# # atlas_fastflux_30d # # ipv4 hash:ip ipset # # [ATLAS Fastflux] (https://atlas.arbor.net/summary/fastflux) # - Fast flux hosting is a technique where the nodes in a # botnet are used as the endpoints in a website hosting # scheme. The DNS records change frequently, often every few # minutes, to point to new bots. The actual nodes themselves # simply proxy the request back to the central hosting # location. This gives the botnet a robust hosting # infrastructure. Many different kinds of botnets use # fastflux DNS techniques, for malware hosting, for illegal # content hosting, for phishing site hosting, and other such # activities. These hosts are likely to be infected with some # form of malware. # # Maintainer : Arbor Networks # Maintainer URL : https://atlas.arbor.net/ # List source URL : https://atlas.arbor.net/summary/fastflux.csv # Source File Date: Mon Nov 21 00:51:53 UTC 2016 # # Category : attacks # Version : 145 # # This File Date : Mon Nov 21 06:52:03 UTC 2016 # Update Frequency: 1 day # Aggregation : 30 days # Entries : 51 unique IPs # # Full list analysis, including geolocation map, history, # retention policy, overlaps with other lists, etc. # available at: # # http://iplists.firehol.org/?ipset=atlas_fastflux_30d # # Generated by FireHOL's update-ipsets.sh # Processed with FireHOL's iprange # 23.5.103.195 23.7.121.130 23.38.185.55 23.44.51.48 23.46.249.160 23.52.85.181 23.64.63.59 23.194.67.97 52.216.0.186 52.216.0.202 52.216.1.42 52.216.1.130 52.216.2.2 52.216.2.34 52.216.2.50 52.216.17.10 52.216.17.18 52.216.64.186 52.216.66.50 52.216.66.58 52.216.80.10 52.216.80.18 52.216.80.178 52.216.192.26 52.216.225.2 52.216.225.186 52.216.226.106 54.231.11.114 54.231.33.201 54.231.33.209 54.231.49.106 54.231.73.57 54.231.82.73 54.231.88.1 54.231.88.9 54.231.114.26 54.231.114.233 54.231.120.17 69.192.221.161 104.72.34.75 104.84.127.11 104.95.23.99 104.95.61.235 104.96.218.15 104.102.61.194 104.106.249.50 104.117.41.133 104.118.204.134 172.230.100.98 184.31.199.36 184.86.71.66