🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: be.comp.security
Article #542

Zombies

#542
From: Cyrano
Date: Fri, 29 Apr 2005 11:09
32 lines
1902 bytes
Hi,

zie:


<http://65.127.124.62/south_asia/4483241.stm.htm>


Obviously fake, maar de dns voor 65.127.124.62 [Integral corp.] komt van 
een setup die baserape.com heet. Daar draait een BBS met forum...


Lookup has started ...

Server:     193.121.171.135
Address: 193.121.171.135#53

Non-authoritative answer:
62.124.127.65.in-addr.arpa name = baserape.com.

Authoritative answers can be found from:
124.127.65.in-addr.arpa nameserver = helium.integralcorp.com.
helium.integralcorp.com internet address = 65.127.124.14


Some sort of DNS-poisoning goin' on?

Someone at Integral corp. honeypottin?

-- 
In a world without walls and fences, we don't need Windows and Gates...
Je bent wat je eet <http://www.objectief.be/>
Technical Details
Message-ID: <cyrano.mac-4D3FBB.13093029042005@europe.isp.giganews.com>
Path: arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news.glorb.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local01.nntp.dca.giganews.com!nntp.scarlet.biz!news.scarlet.biz.POSTED!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Thread: 113446,a57bd1839f5376b9,start
X-Google-Attributes: gid113446,public
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news.glorb.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local01.nntp.dca.giganews.com!nntp.scarlet.biz!news.scarlet.biz.POSTED!not-for-mail
NNTP-Posting-Date: Fri, 29 Apr 2005 06:09:29 -0500
From: Cyrano <cyrano.mac@techemail.com>
Newsgroups: be.comp.security
Subject: Zombies
Organization: de Bergerac
User-Agent: MT-NewsWatcher/3.4 (PPC Mac OS X)
Date: Fri, 29 Apr 2005 13:09:30 +0200
Message-ID: <cyrano.mac-4D3FBB.13093029042005@europe.isp.giganews.com>
Lines: 32
NNTP-Posting-Host: 81.11.229.36
X-Trace: sv3-DFDPZ9BSoc8LWk9nhYVOYgBJxH4/iPyDUJbOgbusQ4dUzWjcutxwkn+69UBS92fAA0CLlAaaXVFki02!G/y6eAWgxC/kg63S3lSuloeLryaCDN2dcF0CL+BRlcvVpNCxbhhZIqGmWBg4cmFmxtcz9QHWLiol!wRafroaLa/2S7TnUo+f+NzgcIZc=
X-Complaints-To: abuse@scarlet.be
X-DMCA-Complaints-To: abuse@scarlet.biz
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly
X-Postfilter: 1.3.32