Spamhaus

Reboot your router! A new memo from the United States government now suggests it’s a prime target for hackers. Here’s what to do right now to stay secure: hubs.la/Q04fcxdw0

Over the past 48 hours there have been some very interesting developments... The "@chartercomms" announcements for 47.1.0.0/16 and 47.2.0.0/16 have disappeared, implicitly confirming that they were hijacked. The "@Orange" announcement for AS41128 has changed - the path is now: 90.98.0.0/15 AS41128 AS22541 AS29802 AS41128: @orange 🇫🇷 AS22541: MEGALINK S.R.L.🇧🇴 AS29802: @HIVELOCITY 🇺🇸 The entire network has relocated from Chicago to Dallas (likely to the Prime Dallas Campus DFW01 datacenter). Once more the inclusion of a South-American ISP appears completely unrealistic, with the traffic between the AS29802 router (de-cix[.]dfw[.]hivelocity[.]net) and the final destination seemingly within the Dallas datacenter. But there's more....⬇️

With a +338% ⬆️ increase, 🇨🇳 China-based telecoms provider “chinamobile[.]com” ranks #1 for hosting IP space associated with exploited devices, with 277,765 detections over the last 30 days. Detections on the Exploits Blocklist began rising on April 19th, with a sharp spike between April 23rd and April 24th, increasing by over 40,000 detections (from 71,377 to 111,514). 👉 spamhaus.org/reputation-sta… The network also currently has 14 Spamhaus Blocklist (SBL) listings for IPs under its responsibility. 👉 check.spamhaus.org/sbl/listings/c… #IPs #Exploits #Spamhaus #ReputationStatistics #ThreatIntel