Dynamoo's Blog

It's been about a zillion years (well, OK it was 2017) when I last published a list of IPs belonging to 3NT Solutions LLP that you proba...

This spam (apparently from the Necurs botnet) promises much, but seems not to deliver. From:    Susanne@victimdomain.tld [Susanne@victi...

  [For the February 2021 version of this list, click here ] When I was investigating IOCs for the recent outbreak of BadRabbit ransomware I...

This fake fax leads to TrickBot which appears to be similar to the Dyre banking trojan that we saw a lot of last year.. From :    Admi...

So far this morning I've seen a handful of these malformed malware spams, claiming to be from a Ieuan James and with a subject of inv...

NOTE: An updated list of IPs can be found here (October 2017) Yesterday I blogged about a company called 3NT Solutions LLP apparentl...

Thanks to @Techhelplistcom for the heads up on this little mystery.. It all starts with a spam evil (described here ).. The link...

Some sites appear to have been hit by a sophisticated multi-part injection attack that triggers only once per IP (so difficult to track do...

Something evil is lurking on 212.95.54.22 , a server belonging to black hat host inferno.name ( mentioned here before ). I've never...