The following IPs are related to the TDL/TDSS rootkit. 212.36.9.52 / gic-kbmtu0zkvwylf.com appears to be a C&C server. 94.63.149.10 94.63.149.11 94.63.149.12 94.63.149.13 94.63.149.14 94.63.149.15 146.185.250.140 146.185.250.141 195.3.145.251 195.3.145.252 195.3.145.253 212.36.9.52 94.63.149.0/24 is a Romanian host called Eurolan Solutions SRL, I’ve had this blocked for months with no ill-effects. 146.185.0.0/16 is Petersburg Internet Network Ltd in […]