Avast community forum
Home
Help
Search
Login
Register
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
DNS reply sinkhole alerted, blocked?
« previous
next »
Print
Pages: [
1
]
Go Down
Author
Topic: DNS reply sinkhole alerted, blocked? (Read 1641 times)
0 Members and 1 Guest are viewing this topic.
polonus
Avast Überevangelist
Probably Bot
Posts: 34067
malware fighter
DNS reply sinkhole alerted, blocked?
«
on:
February 17, 2014, 07:13:45 PM »
See:
http://urlquery.net/report.php?id=9485703
Malware long OVERDUE on IP:
http://support.clean-mx.de/clean-mx/viruses.php?id=19769961
The latter detected by avast! ->
https://www.virustotal.com/nl/file/f6aaa6cba0005e3eb73a8071194863f2dcd70f16a2763c56815a87d6410b3387/analysis/
See:
http://www.nictasoft.com/ace/ip-search/?ip=107.160.11.197
Host malware history:
https://www.virustotal.com/nl/ip-address/107.160.11.197/information/
See:
http://www.scumware.org/report/107.160.11.197.html
->
https://www.google.nl/interstitial?url=http://jinmayulecheng.sxclb.com/
->
https://www.google.com/safebrowsing/diagnostic?site=http://jinmayulecheng.sxclb.com/&hl=nl
High risk site:
http://app.webinspector.com/public/reports/show_history?id=19810812
Read on sinkhole:
http://krebsonsecurity.com/2013/01/polish-takedown-targets-virut-botnet/
(link author Brian Krebs)
Have a look:
http://hosts-file.net/?s=148.81.111.111&view=history
View:
http://kb.bothunter.net/ipInfo/nowait.php?IP=148.81.111.111
-> Malware scan and infect source!
polonus
«
Last Edit: February 17, 2014, 07:30:39 PM by polonus
»
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.
Use NoScript, a limited user account and a virtual machine and be safe(r)!
Print
Pages: [
1
]
Go Up
« previous
next »
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
DNS reply sinkhole alerted, blocked?