

  
(Kol ha 
  kavod Gadi)

  
 

  
John 
  Holan

  
 

  
IS 
  Analyst

  
ASTAC

  
Phone 
  # (907)563-3989

  
Fax 
  # (907)563-1932

  
 


_______________________________________________
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
All list and server information are public and available to law enforcement 
upon request.
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets

Reply via email to