Controversial Russian Business Network drops offline
'Bulletproof' host struck down. For now
Russian Business Network (RBN) - the Controversial hosting firm fingered by many as a nexus of malware exploits and cybercrime more generally - has suddenly dropped offline.
Trend Micro reports that the infamous network dropped off the net at around 0200 GMT on Wednesday, possibly after its upstream service providers pulled its connectivity. "Since then, IP addresses of RBN can no longer be reached because there is no routing for them any longer," Trend notes.
RBN is notorious for hosting multiple instances of malware and web browser exploits. More recently it was fingered as the source of exploits based on a vulnerability in Adobe's Acrobat Reader. Its so-called "bulletproof hosting" facilities are also suspected of harbouring child pornography and phishing sites.
The disappearance of RBN makes the internet a safer place, at least for now. Trend cautions that the respite may be temporary. "RBN may find new upstream providers. In recent weeks, moreover, Trend Micro has seen equivalents of RBN pop up in Turkey and Taiwan," Trend Micro security researcher Feike Hacquebord notes. ®
Actually, I never thought of it so it's good to read it here :)
It downloads the "Spamhaus Don't Route Or Peer List" parses the IP addresses and adds them to the firewall.
You know, the guy who can understand what you wrote and what to do with it probably doesn't need to read it here in the first place.
Could someone translate that into English ?
This isn't a real hit for RBN...
Lets face it, they have more assigned IP's than just this one AS which doesn't get peered anymore.
AS40989 is gone, true:
Which gets rid of AS28866 (AkiMon), another of there networks, but what about AS41731/AS41173? They have a loads of ASN's, and simply blocking one range isn't going to really help.
This really isn't the last we will hear!