Alliance and Leicester botnet

[Malware-Web-Threats]

Attached the scan result with hpObserver

ref:
http://hphosts.blogspot.com/2009/09/alert-alliance-and-leicester-botnet.html

[MysteryFCM]

Nice one, didn't know you'd added a slew more of them till I was updating the blog with a new domain, received in an e-mail a few mins ago

I've updated the blog with a pointer to here too, and will fire Gerhard a copy of them as they don't appear in Clean-MX yet. I've attached the hpObserver results (didn't see this thread until after I'd started processing them, so we'll be able to see if there are any new IP's).

[MysteryFCM]

I've added those that were missing (they're all valid as www.mybank.*, which weren't included).