Blog for hpHosts, and whatever else I feel like writing about ....

Wednesday, 25 August 2010

Evil network: Latnet Serviss Ltd (latnet.lv) AS2588 (159.148.117.0/24)

Latvia is definitely becoming a problem when it comes to black hat hosting. The 159.148.117.0/24 range (159.148.117.0 - 159.148.117.255) is another malicious block, forming part of AS2588 belonging to Latnet (similar to microlines.lv). At a rough calculation, roughly half the IP address ranges I am currently blocking are based in Latvia.

This bunch of domains is a mix of fake pharma sites, browser exploits, illegal downloads and possibly some hijacked domains. In any case, there is nothing of use here and either blocking the entire IP range, or the list below is probably a good idea.


Read more
http://blog.dynamoo.com/2010/08/evil-network-latnet-serviss-ltd.html

1 comment:

Andrew from Vancouver said...

Another microlines.lv network that has no goodness: 79.135.128.0/19 for example, one host http://hosts-file.net/?s=79.135.152.204&view=matches