Showing posts with label Simply Transit. Show all posts
Showing posts with label Simply Transit. Show all posts
Wednesday, 2 April 2014

Something evil on 213.229.69.41

›
This tweet by Malmouse got me investigating what was happening on 213.229.69.41 .. and the answer is that it appears to be unmitigated ba...
Friday, 15 November 2013

Malware sites to block 15/11/2013 (Caphaw)

›
Thanks to a tip to investigate 199.68.199.178 I discovered that the Caphaw network I looked at yesterday is much bigger than I thought. T...
Tuesday, 18 June 2013

Something phishy on 92.48.75.214

›
A couple of phishing sites 92.48.75.214 (Simply Transit, UK): linkedlne.com - LinkedIn / Webmail Phish This laughable fake LinkedIn l...
Thursday, 18 April 2013

Malware sites to block 18/4/13, revisited

›
Quite late last night I posted some malicious IP address that I recommend blocking. I've had a chance to look at these more deeply, a...
Monday, 4 February 2013

StumbleUpon spam / drugstorepillstablets.ru

›
This fake StumbleUpon spam is something new, it leads to a fake pharma site on drugstorepillstablets.ru : Date:      Mon, 4 Feb 2013 01...
Monday, 28 January 2013

Zbot sites to block 28/1/13

›
These domains and IPs are currently acting as C&C and distribution servers for Zbot. I would advise blocking these IPs and domains if ...
1 comment:
Friday, 23 November 2012

Malware sites to block 23/11/12

›
This bunch of IPs and domains are being used in a series of fairly well-targeted attacks involving malicious spam messages that look like ...
Monday, 5 November 2012

Fake statistics domains lead to malware

›
The following fake "statistics" domains lead to malware. All have been registered very recently in the past few days and are use...