[geeklog-spam] FYI: Russian Business Network - spammers and more

[Dirk Haun]

I've seen spam (lots of spam, actually) coming out of the IP ranges
belonging to "Russian Business Network" (now only "RBusiness Network")
before[1]. What I wasn't aware of, though, is that there's a connection
between these guys and the recent hacks of a lot of Italian webservers
that are now serving trojans via an IFrame exploit.

SANS has more information: <http://isc.sans.org/diary.html?storyid=3015>

In short: You really want to block the IP ranges
81.95.144.0-81.95.147.255 and 81.95.148.0-81.95.151.255 belonging to
that outfit.

bye, Dirk

[1] <http://spam.tinyweb.net/article.php/block-81.95.144.66>

-- 
http://spam.tinyweb.net/