The following domains appear to be part of an ongoing injection attack. They are hosted by black-hat web host Specialist ISP in Transnistria. Block the IP range of 194.28.112.0 – 194.28.115.255 (194.28.112.0/22) is a very good idea as this is one of the worst netblocks I know of. aelis30greek.rr.nu aff29ili.rr.nu aljo73hnsto.rr.nu ambers00supplem.rr.nu ano98the.rr.nu appoin62tmentba.rr.nu asciia28rmcover.rr.nu […]
I haven’t seen much buzz about this injection attack yet, but several hundred thousand pages have been infected with an injection attack pointing to gbfhju.com/r.php. According to this Google search there are 236,000 hits for the search string “gbfhju.com/r.php”. The sites seem to be randomly distributed through the web, although I couldn’t spot any infected […]
Latest Comments