[nsp-sec] Intercage && UkrTeleGroup and DNS

[Kurt Jaeger]

Hi!

We have some customer PC, infected and sending DNS queries
no longer to some local DNS server but to 85.255.112.90 (UkrTeleGroup) and
216.255.184.150 (Intercage).

And those sites answer. So the big disconnect was not *that* sucessful
and I need to filter those ranges now... ?

Any other idea ?

-- 
MfG/Best regards, Kurt Jaeger                                  11 years to go !
Dr.-Ing. Nepustil & Co. GmbH  fon +49 7123 93006-0  pi at nepustil.net  
Rathausstr. 3                 fax +49 7123 93006-99
72658 Bempflingen             mob +49 171 3101372