Tuesday, 23 April 2013
Something evil on 173.246.104.104
Posted on 08:33 by Unknown
173.246.104.104 (Gandi, US) popped up on my radar after a malvertising attack apparently utilising a hacked OpenX server (I'm not 100% which one so I won't name names) and leading to a payload on [donotclick]laserlipoplasticsurgeon.com/news/pint_excluded.php (report here).
Both VirusTotal and URLquery detect multiple malicious domains on this IP. It appears that the domains were originally
Subscribe to:
Post Comments (Atom)
0 comments:
Post a Comment