Re: Re: can scan, but not test

Dick Wesseling <[email protected]> Tue, 12 Apr 2005 16:46:23 +0200
Newsgroups gmane.mail.spam.dsbl.general
Message-ID <[email protected]>
I am still having trouble with proxies that can be scanned but not 
tested. To refresh your memory, here is what I wrote in october:

> I noticed an interesting phenomenon that I am unable to explain,
> maybe this is familiar to some of you. The phenomenon is that I can
> portscan certain proxies (all of the same spam gang) but I cannot
> test them. That is, my scanner send a syn and receives ack+syn, but
> when using proxycheck on that port, the packet flow is  s:syn,
> r:ack+syn, s:data, r:RST. This happens with several hosts on my /27.

> The interesting thing is that if I run proxycheck from a couple of
> hosts on another network it always works....

Could you guys do me a favor and run the following list through 
proxycheck and let me know how many open proxies it reports? I expect 
either +- 20-30 or 0.


83.196.194.94:s4:10099 \
83.29.136.99:s4:10099 \
84.99.33.47:s4:10099 \
84.154.207.197:s4:10099 \
83.130.164.22:s4:10099 \
83.30.220.23:s4:10099 \
83.102.235.80:s4:10099 \
82.255.51.53:s4:10099 \
81.1.101.218:s4:10099 \
82.55.129.41:s4:10099 \
80.118.241.190:s4:10099 \
85.64.115.75:s4:10099 \
81.192.196.100:s4:10099 \
68.234.156.205:s4:10099 \
85.97.51.118:s4:10099 \
67.10.242.205:s4:10099 \
66.60.33.95:s4:10099 \
65.248.80.158:s4:10099 \
69.3.130.85:s4:10099 \
70.216.183.120:s4:10099 \
66.50.29.161:s4:10099 \
81.218.50.241:s4:10099 \
68.239.133.251:s4:10099 \
213.35.250.108:s4:10099 \
217.132.33.239:s4:10099 \
213.252.79.163:s4:10099 \
61.17.116.238:s4:10099 \
60.49.47.163:s4:10099 \
212.194.131.43:s4:10099 \
62.215.63.190:s4:10099 \
201.19.233.48:s4:10099 \
60.48.194.252:s4:10099 \
195.23.251.38:s4:10099 \
201.255.7.84:s4:10099 \
130.75.48.21:s4:10099 \
194.158.77.163:s4:10099 \
162.40.24.187:s4:10099 \
219.65.245.242:s4:10099 \
200.40.218.18:s4:10099 \
213.16.147.55:s4:10099 \
151.44.24.63:s4:10099 \
217.97.70.16:s4:10099 \
201.254.35.105:s4:10099 \
193.250.137.71:s4:10099 \
201.8.186.230:s4:10099



----------------------------------------------
This message was sent to the opt-in DSBL list.
If you do not want to receive DSBL messages,
please send mail to [email protected].