Gnutella blackhole
there is a script active on Gnutella that is an IP trap.
there are two files that show up, one named “how to download (search term).html”, the other named “(search term).mpg”
the IP supporting these files fall in the range of 194.228.211.200 to 194.228.211.207
194.228.211.204 is the most common. any others are downloads in the share folders of victims of this trap.
these IP’s belong to Jitka Vackova of Czechoslavakia.
if the name doesn’t ring a bell, he was a major force in busting HotLine and Napster servers. basically, he’s been getting rich writing scripts and tracers that automatically list pirating IP’s, selling the results to warez cops for top dollar.
so if you are still using Gnutella, do not download these files, unless you want your IP to be on a list he sells to RIAA. if you have downloaded them, find a new ISP immediately and hope it doesn’t haunt you.
feel free to pass this post along to other sites.
Filed under: Security - @ July 15, 2003 3:01 am