On 5/12/07, Jason Frisvold <[EMAIL PROTECTED]> wrote:
I installed the botnet plugin today, but it's not going to help anyway.. The IPs these are coming from resolve to a variety of different hostnames, all without triggering botnet at all.
Here's a sample of the hits I'm getting ... As you can see, its a bunch of different IPs in various ranges.. I've decided to just block the ranges at this point.. I have no idea if there's anything legit in there, but I'll take that risk... baseball142.pamwheeled.com (66.96.245.142) baseball15.hammersmoky.com (66.96.245.15) baseball167.pamwheeled.com (66.96.245.167) baseball168.pamwheeled.com (66.96.245.168) baseball184.itlivestock.com (66.96.245.184) baseball20.hammersmoky.com (66.96.245.20) baseball210.itlivestock.com (66.96.245.210) baseball237.burmesetow.com (66.96.245.237) baseball247.burmesetow.com (66.96.245.247) baseball31.hammersmoky.com (66.96.245.31) baseball6.hammersmoky.com (66.96.245.6) baseball75.platenormal.com (66.96.245.75) crowflies110.yentropical.com (65.111.26.110) crowflies131.yentropical.com (65.111.26.131) crowflies15.mowcraving.com (65.111.26.15) crowflies168.ropepin.com (65.111.26.168) crowflies176.ropepin.com (65.111.26.176) crowflies186.ropepin.com (65.111.26.186) crowflies19.mowcraving.com (65.111.26.19) crowflies33.mowcraving.com (65.111.26.33) crowflies42.mowcraving.com (65.111.26.42) crowflies57.beforefor.com (65.111.26.57) crowflies63.beforefor.com (65.111.26.63) lampshade144.acidicbee.com (66.240.249.144) lampshade153.acidicbee.com (66.240.249.153) lampshade161.acidicbee.com (66.240.249.161) lampshade183.acidicbee.com (66.240.249.183) lampshade183.acidicbee.com (66.240.249.183) lampshade213.acidicbee.com (66.240.249.213) lampshade231.acidicbee.com (66.240.249.231) lampshade231.acidicbee.com (66.240.249.231) lampshade239.acidicbee.com (66.240.249.239) later112.itbobble.com (216.74.88.112) later13.divesthow.com (216.74.88.13) later15.divesthow.com (216.74.88.15) later189.tarponway.com (216.74.88.189) later20.divesthow.com (216.74.88.20) later216.usefulget.com (216.74.88.216) later217.usefulget.com (216.74.88.217) later225.usefulget.com (216.74.88.225) later250.usefulget.com (216.74.88.250) later69.itbobble.com (216.74.88.69) mail136.yenram.com (64.191.11.136) mail237.todinto.com (64.191.11.237) mail239.todinto.com (64.191.11.239) mail250.todinto.com (64.191.11.250) mail91.rangeat.com (64.191.11.91) movie113.fencingnow.com (216.10.25.113) movie119.fencingnow.com (216.10.25.119) movie120.fencingnow.com (216.10.25.120) movie126.fencingnow.com (216.10.25.126) movie166.measleit.com (216.10.25.166) movie184.measleit.com (216.10.25.184) movie207.fosteris.com (216.10.25.207) movie78.fencingnow.com (216.10.25.78) mustang214.pugto.com (72.37.196.214) mustang242.pugto.com (72.37.196.242) omega172.dressyoung.com (66.197.254.172) omega199.dressyoung.com (66.197.254.199) omega225.dressyoung.com (66.197.254.225) omega237.dressyoung.com (66.197.254.237) omega86.byknife.com (66.197.254.86) pick17.heatscanna.com (64.192.26.17) pick182.runninghit.com (64.192.26.182) rainy206.grimacehot.com (66.96.252.206) rush100.standbot.com (66.96.255.100) rush101.standbot.com (66.96.255.101) rush103.standbot.com (66.96.255.103) rush131.ifweight.com (66.96.255.131) rush188.whobeak.com (66.96.255.188) rush206.whobeak.com (66.96.255.206) rush208.whenpile.com (66.96.255.208) rush226.whenpile.com (66.96.255.226) rush232.whenpile.com (66.96.255.232) rush236.whenpile.com (66.96.255.236) rush251.whenpile.com (66.96.255.251) source238.wearisen.com (216.74.120.238) source244.wearisen.com (216.74.120.244) teaching200.wordssort.com (64.192.28.200) teaching33.camelcoat.com (64.192.28.33) -- Jason 'XenoPhage' Frisvold [EMAIL PROTECTED] http://blog.godshell.com
