Botnets

, posted: 10-Jun-2007 14:24

I get LOTS of comment spam, safely bayesian away from public eyes. Take the haul of spam from last night: about 2,000 comments, all containing "cell free phone ringtones". The bit worth mentioning is that every single one of these comments is from a unique IP. Here's the first few 218.125.36.121 - japan 218.74.122.100 - china 121.142.29.161 - korea 123.199.23.3 - korea 61.142.246.123 - china 67.87.203.8 - dunno 71.60.15.135 - USA 71.7.218.24 - Canada 76.209.25.207 - USA 84.16.240.251 - Germany What are these machines?? My tame sysadmin tells me these are bot nets. They're networks of people who run compromised windows boxes. Conclusion --- i don't need a conclusion now go install ubuntu.

Other related posts:
Solaris 10 wins pwnie, remote exploit took 13 years to patch.


Permalink to Botnets | Add a comment (3 comments) | Main Index




Comment by juha, on 10-Jun-2007 20:29

$ whois -a NET-67-87-202-0-1

CustName:   Optimum Online (Cablevision Systems)
Address:    111 New South Road
City:       Hicksville
StateProv:  NY
PostalCode: 11801
Country:    US
RegDate:    2005-11-30
Updated:    2005-11-30

NetRange:   67.87.202.0 - 67.87.203.255
CIDR:       67.87.202.0/23
NetName:    OOL-CPE-NYX5NY-67-87-202-0-23
NetHandle:  NET-67-87-202-0-1
Parent:     NET-67-80-0-0-1
NetType:    Reassigned
Comment:
RegDate:    2005-11-30
Updated:    2005-11-30

RTechHandle: OH4-ORG-ARIN
RTechName:   OOL Hostmaster
RTechPhone:  +1-516-803-3000
RTechEmail:  hostmaster@cv.net

OrgAbuseHandle: OOLAB-ARIN
OrgAbuseName:   OOL Hostmaster
OrgAbusePhone:  +1-516-803-2400
OrgAbuseEmail:  abuse@cv.net

OrgTechHandle: OH4-ORG-ARIN
OrgTechName:   OOL Hostmaster
OrgTechPhone:  +1-516-803-3000
OrgTechEmail:  hostmaster@cv.net


Author's note by taniwha, on 10-Jun-2007 23:29

There's actually a city called "Hicksville" !!!


Comment by juha, on 12-Jun-2007 11:21

New York State has lots of weird place names...


Add a comment

Please note: comments that are inappropriate or promotional in nature will be deleted. E-mail addresses are not displayed, but you must enter a valid e-mail address to confirm your comments.

Are you a registered Geekzone user? Login to have the fields below automatically filled in for you and to enable links in comments. If you have (or qualify to have) a Geekzone Blog then your comment will be automatically confirmed and shown in this blog post.

Your name:

Your e-mail:

Your webpage:

taniwha's profile

Wally (Brenda) 
Te Whanganui O Tara
New Zealand