CMPak

An IP address registered in Pakistan to mobile operator CMPak, 223.123.126.197, has been flagged for distributing malware associated with the ua-wget user agent. The flagging carries a low confidence rating, but security practitioners are advised it may be worth blocking at the firewall level if the address appears in server logs. Administrators are encouraged to review their logs and share threat intelligence on suspicious traffic.