Re: Help - a possible bot

From: Mally Mclane <mally(at)ripe.net>
Date: Mon Nov 18 2002 - 02:35:08 EST

>> 8  ACCESS,22:01:52,RuLaunch blocked from connecting to Internet
>> (216.49.88.100:HTTP)

>
> As far as the program being blocked, a google search for "RuLaunch" shows

indeed, the IP belongs to mcafee:

cow.ripe.net:mally:~ $ whois -h whois.arin.net 216.49.88.100

OrgName: Mcafee.Com
OrgID: MCAFEE-13

NetRange: 216.49.80.0 - 216.49.95.255
CIDR: 216.49.80.0/20
NetName: MCAF-BLK1
NetHandle: NET-216-49-80-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Assignment
NameServer: AUTHNSB.MCAFEE.COM
NameServer: AUTHNSC.MCAFEE.COM

If only companies would make it resolve too....

Cheers,

Mally Mclane
RIPE NCC - Operations

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Tue Nov 19 23:22:58 2002