Due to massive and repeated botnet hosting, as well as the fact that hostway provides bulletproof hosting to botnet operators by ignoring abuse reports sent by Spamhaus and 3rd parties, we consider their network as harmful and risky for our users. As a result, we advise our users to not accept network traffic from hostway.ru’s IP space.
Date: 2021-10-26
To: abuse@hostway.ru,dl@hostway.ru
Subject: SBL Notify: IP: 193.56.146.64 added to Spamhaus Botnet Controller List (BCL)
Date: 2021-11-02
To: abuse@hostway.ru,dl@hostway.ru
Subject: [Spamhaus] REMINDER: RedLineStealer botnet controller at 193.56.146.64 (SBL535139)
Date: 2021-11-05
To: abuse@hostway.ru,dl@hostway.ru
Subject: [Spamhaus] FINAL REMINDER: RedLineStealer botnet controller at 193.56.146.64 (SBL535139)
_____________________________________________________
AS number: 207566
AS name: HOSTWAY-AS, RU
Prefixes:
91.241.19.0/24 4608 7575 6762 31500 207566
193.32.164.0/22 4608 7575 6762 31500 207566
193.56.146.0/24 4608 4826 6939 207566
CIDR report:
https://www.cidr-report.org/cgi-bin/as-report?as=AS207566
_____________________________________________________
SBL536791
193.56.146.133/32 hostway.ru
18-Nov-2021 08:48 GMT
Malware botnet controller @193.56.146.133
SBL536385
193.56.146.158/32 hostway.ru
13-Nov-2021 08:09 GMT
Amadey botnet controller @193.56.146.158
SBL536381
193.56.146.36/32 hostway.ru
13-Nov-2021 08:04 GMT
Malware distribution @193.56.146.36
SBL536379
193.56.146.0/24 hostway.ru
13-Nov-2021 07:59 GMT
Dirty network: Janeiro LLC
SBL535451
193.56.146.214/32 hostway.ru
31-Oct-2021 07:32 GMT
RaccoonStealer botnet controller @193.56.146.214
SBL535427
193.56.146.244/32 hostway.ru
30-Oct-2021 21:44 GMT
Tofsee botnet controller @193.56.146.244
SBL535363
193.56.146.130/32 hostway.ru
29-Oct-2021 10:16 GMT
Carding fraud site/forums: fe-acc18.ru (DNS)
SBL535360
193.56.146.237/32 hostway.ru
29-Oct-2021 07:33 GMT
Carding fraud site/forum: infodig.is (InfoDIG.sx InfoDIG.ch InfoDIG.domains infodig.mn)
SBL535139
193.56.146.64/32 hostway.ru
26-Oct-2021 12:23 GMT
RedLineStealer botnet controller @193.56.146.64
SBL535059
193.56.146.110/32 hostway.ru
25-Oct-2021 08:14 GMT
Carding fraud site/forums: fe-acc18.ru