To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ----------
With coffee in hand, Thank you! That's what I was looking for. Now a little scripting and I'm going to also download the list of domains on those IP addresses. Anyone have such an animal already??? Care to share??? Thanks again Richard.
________________________________ From: Richard Cox [mailto:[EMAIL PROTECTED] Sent: Mon 1/22/2007 9:50 AM To: [email protected] Subject: Re: [botnets] Massively Infected Host To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- On Mon, 22 Jan 2007 08:07:58 -0600 "Thomas Raef" <[EMAIL PROTECTED]> wrote: > It's amazing what a second cup of coffee does for my brain. > > I checked an IP address with www.arin.net and here's what I received. > I am blocking the entire net range of 66.235.192.0/19 Have another coffee. Then go to website and put "> IPOWE" (without the quotes, of course) into the WHOIS search box. Or go to: http://www.cidr-report.org/cgi-bin/as-report?as=AS30380 Either way you should get a broader view of their IP ranges ... -- Richard Cox <[EMAIL PROTECTED]> _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
<<winmail.dat>>
_______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
