nanog mailing list archives
Re: Operation Ghost Click
From: Andrew Fried <andrew.fried () gmail com>
Date: Thu, 26 Apr 2012 17:56:01 -0400
I suggest you reach out to Shadowserver or Team Cymru if you're a netblock owner. They can provide daily reports of infected IPs. Andy Andrew Fried andrew.fried () gmail com On 4/26/12 5:50 PM, Leigh Porter wrote:
On 26 Apr 2012, at 22:47, "Andrew Latham" <lathama () gmail com<mailto:lathama () gmail com>> wrote: On Thu, Apr 26, 2012 at 5:38 PM, Jeroen van Aart <jeroen () mompl net<mailto:jeroen () mompl net>> wrote: Yes its a major problem for the users unknowingly infected. To them it will look like their Internet connection is down. Expect ISPs to field lots of support s Is there a list of these temporary servers so I can see what customers are using them (indicating infection) and head off a support call with some contact? -- Leigh ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________
Current thread:
- Operation Ghost Click Jeroen van Aart (Apr 26)
- Re: Operation Ghost Click Andrew Latham (Apr 26)
- Re: Operation Ghost Click Leigh Porter (Apr 26)
- Re: Operation Ghost Click Andrew Fried (Apr 26)
- Re: Operation Ghost Click Kyle Creyts (Apr 26)
- Re: Operation Ghost Click Andrew Latham (Apr 26)
- Re: Operation Ghost Click Kyle Creyts (Apr 26)
- Re: Operation Ghost Click Sam Tetherow (Apr 27)
- Re: Operation Ghost Click Leigh Porter (Apr 26)
- Re: Operation Ghost Click Andrew Latham (Apr 26)
- Re: Operation Ghost Click Paul Graydon (Apr 26)
- RE: Operation Ghost Click Frank Bulk (Apr 26)
- Re: Operation Ghost Click Jeff Kell (Apr 26)
- RE: Operation Ghost Click O'Reirdan, Michael (Apr 27)
- Re: Operation Ghost Click Jeroen van Aart (Apr 27)
- Re: Operation Ghost Click Ameen Pishdadi (Apr 27)