11 Jan 15, 03:08PM
(08 Jan 15, 07:37PM)Federico. Wrote:[SELECT ALL] Code://Name: NCKwannabe
//Date: 08.01.2015
//Reason: OPK
I have him from 86.89.110.x
http://waka.waka.ac/demos/NCKwannabe/
He was on Cassini so I'm waiting for f0r3v3r to grep him and get a full address, though it seems we're dealing with a highly variable one. This address, KPN/planet.nl appears to be a direct ISP, but ...
217.41.27.x = a different ISP, BT (UK)
82.34.188.x = Telewest Broadband (UK)
85.69.232.x = numericable.fr (another ISP, now France)
So I'm not seeing a VPN/proxy yet, but somehow he has access through rather separated ISPs, maybe botnetting?