Check Website
Inclusion Status
It is currently Sat Oct 21, 2017 9:13 pm

All times are UTC




Post new topic Reply to topic  [ 774 posts ]  Go to page Previous  1 ... 68, 69, 70, 71, 72, 73, 74 ... 78  Next
Author Message
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Mon Sep 18, 2017 12:55 pm 
Offline
User avatar

Joined: Sun May 31, 2009 7:17 am
Posts: 98
Location: Phx. AZ
Forcen wrote:
Looks like there was some infection spread with ccleaner recently, looks it used some domains and IP's to do bad stuff. Might as well block them.

Here they are:

DGA Domains
ab6d54340c1a[.]com
aba9a949bc1d[.]com
ab2da3d400c20[.]com
ab3520430c23[.]com
ab1c403220c27[.]com
ab1abad1d0c2a[.]com
ab8cee60c2d[.]com
ab1145b758c30[.]com
ab890e964c34[.]com
ab3d685a0c37[.]com
ab70a139cc3a[.]com

IP Addresses
216[.]126[.]225[.]148

Here is the source of that list with more info: http://blog.talosintelligence.com/2017/ ... lware.html (don't block)
More info from piriform: https://www.piriform.com/news/blog/2017 ... dows-users (again, don't block)

EDIT: looks like the domains already are blocked, but not the IP address. Sould have checked the domains, sorry.

Thanks, we'll check them all out again.

_________________
Malwarebytes Web Research Labs Analyst
Malwarebytes


TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals


IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Mon Sep 18, 2017 8:42 pm 
Offline

Joined: Tue Aug 16, 2016 12:49 pm
Posts: 141
obfzvk.sk
obfzvk.sk/administrator/templates/bluestork/images/system/sitemap.html

Canadian Pharmacy is an illegal Pharmacy Operated/Promoted by Criminals)



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Tue Sep 19, 2017 8:09 am 
Offline

Joined: Wed Oct 21, 2015 5:46 pm
Posts: 165
Thanks a bunch for the links Mandrake09! :)



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Tue Sep 19, 2017 9:28 am 
Offline

Joined: Tue Aug 16, 2016 12:49 pm
Posts: 141
yjmzg.net
xiqishop.com
xiqishop.com/wp-content/themes/plain-wp/library/classes/sitemap.html
yjmzg.net/wp-content/themes/restaurantz/inc/hook/sitemap.html

Canadian Pharmacy is an illegal Pharmacy Operated/Promoted by Criminals)



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Tue Sep 19, 2017 1:50 pm 
Offline
User avatar

Joined: Sun May 31, 2009 7:17 am
Posts: 98
Location: Phx. AZ
Mandrake09 wrote:
yjmzg.net
xiqishop.com
xiqishop.com/wp-content/themes/plain-wp/library/classes/sitemap.html
yjmzg.net/wp-content/themes/restaurantz/inc/hook/sitemap.html

Canadian Pharmacy is an illegal Pharmacy Operated/Promoted by Criminals)

Got 'em, thanks.

_________________
Malwarebytes Web Research Labs Analyst
Malwarebytes


TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals


IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Fri Sep 22, 2017 12:25 pm 
Offline

Joined: Tue Aug 16, 2016 12:49 pm
Posts: 141
uo38.cn



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Fri Sep 22, 2017 5:00 pm 
Offline

Joined: Tue Aug 16, 2016 12:49 pm
Posts: 141
rkckw.com



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sat Sep 23, 2017 3:20 pm 
Offline
User avatar

Joined: Sun May 31, 2009 7:17 am
Posts: 98
Location: Phx. AZ
Mandrake09 wrote:
rkckw.com

Go it thanks

_________________
Malwarebytes Web Research Labs Analyst
Malwarebytes


TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals


IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sat Sep 23, 2017 3:20 pm 
Offline
User avatar

Joined: Sun May 31, 2009 7:17 am
Posts: 98
Location: Phx. AZ
Mandrake09 wrote:
uo38.cn

Thx

_________________
Malwarebytes Web Research Labs Analyst
Malwarebytes


TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals


IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Mon Sep 25, 2017 12:37 pm 
Offline

Joined: Tue Aug 16, 2016 12:49 pm
Posts: 141
hxxp://dj71.cn/

EDITED live link



IP:
top
Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 774 posts ]  Go to page Previous  1 ... 68, 69, 70, 71, 72, 73, 74 ... 78  Next

All times are UTC


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
hpHosts and hpHosts Online are copyright © Malwarebytes Corp - All Rights Reserved

Powered by phpBB © 2000-2009 phpBB Group