Sponsored by..

Monday, 10 February 2014

81.4.106.132 / oochooch.com / 10qnbkh.xip.io

I don't like the look of this [urlquery], seems to be the payload site for some sort of injection attack. Might be worth blocklisting 81.4.106.132.




1 comment:

PC.Tech said...

Whatever it is, there's nasty stuff getting pumped out of there with today's date on it:
- https://www.virustotal.com/en/ip-address/81.4.106.132/information/

.