The BBB spam is doing the rounds yet again, this time leading to a malicious payload at wonderfulyard.com/main.php?page=111d937ec38dd17e hosted on 81.17.140.161 (Velton.telecom, Ukraine).
Blocking access to that IP address is probably a good idea, I can’t vouch for the /24 that it is in though, but you may want to block that too to be on the safe side.
Leave a reply
