Sponsored by..

Monday 7 July 2008

Asprox domains: 7/7/08 and another SQL Injection mitigation article

Another batch of Asprox domains are active today - it also seems that those from 3rd July are still running too. I advise that you check your logs for these or block them:

  • adbtch.com
  • aladbnr.com
  • allocbn.mobi
  • adwadb.mobi
  • apidad.com
  • appdad.com
  • asodbr.com
  • asslad.com
  • blcadw.com
  • blockkd.com
  • bnradd.mobi
  • bnrbase.com
  • bnrbasead.com
  • bnrbtch.com
  • browsad.com
  • brsadd.com
  • canclvr.com
  • catdbw.mobi
  • clrbbd.com
  • dbgbron.com
  • ktrcom.com
  • loctenv.com
  • lokriet.com
  • mainadt.com
  • mainbvd.com
  • portadrd.com
  • portwbr.com
  • stiwdd.com
  • ucomddv.com
  • upcomd.com
If you're looking at ways of protecting your server against these SQL injection attacks, then Sophos has a blog entry called Avoiding SQL injection attacks which looks like a good starting point.

No comments: