[nsp-sec] fake av on AS10929 - NETELLIGENT

Niels Provos niels at google.com
Thu Jun 11 01:51:04 EDT 2009


Does anyone have contacts to AS10929 - NETELLIGENT?   All domains
below are suspected to be related to rogue AV products.   Data is for
the last 7 days.

Thanks,
 Niels.

AS10929 - NETELLIGENT
can

IPs
209.44.126.102
209.44.126.241
209.44.126.36
209.44.126.29
209.44.126.104
209.44.126.22
209.44.126.45
209.44.126.30
209.44.126.44
209.44.126.103

area4scan.info/
becomedsecurity.com/
besecurityguardian.com/
bestscanjet.com/
esafetyweb.com/
fine4scan.info/
freesecurityonline.com/
full4scan.info/
genscan4.com/
goautoscan.com/
gofinescan.com/
gofixscan.com/
gogenscan.com/
goscanatom.com/
goscanauto.com/
goscanfine.com/
goscanrank.com/
goscanwide.com/
goscanwork.com/
goscanzone.com/
gotipscan.com/
in4ck.com/
individualpeople.biz/
intoscan4.info/
joinsecuritytools.com/
keyscan4.info/
loadir.net/
meta4scan.info/
meta6scan.info/
note6scan.info/
originalsp.net/
ourbestsecurityshield.com/
pcoutsecurity.com/
prosecuritydevices.com/
safetyscanguide.com/
safetywww.com/
scan4area.info/
scan4full.info/
scan4goal.info/
scan4hard.info/
scan4port.info/
scan6gen.info/
scan6meta.info/
scanfan6.info/
scanone4.info/
scanpage4.info/
securetopshield.com/
securitybyweb.com/
thefirstupper.com/
thetrueshiledsecurity.com/
toperguardianpc.com/
topsvirusdefender.com/
tulsecureinfo.com/
virtualinternetsecurity.com/
wifisecurityscan.com/
xsecuredscan.com/
yoursecuredpc.com/
yoursecuritydisability.com/



More information about the nsp-security mailing list