[nsp-sec] 72.55.133.149

Wed May 5 11:27:36 EDT 2010

Can anyone (incl Team Cymru) comment on what they are seeing regarding these entries in the rsv2 and dnsrr lists?

32613 | IWEB-AS - iWeb Technologies Inc. | 72.55.133.149   | tcp  | 6667  | 2010-04-27 22:51:50 | 2010-05-05 22:51:50 | bot | 0 | 1 | ID: Pucioasa.RO.EU.Undernet.ORG

fedora.unixcod.com                       BOTNET  A      72.55.133.149                       32613  2010-04-26 02:31:49  STALE   TCP 6667

The host is a webhosting platform, and there is legitimate content hosted at the IP. I want to make sure it is a definite source of badness.

Thanks,

Chris
TELUS - AS852