Author Topic: I propose 94.63.241.155 for blocklist  (Read 3313 times)

0 Members and 1 Guest are viewing this topic.

January 12, 2011, 09:20:08 pm
Read 3313 times

Seedler

  • Newbie

  • Offline
  • *

  • 4
94.63.241.155 appears to be associated with CryptMEN:

The Host header on the request was the IP and this was in the response:

Content-Disposition: attachment; filename="inst.exe"

94.63.241.151 is already on the AMaDa blocklist (http://amada.abuse.ch/blocklist.php?download=ipblocklist) and it is in the same netblock (which is registered to a RO address....).

-Seedler

January 12, 2011, 11:30:39 pm
Reply #1

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
94.63.241.155 appears to be associated with CryptMEN:

The Host header on the request was the IP and this was in the response:

Content-Disposition: attachment; filename="inst.exe"

94.63.241.151 is already on the AMaDa blocklist (http://amada.abuse.ch/blocklist.php?download=ipblocklist) and it is in the same netblock (which is registered to a RO address....).

-Seedler

If you can provide complete urls of currently active malware then I will add them to our database.
Ruining the bad guy's day