There’s something evil on 194.219.29.139 [Forthnet SA, Athens], in this case it appears to related to the SpyEye trojan. In particular, a lot of traffic seems to be going to ce.ms sites, searching your logs for references to ce.ms/main.php might prove fruitful. All these following sites are malicious: 2fdf2asolhost.cx.cc 3lshegijlsjelsf.ce.ms 3rdkjhgtuhryt67.ce.ms 75pe.be.ma aficaekooy.qpoe.com anupadwxst.x24hr.com arumakhbyu.ygto.com […]
Latest Comments