Just a note folks, after identifying some new Internet Service Team ranges, I am currently in the process of adding over 3000 new entries to the database. I am seriously wishing the HOSTS file allowed blocking IP ranges, as this could've easily been accomplished by adding the following single line to the blacklist (which is what you can add to your firewall filter if you've not already done so).
217.20.112.0, 217.20.127.255
This block is used by the IST, and owned, surprise surprise, by NetDirekt (yep, I already knew that, which is why it's not a surprise). 217.20.112.* is already in hpHosts, but 113-127 is not (at least, not completely, little scraps here and there were already in the database).
You can see all of the IP ranges I am aware of that are in use by the IST at;
hosts-file.net/pest.asp?show=internetserviceteam
References:
Google poisoning, IST, rogues and 250+ reasons to avoid 209.44.* ......
http://hphosts.blogspot.com/2009/05/google-poisoning-ist-rogues-and-250.html
IST (Internet Service Team - *.internetserviceteam.com) in blackhat SEO campaign - again
http://hphosts.blogspot.com/2009/05/ist-internet-service-team.html
MalwareURL: Internet Service Team
http://www.malwareurl.com/search.php?domain=&s=internetserviceteam&match=0&rp=50&urls=on&redirs=on&ip=on&reverse=on&as=on&ns=on
MalwareURL: AS28753
http://www.malwareurl.com/search.php?domain=&s=AS28753&match=0&rp=50&urls=on&redirs=on&ip=on&reverse=on&as=on
MalwareDomainList: Internet Service Team
http://malwaredomainlist.com/mdl.php?search=internetserviceteam&colsearch=All&quantity=50
Monday 13 July 2009
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment