Wednesday, 15 May 2013
Something evil on 184.95.51.123
Posted on 07:22 by Unknown
184.95.51.123 (Secured Servers LLC, US / Jolly Works Hosting, Philippines) appears to be trying to serve the Blackhole Exploit kit through an injection attack (for example). The payload appears to be 404ing when viewed in the automated tools I am using, but indications are that the malware on this site is still very much live.
The domains on this server belong to a legitimate company,
Subscribe to:
Post Comments (Atom)
0 comments:
Post a Comment