hs.3-151.zlkon.lv -(94.247.3.151)

[SysAdMini]

Code: [Select]

casinoslotbet.cnhttp://wepawet.cs.ucsb.edu/view.php?hash=493c0f16f6eae3ae74370a4a3991a16d&t=1238100714&type=js

Code: [Select]

http://casinoslotbet.cn/cache/readme.pdfhttp://www.virustotal.com/analisis/b8ce1bf1381b07f64abea800d8f6e5b0 0/40

Code: [Select]

lotbetsite.cn/load.php?id=4http://www.virustotal.com/analisis/5e311f31e33578c93e57f5e6504521cf 17/40

[SysAdMini]

Code: [Select]

freeonlinehostguide.com/index.phphttp://wepawet.cs.ucsb.edu/view.php?hash=5802a3beabd9368daf35ad1eb4a995b3&t=1238099033&type=js

pdf exploit

Code: [Select]

freeonlinehostguide.com/cache/readme.pdfhttp://www.virustotal.com/analisis/86230dd2010ead6e92ae6b93fdbc2be2 0/40

Code: [Select]

http://zzz.free.hostindianet.com/load.php?id=4http://www.virustotal.com/analisis/65bac13aaf82cffdd84cf63bf64f0dbe 6/40

[SysAdMini]

Code: [Select]

liteautofinestsite.cn/load.php

Code: [Select]

hugetopnonfat.cn/load.php

Code: [Select]

sdfi.hostindianet.com/load.php

Code: [Select]

ghrgt.hostindianet.com/load.php

Code: [Select]

asdasdw.hostindianet.com/load.php

Code: [Select]

idiandemocratcy.hostindianet.com/load.php

Code: [Select]

zzz.hostindianet.com/load.php

Code: [Select]

zzzz.hostindianet.com/load.phphttp://www.virustotal.com/analisis/40bef383cf68d15f0971e58b9c81a99c

Code: [Select]

bigtopescorts.cn/load.php

Code: [Select]

educationbigtop.cn/load.php

Code: [Select]

asdasf.free.hostindianet.com/load.php

Code: [Select]

zzz.free.hostindianet.com/load.php

Code: [Select]

whois.hostindianet.com/load.php

Code: [Select]

turq.whois.hostindianet.com/load.php

Code: [Select]

default.whois.hostindianet.com/load.phphttp://www.virustotal.com/analisis/65bac13aaf82cffdd84cf63bf64f0dbe

[SysAdMini]

Code: [Select]

lieliteautobody.cn

Code: [Select]

lieliteautobody.cn/cache/readme.pdfhttp://www.virustotal.com/de/analisis/144db09111bd43c5199f13382af3ca58

Code: [Select]

[code]lieliteautobody.cn/load.php[/code]
http://www.virustotal.com/de/analisis/40bef383cf68d15f0971e58b9c81a99c

[MysteryFCM]

http://hosts-file.net/pest.asp?show=94.247.3.

[SysAdMini]

Code: [Select]

greatbethere.cnhttp://wepawet.cs.ucsb.edu/view.php?hash=666f614786902fd2352c0039e9dd2d04&t=1238102754&type=js

pdf exploit

Code: [Select]

greatbethere.cn/cache/readme.pdfhttp://www.virustotal.com/analisis/f38170514d07f671b0f9345a0314525c 0/40

Code: [Select]

http://greatbethere.cn/load.php?id=4http://www.virustotal.com/analisis/893c4ed46d09f4d1c43ae40fbdef2bf8

[SysAdMini]

Code: [Select]

freewebhostguide.comhttp://wepawet.cs.ucsb.edu/view.php?hash=d3b31aec68fbd623923819e6ab24827b&t=1238103048&type=js

Code: [Select]

freewebhostguide.com/cache/readme.pdfhttp://www.virustotal.com/analisis/144db09111bd43c5199f13382af3ca58

Code: [Select]

http://lieliteautobody.cn/load.php?id=4http://www.virustotal.com/analisis/40bef383cf68d15f0971e58b9c81a99c

[SysAdMini]

Code: [Select]

sadcwed.hostindianet.comhttp://wepawet.cs.ucsb.edu/view.php?hash=a42855fe1642b8ae577b7ae9e0a19c3f&t=1238104181&type=js

Code: [Select]

sadcwed.hostindianet.com/cache/readme.pdfhttp://www.virustotal.com/de/analisis/144db09111bd43c5199f13382af3ca58

Code: [Select]

http://lieliteautobody.cn/load.php?id=4http://www.virustotal.com/analisis/40bef383cf68d15f0971e58b9c81a99c

[SysAdMini]

Code: [Select]

farm-en-12san.hostindianet.com/cache/readme.pdfhttp://www.virustotal.com/analisis/329ae964d886aac2adb3f267da4d6e92

Code: [Select]

farm-en-12san.hostindianet.com/load.php?id=4http://www.virustotal.com/analisis/fdcfb0c9fea4179acff041866423e61c

[GmG]

Code: [Select]

http://mediahousenameshopfilm.cn/in.cgi?income28
http://liteautorepair.cn/index.php

http://wepawet.iseclab.org/view.php?hash=167120b68a639671373decc73a463dc2&t=1238586233&type=js

[CkreM]

Code: [Select]

http://mediahousenameshopfilm.cn/in.cgi?income28
http://liteautorepair.cn/index.php

http://wepawet.iseclab.org/view.php?hash=167120b68a639671373decc73a463dc2&t=1238586233&type=js

was just about to post 

Code: [Select]

http://liteautorepair.cn/index.php 

anyway heres another one:

Code: [Select]

yournonfatbest.cnhttp://wepawet.iseclab.org/view.php?hash=e89d7bf9986d2d0c646386ce37a66711&t=1238583254&type=js

[CkreM]

Another one:

Code: [Select]

Freehostinternet.comhttp://wepawet.iseclab.org/view.php?hash=854bf32e548e595bce3d53e0097c1898&t=1238587969&type=js

leads to another trojan on the same IP:

Code: [Select]

http://daddybigtop.cn/load.php?id=4http://www.virustotal.com/analisis/7c2d54062f6bef2a15f888f6e70dd371

[SysAdMini]

Code: [Select]

litedownloadfinest.cnhttp://wepawet.cs.ucsb.edu/view.php?hash=233e11cebbf860a6b689cd27b0a0cd92&t=1239013312&type=js

Code: [Select]

cache/readme.pdfhttp://www.virustotal.com/analisis/b0185c9501864e90120edb5cd42e607e 9/38

Code: [Select]

litedownloadfinest.cn/load.php?id=0http://www.virustotal.com/analisis/4b25552e0659179a22fec8cc6208ad57 5/38

[SysAdMini]

exploits/trojan

Code: [Select]

hyperliteautoservices.cn

Code: [Select]

hyperliteautoservices.cn/load.phphttp://www.virustotal.com/analisis/8327265e423bd2c7e19456119d389691 2/40

[SysAdMini]

Code: [Select]

litebest.cn/cache/readme.pdfhttp://wepawet.cs.ucsb.edu/view.php?hash=ecddc1a64b8f7538b1435126ba21e4b8&type=js
http://www.virustotal.com/analisis/556b3c9fe600e11a89a8e4e5d5e81f54 11/40