[nsp-sec] ACK. Re: spyeye infected drones

[Taka Mizuguchi]

ACK for Japanese ISPs.

  2497
  2510
  2514
  2516
  2518
  2519
  2527
  2687
  2907
  2914
  4713
  4725
  7509
  9354
  9600
  9609
  9617
  9621
 10013
 10026
 17506
 17511
 17529
 17676
 17677
 17951
 18126
 23629
 23808
 24271
 38628


Dirk Stander wrote,on 11/03/17 23:18:
> ----------- nsp-security Confidential --------
> 
> 
> 
> 
> Hi Teams,
> 
> please find attached a list of drones, which contacted one of the
> domains mentioned here:
> http://ddanchev.blogspot.com/2011/03/more-spamvertised-dhl-notifications.html
> 
> The drones are using a unique User-Agent string, "Opera/10.80 Pesto/2.2.30"
> 
> The format of the list is:
> ASN | IP | CC | date first seen
> 
>      kind regards, Dirk Stander (1&1 Internet AG) :.
> 
> 
> 
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security counter-measures.
> _______________________________________________


-- 
Taka Mizuguchi