Monday, 9 September 2013
Malware sites to block 9/9/13, part II
Posted on 07:35 by Unknown
Another set of IPs and domains related to this attack detailed by Sophos, and overlapping slightly with the malicious servers documented here.
I've just listed the main domains, but the attack itself uses thousands of subdomains (e.g. zwgaf72d4erv7g.www5.tohk5ja.cc) to do evil things.
46.20.36.9 (Syslayer.com, Germany)
74.63.229.252 (Limestone Networks / 123systems Solutions, US)
Subscribe to:
Post Comments (Atom)
0 comments:
Post a Comment