The domains used in the Asprox SQL Injection attacks have been stable for a few days now, but yesterday some new .ru domains appeared: mnicbre.ru, pkseio.ru and vtg43.ru. The domains are registered through NAUNET again with the following registation details:
domain: MNICBRE.RU
type: CORPORATE
nserver: ns2.mnicbre.ru. 75.181.3.122
nserver: ns3.mnicbre.ru. 68.197.137.239
nserver: ns1.mnicbre.ru. 76.240.151.177
state: REGISTERED, DELEGATED
person: Private Person
phone: +7 772 7727091
fax-no: +7 772 7727091
e-mail: retyi1111@yahoo.com
registrar: NAUNET-REG-RIPN
created: 2008.09.16
paid-till: 2009.09.16
source: TC-RIPN
The following domains have been active over the past 24 hours. Block these or check your logs for them (new ones are in bold):
- 22net.ru
- 64asp.ru
- 92prt.ru
- acr34.ru
- asl39.ru
- fst9.ru
- mnicbre.ru
- pkseio.ru
- sel92.ru
- vtg43.ru
No comments:
Post a Comment