Sponsored by..

Wednesday 17 September 2008

Asprox: mnicbre.ru, pkseio.ru and vtg43.ru

The domains used in the Asprox SQL Injection attacks have been stable for a few days now, but yesterday some new .ru domains appeared: mnicbre.ru, pkseio.ru and vtg43.ru. The domains are registered through NAUNET again with the following registation details:

domain: MNICBRE.RU
type: CORPORATE
nserver: ns2.mnicbre.ru. 75.181.3.122
nserver: ns3.mnicbre.ru. 68.197.137.239
nserver: ns1.mnicbre.ru. 76.240.151.177
state: REGISTERED, DELEGATED
person: Private Person
phone: +7 772 7727091
fax-no: +7 772 7727091
e-mail: retyi1111@yahoo.com
registrar: NAUNET-REG-RIPN
created: 2008.09.16
paid-till: 2009.09.16
source: TC-RIPN
The following domains have been active over the past 24 hours. Block these or check your logs for them (new ones are in bold):
  • 22net.ru
  • 64asp.ru
  • 92prt.ru
  • acr34.ru
  • asl39.ru
  • fst9.ru
  • mnicbre.ru
  • pkseio.ru
  • sel92.ru
  • vtg43.ru

No comments: