To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- > 85.255.115.22 > 85.255.112.101
Those IP's belong to inhoster, which is a hotbed of scraping, spamming and worse. I've been advocating blocking their entire range from any servers for a long time. http://incredibill.blogspot.com/2006/08/inhoster-blog-spam-haven-servers.html http://incredibill.blogspot.com/2006/08/scraper-busted-11-inhoster-scraper.html Hope this sheds more light on their activities. -- Bill Atchison http://www.crawlwall.com (650) 358-9649 Quoting christoph <[EMAIL PROTECTED]>: > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > ---------- > Hi John, > > if you do need contact in .UA let me know offline. > > regards, > christoph > >> ---------------------------------------------------------------------- >> >> Message: 1 >> Date: Tue, 7 Nov 2006 10:47:07 -0800 >> From: "David Gillett" <[EMAIL PROTECTED]> >> Subject: Re: [botnets] Suspicious IP for redirected DNS >> To: "'John Holan'" <[EMAIL PROTECTED]>, <[email protected]> >> Message-ID: <[EMAIL PROTECTED]> >> Content-Type: text/plain; charset="us-ascii" >> >> Those look familiar. We had a machine here, maybe 8 months back or so, >> that got infected with something that would periodically reset its DNS >> pointers to machines in that subnet (which is somewhere in Eastern Euope >> and >> has been a dource of much spam and malware...). >> >> I think PestPatrol rooted it out at the time. >> >> David Gillett >> >> >> _____ >> >> From: John Holan [mailto:[EMAIL PROTECTED] >> Sent: Monday, November 06, 2006 5:16 PM >> To: [email protected] >> Subject: [botnets] Suspicious IP for redirected DNS >> >> >> Hi >> Found a Laptop that had got its DNS redirected to the following addresses >> 85.255.115.22 >> 85.255.112.101 >> Any request is resolved back to this two addresses. >> Are looking for the source of it. Will keep you all posted. >> >> (Kol ha kavod Gadi) >> >> John Holan >> >> IS Analyst >> ASTAC >> Phone # (907)563-3989 >> Fax # (907)563-1932 >> >> -------------- next part -------------- >> An HTML attachment was scrubbed... >> URL: >> http://www.whitestar.linuxbox.org/mailman/private/botnets/attachments/20061107/51c33592/attachment.html >> >> ------------------------------ >> >> _______________________________________________ >> botnets mailing list >> [email protected] >> http://www.whitestar.linuxbox.org/mailman/listinfo/botnets >> >> >> End of botnets Digest, Vol 9, Issue 3 >> ************************************* >> >> > > > _______________________________________________ > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > All list and server information are public and available to law > enforcement upon request. > http://www.whitestar.linuxbox.org/mailman/listinfo/botnets > _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
