Category Infosec

Blacklist IP: 64.251.25.31

IP: 64.251.25.31

 Staff, sales, recruit, alias, office, samba, tomcat, webadmin, spam and virus. You failed!

Time:     Sat Jul 28 18:24:27 2012 -0400
IP:       64.251.25.31 (US/United States/31-25-251-64.serverpronto.com)
Failures: 10 (pop3d)
Interval: 300 seconds
Blocked:  Permanent Block

Log entries:

Jul 28 18:24:05 host dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<staff>, method=PLAIN, rip=64.251.25.31, lip=207.7.x.x
Jul 28 18:24:07 host dovecot: pop3-login: Disconnected (auth fa...

Read More

Countdown for those infected by DNSChanger malware – Tick Tock goes the clock!

Last November the FBI arrested six Estonian hackers in a raid called “Operation Ghost Click” and dismantled their cybercriminal enterprise.

In a nutshell: the hackers created some malware dubbed DNSChanger that had the ability to redirect infected computers to hacker servers controlled by the fraud ring, which then piped web ads to users, ultimately putting millions of dollars in the cybercriminals’ pockets...

Read More