Gumblar: Farewell Japan - Securelist（情報元のブックマーク数）

（@v_avenger経由）

日本からの解析がすごくて、ガンブラー開発者が日本のIPアドレスからの通信に対して応答をしないようにしているとのこと。（LACさんのにも書いてたっけな）

Gumblar developers have noticed non-stop activity coming from many Japanese IPs targeting their system. The hard work analysing the threat and the active online data being harvested from Japan resulted in a response from the bad guys. Not so long ago we came across a new variant of the infector script created by the Gumblar developers which verifies where the remote client is coming from. The script uses a free IP-to-country database to locate the country of the client. And if the country turns out to be Japan, the script halts and doesn't attack. Below is the part of the code which implements it:

http://www.securelist.com/en/blog/2132/Gumblar_Farewell_Japan