Russian Anal Probing + Malware

Mon Jun 24 16:38:25 UTC 2019

I chuckle the most at the original twitter post from Greynoise :

"We have revoked the benign tag for OpenPortStats[.]com"

Did anyone actually think such a thing would be legitimate to start with?
:)

On Mon, Jun 24, 2019 at 12:26 AM Hank Nussbacher <hank at efes.iucc.ac.il>
wrote:

> On 24/06/2019 00:23, Randy Bush wrote:
> > e.g. i am aware of researchers scanning to see patching spread and
> > trying to make a conext paper dreadline this week or infocom next month.
> >
> > hard to tell the sheep from the goats and the wolf from the sheep.  i
> > get the appended.  sheep or wholf?  i sure do not claim to be smart
> > enough to know.  but i sure am glad others are </snark>.
> Greynoise can be your friend:
> https://greynoise.io/about
> https://viz.greynoise.io/table
>
> -Hank
>
> >
> > randy
> >
> > ---
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20190624/caf6fa82/attachment.html>