Bad Actors

[mightyglydd]

https://www.imdb.com/name/nm0001774/?ref_=ttfc_fc_cl_t4

[Frank Lion]

The point of this thread was to show...

Gene, Gene, the Dancing Machine?

https://www.youtube.com/watch?v=ACpNVD5GMUw

[Grumpus]

Barris was probably happiest in the south of France but who knows?

[mightyglydd]

https://www.youtube.com/watch?v=rDmlkuONeJk

[Grumpus]

154-6-31-64.static.reverse.lstn.net
64.31.0.0/18
64.31.6.152 - 64.31.6.155
64.31.0.210

CustName: Private Customer
Address: Private Residence
City: Moscow
StateProv: AG
PostalCode: 125040
Country: RU
RegDate: 2019-01-29
Updated: 2019-01-29
Ref: ##https://rdap.arin.net/registry/entity/C07286054
network:ID:LSN-BLK-64.31.0.0/18
network:Auth-Area:64.31.0.0/18
network:Network-Name:LSN-64.31.0.0/18
network:IP-Network:64.31.6.152/30
network:IP-Network-Block:64.31.6.152 - 64.31.6.155
network:Organization-Name:Petr Stepanets
network:Organization-City:Moscow

[Grumpus]

Looks like amazon has become a cover for the searchguide malware.
A recent trace "ec2-54-213-71-156.us-west-2.compute.amazonaws.com" leasds to anonymous "us-west-2.compute.amazonaws.com" which calls out as . . .
"root.amazonaws.com" which transaltes to "198.105.254.64." or the information from the Arin sources are no good at all.
"64.31.34.98" still anoying

[Grumpus]

"Highwinds Network Group, Inc." continuation of the Russian detritus.Arin listing shows Fastly in SF but this I believe is an error.
151.139.128.0/24
151.139.128.0 - 151.139.128.255
##ns1 and 2.hwng.net (69.16.132.8)