Ecatel

hpHosts: "Crimeware friendly ISP's: Ecatel (AS29073)"

A fresh posting today about Ecatel's crimeware friendly hosting:
http://hphosts.blogspot.com/2009/11/crimeware-friendly-isps-ecatel-as29073.html

There is probably a lot of people wondering why Ecatel is still up and running.
I've been wondering about it for a long time. (internal link).

antivirus-fast-scan04.com - rogue antivirus

Virustotal a few moments ago: Result: 1/41 (2.44%). Comodo is the one recognizing it.

A dig for antivirus-fast-scan04. com shows right now:

antivirus-fast-scan04.com. 1900 IN      A       94.102.51.26
antivirus-fast-scan04.com. 1900 IN      A       78.46.251.43
antivirus-fast-scan04.com. 1900 IN      A       88.198.107.25
antivirus-fast-scan04.com. 1900 IN      A       88.198.120.177
antivirus-fast-scan04.com. 1900 IN      A       91.212.107.5
antivirus-fast-scan04.com. 1900 IN      A       91.212.127.200

From the top:
94.102.51.26: Ecatel

McColo down, where are the cockroaches now?

The child abusers

I earlier mentioned that one of the processors for the child abusers, pay.aspire-systems.biz, went from McColo to Ecatel in the Netherlands (89.248.168.80).
Another cockroach, flashbill.net ran to Ucraine after McColos nosedive. Now lives at 193.34.168.111, something called "Cyborg", LTD "VPS.COM.UA" or whatever.

To find out where all or most of them went would be too timeconsuming to find out. But now and then something will occasionally show up.

Syndicate content