Last active
January 15, 2016 01:14
-
-
Save sdamashek/9402393 to your computer and use it in GitHub Desktop.
Currently Suspected NEW IP Ranges
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| range - IP Range Owner | |
| 46.148.30.0/23 - Infium LLC | |
| 62.109.0.0/19 - TheFirst-RU clients | |
| 62.122.72.0/23 - Leksim Ltd. | |
| 78.24.216.0/21 - TheFirst-RU clients | |
| 82.146.40.0/21 - Infium LLC | |
| 82.146.56.0/21 - TheFirst-RU clients | |
| 91.197.131.0/24 - Virtual Data Computing LLC | |
| 91.207.60.0/23 - PE Ivanov Vitaliy Sergeevich | |
| 91.207.116.0/23 - Rise-v Ltd | |
| 91.213.72.0/24 - PE Zavalnuk Vladislav Mihailovich | |
| 91.213.93.0/24 - PE Mykola Vitalievich Tabakov | |
| 91.216.3.0/24 - PP Trusov Ilya Igorevych | |
| 91.217.90.0/23 - PE Ivanov Vitaliy Sergeevich | |
| 91.217.162.0/24 - Voejkova Nadezhda | |
| 91.222.64.0/24 - Virtual Data Computing LLC | |
| 91.223.28.0/24 | |
| 91.226.72.0/24 | |
| 91.229.76.0/22 - DeltaHost | |
| 91.229.248.0/24 - EPIOHOST | |
| 91.233.89.0/24 - PE Ivanova Yuliya Geraldovna | |
| 92.63.96.0/21 - TheFirst-RU clients | |
| 92.63.104.0/22 - TheFirst-RU clients | |
| 95.215.140.0/22 - Lekus | |
| 176.103.248.0/21 | |
| 188.120.224.0/20 - TheFirst-RU clients | |
| 188.120.240.0/21 - TheFirst-RU clients | |
| 188.190.124.0/22 - Infium LLC | |
| 193.0.146.0/23 - Freestyle Ltd | |
| 193.28.144.0/24 - Adroit | |
| 193.104.110.0/24 - Software Service Prague s.r.o. | |
| 193.106.31.0/24 - Infium LLC | |
| 193.203.48.0/22 - PE Ivanov Vitaliy Sergeevich | |
| 194.1.184.0/24 - DreamHosting | |
| 194.29.185.0/24 - V.A.N. Kereskedelmi es Szolgaltato Beteti Tarsasag | |
| 194.126.251.0/24 - PE Plehanov Sergey Sergeevich | |
| 194.242.2.0/23 - Stilcom Ltd | |
| 195.34.78.0/23 | |
| 195.39.252.0/23 - RIPE Allocated | |
| 195.74.88.0/23 | |
| 195.78.108.0/23 - Global Routing | |
| 195.88.190.0/23 - Bigness group Ltd | |
| 195.226.220.0/24 |
WillPittenger just saw [palatnikov] ([email protected]): palatnikov in his channel (##baseball).
The IP has 3proxy running on the usual ports 1080 and 8080.
193.104.110.0/24: Software Service Prague s.r.o.
What's unusual about this is the fact that they've started to use Czech IPs. They appear to be growing.
Added those ranges, and some others @auscompgeek
Probably want to add 91.220.202.0/24 (Oliver Grup LLC) to the list as well.
20:39:24 --> | syntec ([email protected]) has joined ##ncss_challenge
20:49:27 <-- | syntec ([email protected]) has quit (Remote host closed the connection)
21:31:33 --> | cybertom ([email protected]) has joined #firefox
21:32:19 --> | cybertom ([email protected]) has joined ##ncss_challenge
21:33:59 -- | [cybertom] ([email protected]): cybertom
21:37:53 -- | [syntec] ([email protected]) was syntec
21:54:14 <-- | cybertom ([email protected]) has quit (Remote host closed the connection)
cybertom didn't respond to CTCP PING.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
After a quick Google search (akh.par site:domaintools.net), I also found 92.63.96.0/21, if my calculations are correct.
I've observed a few (I didn't look at many) of the Russian spybots from "TheFirst-RU" have a PTR record of akh.par, hence why I did this.