Monday 10 February 2014

81.4.106.132 / oochooch.com / 10qnbkh.xip.io

I don't like the look of this [urlquery], seems to be the payload site for some sort of injection attack. Might be worth blocklisting 81.4.106.132.




at

1 comment:

  1. PC.Tech10 February 2014 at 15:33

    Whatever it is, there's nasty stuff getting pumped out of there with today's date on it:
    - https://www.virustotal.com/en/ip-address/81.4.106.132/information/

    .

    ReplyDelete