FYI...
Urgent Block: ionis90landsi -dot- rr -dot- nu
Mass Injection of WordPress Websites
-
http://www.malwaredo...rdpress/?p=2522
March 6th, 2012 - "Websense* has posted an article relating to mass SQL injection into wordpress sites. The domain is ionis90landsi. rr. nu (spaces added)..."
*
http://community.web...ress-sites.aspx
5 Mar 2012
___
-
http://google.com/sa...90landsi.rr.nu/
"... This site was hosted on 1 network(s) including AS48691 (SPECIALIST)..."
-
http://www.google.co...c?site=AS:48691
"... Over the past 90 days, we found 285 site(s) on this network... that appeared to function as intermediaries for the infection of
1016 other site(s)... We found 650 site(s)... that infected
8361 other site(s)..."
-
http://centralops.ne...ainDossier.aspx
inetnum: 194.28.112.0 - 194.28.115.255
descr: Specialist
country: MD
Information related to 194.28.112.0/22
origin: AS48691
___
-
https://blogs.msdn.c...c...&GroupKeys=
"... Also be aware that malware that connects using an IP address instead of a domain name
will -not- be blocked when you use just domain name lists..."
Edited by AplusWebMaster, 06 March 2012 - 04:08 PM.