Blog for hpHosts, and whatever else I feel like writing about ....

Wednesday, 25 August 2010

Evil network: Sagade Ltd / ATECH-SAGADE AS6851 (85.234.190.0/23)

I've mentioned Sagade Ltd before, it's a totally Black Hat Latvian network that should be blocked on sight. Google's Safe Browsing diagnostic for this range is fairly damning:

....

There's very little point playing whack-a-mole with these Latvian IP addresses. It's probably worth null-routing the entire country until some government agency that isn't being paid off by Russian organised criminals sorts the mess out. There's a list of major Latvian IP address allocations here- unless you do business in the Baltic states, then blocking all of them will probably do no harm.


Read more
http://blog.dynamoo.com/2010/08/evil-network-sagade-ltd-atech-sagade.html

For those not already aware, this particular /23 is part of the BKCNET (AS6851) range.

Related

Evilness: Sagade Ltd / ATECH-SAGADE
http://blog.dynamoo.com/2010/05/evilness-sagade-ltd-atech-sagade.html

No comments: