Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.advocacy > #353046

Re: done

From owl <owl@rooftop.invalid>
Newsgroups comp.os.linux.advocacy
Subject Re: done
Date 2016-05-01 15:58 +0000
Organization O.W.L.
Message-ID <fhjd0tka.f311@rooftop.invalid> (permalink)
References (8 earlier) <sandman-d7dfaf6a95d17ae66d77b17058e306b3@individual.net> <ghjdie993.ga@rooftop.invalid> <sandman-7271c4fad61d7b5e25b4868bf66da5e4@individual.net> <ghnvmfj939a.afju@rooftop.invalid> <sandman-2f3d08a25915707781db047bc35b4457@individual.net>

Show all headers | View raw


Sandman <mr@sandman.net> wrote:
> In article <ghnvmfj939a.afju@rooftop.invalid>, owl wrote:
> 
>> > > > Sandman:
>> > > > I got you beat:
>> > > 
>> > > > Applications/Shell>time ./ipdecode.sh
>> > > > c5fd5ec5996a00946001a1952cc5e09b
>> > > > c5fd5ec5996a00946001a1952cc5e09b:109.72.51.248
>> > > 
>> > > > real    0m51.322s
>> > > > user    13m11.226s
>> > > > sys     0m2.687s
>> > > 
>> > > owl:
>> > > That's impressive.  Can you do these?
>> > 
>> > > 73bc0032541f55c8e8b7366f126961f0
>> > > 1ab71f9efbdd66785a8ee9e31cf301e5
>> > 
>> > > One of them I know is an ipv4 address.  The other I don't know.
>> > 
>> > Sandman:
>> > 73bc0032541f55c8e8b7366f126961f0 = 10.0.128.33
>> 
>> > 1ab71f9efbdd66785a8ee9e31cf301e5 &#8776; 199.48.241.55, known TOR
>> > proxy by Snit.
>> 
>> What was the original string on that one?  It's not a hash
>> of just "199.48.241.55"
> 
> No, hence the "&#8776;".
> 
> The host "1ab71f9efbdd66785a8ee9e31cf301e5" has been used by:
> 
> - Edward Stansfield
> - Big Fish in a Small Crotch
> - Barry H
> - anonymous
> - mike antipasto
> - Nobody
> - Omar
> - Richard King
> - Richard Bone
> 

That is why I was interested in it.  I wanted to see if it
was from NY or AZ.  I thought it might be Snit trying to
mimic flatfish. 

But the IPs I check with one exception
seem to be from NY, so I'd say that's flatfish.

I see 3 ips in this range:
199.48.240.0/21
and 7 ips in this range:
128.90.0.0/16

BTW, check these:
e7bf437cfa09cdd792a3c3d89b745b28
899e353b8d35885fa3e36ce5e19fd017
same "From:", but we have crossover between the above two network ranges. 

> And going through them, "Barry H" has also used the host 
> "a90b6fea5f35669a90d5f0ef20a40366", which is 199.48.241.55.
> 
> You can use this page to search a bit:
> 
> <http://usenet.sandman.net/misc/eternal.php>?

Nice.  How far back does your data go?  I only have access back to
late Nov 2014.

> hash=1ab71f9efbdd66785a8ee9e31cf301e5>
> 
> <http://usenet.sandman.net/misc/eternal.php?name=Barry+H>
> 
> It's not so much about what the actual host is, we all know all the gym's above 
> are Snit sock puppets. :)
> 

Nah, I think it's flatfish.

Back to comp.os.linux.advocacy | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

done owl <owl@rooftop.invalid> - 2016-04-29 22:13 +0000
  Re: done John Gohde <john.h.gohde@gmail.com> - 2016-04-29 15:43 -0700
  Re: done DFS <nospam@dfs.com> - 2016-04-29 19:26 -0400
    Re: done owl <owl@rooftop.invalid> - 2016-04-30 03:50 +0000
      Re: done Melzzzzz <mel@zzzzz.com> - 2016-04-30 05:51 +0200
        Re: done owl <owl@rooftop.invalid> - 2016-04-30 03:55 +0000
          Re: done Melzzzzz <mel@zzzzz.com> - 2016-04-30 05:57 +0200
            Re: done owl <owl@rooftop.invalid> - 2016-04-30 04:04 +0000
              Re: done owl <owl@rooftop.invalid> - 2016-04-30 04:07 +0000
                Re: done Melzzzzz <mel@zzzzz.com> - 2016-04-30 06:08 +0200
                Re: done owl <owl@rooftop.invalid> - 2016-04-30 14:35 +0000
                Re: done Melzzzzz <mel@zzzzz.com> - 2016-04-30 17:20 +0200
                Re: done owl <owl@rooftop.invalid> - 2016-04-30 15:40 +0000
                Re: done Melzzzzz <mel@zzzzz.com> - 2016-04-30 18:11 +0200
                Re: done owl <owl@rooftop.invalid> - 2016-04-30 16:17 +0000
                Re: done owl <owl@rooftop.invalid> - 2016-04-30 17:23 +0000
                Re: done Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-05-01 00:56 +0200
                Re: done Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-05-01 01:30 +0200
                Re: done owl <owl@rooftop.invalid> - 2016-04-30 23:11 +0000
                Re: done Sandman <mr@sandman.net> - 2016-05-01 08:38 +0000
                Re: done owl <owl@rooftop.invalid> - 2016-05-01 15:58 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 11:59 -0700
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 12:00 -0700
                Re: done owl <owl@rooftop.invalid> - 2016-05-01 19:48 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 13:02 -0700
                Re: done Melzzzzz <mel@zzzzz.com> - 2016-05-01 22:04 +0200
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 13:41 -0700
                Re: done Steve Carroll <fretwizzer@gmail.com> - 2016-05-01 13:47 -0700
                Re: done Melzzzzz <mel@zzzzz.com> - 2016-05-02 02:21 +0200
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 18:34 -0700
                Re: done chrisv <chrisv@nospam.invalid> - 2016-05-02 08:27 -0500
                Re: done Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-05-02 15:54 +0200
                Re: done Steve Carroll <fretwizzer@gmail.com> - 2016-05-01 13:15 -0700
                Re: done owl <owl@rooftop.invalid> - 2016-05-01 20:16 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 13:38 -0700
                Re: done owl <owl@rooftop.invalid> - 2016-05-01 20:55 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 14:17 -0700
                Re: done owl <owl@rooftop.invalid> - 2016-05-01 21:35 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 14:47 -0700
                Re: done Marek Novotny <marek.novotny@marspolar.com> - 2016-05-01 14:56 -0700
                Re: done meat <meat.stretcher@linuxmail.org> - 2016-05-01 22:37 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 15:59 -0700
                Re: done owl <owl@rooftop.invalid> - 2016-05-01 23:10 +0000
                Re: done meat <meat.stretcher@linuxmail.org> - 2016-05-01 23:09 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 17:11 -0700
                Re: done owl <owl@rooftop.invalid> - 2016-05-02 00:27 +0000
                Re: done meat <meat.stretcher@linuxmail.org> - 2016-05-02 00:31 +0000
                Re: done owl <owl@rooftop.invalid> - 2016-05-02 00:52 +0000
                Re: done meat <meat.stretcher@linuxmail.org> - 2016-05-02 01:04 +0000
                Re: done owl <owl@rooftop.invalid> - 2016-05-02 01:47 +0000
                Re: done meat <meat.stretcher@linuxmail.org> - 2016-05-02 01:51 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 18:44 -0700
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 18:41 -0700
                Re: done Steve Carroll <fretwizzer@gmail.com> - 2016-05-01 19:43 -0700
                Re: done meat <meat.stretcher@linuxmail.org> - 2016-05-02 03:36 +0000
                Re: done Steve Carroll <fretwizzer@gmail.com> - 2016-05-01 21:14 -0700
                Re: done Steve Carroll <fretwizzer@gmail.com> - 2016-05-01 21:43 -0700
                Re: done Steve Carroll <fretwizzen@gmail.com> - 2016-05-01 22:25 -0700
                Re: done Steve Carroll <fretwizzen@gmail.com> - 2016-05-01 22:27 -0700
                Re: done ronb <ronb02NOSPAM@gmail.com> - 2016-05-02 17:45 +0000
                Re: done Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-05-02 20:16 +0200
                Re: done Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-05-02 20:46 +0200
                Re: done Steve Carroll <fretwizzer@gmail.com> - 2016-05-02 12:43 -0700
                Re: done meat <meat.stretcher@linuxmail.org> - 2016-05-02 20:55 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 18:32 -0700
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 18:38 -0700
                Re: done owl <owl@rooftop.invalid> - 2016-05-02 01:48 +0000
                Re: done meat <meat.stretcher@linuxmail.org> - 2016-05-02 01:49 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 19:18 -0700
                Re: done ronb <ronb02NOSPAM@gmail.com> - 2016-05-02 01:02 +0000
                Re: done meat <meat.stretcher@linuxmail.org> - 2016-05-02 01:10 +0000
                Re: done chrisv <chrisv@nospam.invalid> - 2016-05-02 08:31 -0500
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-02 07:27 -0700
                Re: done Steve Carroll <fretwizzer@gmail.com> - 2016-05-02 09:10 -0700
                Re: done Steve Carroll <fretwizzen@gmail.com> - 2016-05-02 10:45 -0700
                Re: done meat <meat.stretcher@linuxmail.org> - 2016-05-02 14:51 +0000
                Re: done Steve Carroll <fretwizzer@gmail.com> - 2016-05-02 11:18 -0700
                Re: done ronb <ronb02NOSPAM@gmail.com> - 2016-05-02 19:13 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 17:12 -0700
                Re: done owl <owl@rooftop.invalid> - 2016-05-02 00:27 +0000
                Re: done owl <owl@rooftop.invalid> - 2016-05-02 00:53 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 18:42 -0700
                Re: done owl <owl@rooftop.invalid> - 2016-05-02 01:50 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 19:17 -0700
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 18:40 -0700
                Re: done owl <owl@rooftop.invalid> - 2016-05-02 01:49 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 19:16 -0700
                Re: done ronb <ronb02NOSPAM@gmail.com> - 2016-05-02 01:02 +0000
                Re: done meat <meat.stretcher@linuxmail.org> - 2016-05-02 01:08 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 18:33 -0700
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 18:43 -0700
                Re: done William Poaster <wp@dev.null> - 2016-05-02 09:30 +0100
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 16:02 -0700
                Re: done Steve Carroll <fretwizzer@gmail.com> - 2016-05-01 20:36 -0700
                Re: done meat <meat.stretcher@linuxmail.org> - 2016-05-02 03:40 +0000
                Re: done Steve Carroll <fretwizzer@gmail.com> - 2016-05-01 21:14 -0700
                Re: done owl <owl@rooftop.invalid> - 2016-05-01 21:58 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 15:32 -0700
                Re: done owl <owl@rooftop.invalid> - 2016-05-01 22:37 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 15:55 -0700
                Re: done owl <owl@rooftop.invalid> - 2016-05-01 23:00 +0000
                Re: done owl <owl@rooftop.invalid> - 2016-05-01 23:33 +0000
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 17:13 -0700
                Re: done Snit <usenet@gallopinginsanity.com> - 2016-05-01 12:01 -0700
          Re: done DFS <nospam@dfs.com> - 2016-04-29 23:58 -0400
            Re: done owl <owl@rooftop.invalid> - 2016-04-30 04:08 +0000
              Re: done Melzzzzz <mel@zzzzz.com> - 2016-04-30 13:12 +0200
                Re: done Melzzzzz <mel@zzzzz.com> - 2016-04-30 14:09 +0200
              Re: done DFS <nospam@dfs.com> - 2016-04-30 10:02 -0400
                Re: done owl <owl@rooftop.invalid> - 2016-04-30 15:05 +0000
                Re: done DFS <nospam@dfs.com> - 2016-04-30 11:19 -0400
                Re: done owl <owl@rooftop.invalid> - 2016-04-30 15:41 +0000
                Re: done DFS <nospam@dfs.com> - 2016-04-30 13:19 -0400
                Re: done Chris Ahlstrom <OFeem1987@teleworm.us> - 2016-04-30 13:54 -0400
                Re: done DFS <nospam@dfs.com> - 2016-04-30 19:36 -0400
              Re: done Steve Carroll <fretwizzer@gmail.com> - 2016-04-30 07:33 -0700

csiph-web