3 ms·
Certain parts of the list of subnets avoided by Hajime strikes me as rather interesting... Some countries: - Ukraine; Region Vinnyts’ka Oblast’ /16 - Iran, I
by brodie78382 9y ago
Certain parts of the list of subnets avoided by Hajime strikes me as rather interesting...
Some countries:
- Ukraine; Region Vinnyts’ka Oblast’ /16
- Iran, Islamic Republic of; Region Tehran /16
- Germany Virtela Communications Inc Amsterdam, NL POP /16
- South Africa; Region Gauteng /16
Then:
- General Electric's /8
- both Hewlett-Packard's /8
- US Postal Service's /8
and finally all of the US Department of Defence (obviously)
I would have thought HP would be a goldmine seeing as they put anything and everything on public, proxied IP's. And why not avoid Xerox, Apple, and CIA subnets too while you're at it?
Krebs has a more detailed writeup on this for anyone interested in reading more: https://security.rapiditynetworks.com/publications/2016-10-16/hajime.pdf https://security.rapiditynetworks.com/publications/2016-10-1...