nycguy Posted May 27, 2016 ID:1042305 Share Posted May 27, 2016 This site was is being block http://www. mbastrategy. com and should not be. Link to post Share on other sites More sharing options...
Staff Zynthesist Posted May 27, 2016 Staff ID:1042307 Share Posted May 27, 2016 Hello, Can you please post the protection log. Thanks. Link to post Share on other sites More sharing options...
Aura Posted June 1, 2016 ID:1043266 Share Posted June 1, 2016 Block can be reproduced. Malicious Website Protection, IP, 78.46.60.131, 50164, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Link to post Share on other sites More sharing options...
Staff Zynthesist Posted June 1, 2016 Staff ID:1043272 Share Posted June 1, 2016 IP block for Dridex C&C Link to post Share on other sites More sharing options...
nycguy Posted June 2, 2016 Author ID:1043365 Share Posted June 2, 2016 They have this website too gogmat.com Also being block, I will let the people from the website contact you guys. Link to post Share on other sites More sharing options...
Evilksandr Posted June 2, 2016 ID:1043405 Share Posted June 2, 2016 I'm an administrator of server with IP 78.46.60.131. Let's look to dridex tracker /https://feodotracker .abuse .ch There we can see IP of my server (78.46.60.131) http://prntscr . com/bbgtaw But, please, pay attention to date of lastseen "2015-05-28 08:18:26" and current status "offline". We cured dridex more then year ago. Also by link in field "SBL" https://www. spamhaus .org/sbl/query/SBL257231 we can see "SBL257231 is not in the SBL. This may be because SBL257231 has been resolved and removed from the SBL." So, moderators, please double check information about current status of dridex on server 78.46.60.131 and 1) if dridex will be found send me please detailed report about that 2) if dridex will be NOT found - remove info " IP block for Dridex C&C " from your databases. Thank you for advance and waiting for updates. Link to post Share on other sites More sharing options...
Staff Zynthesist Posted June 2, 2016 Staff ID:1043406 Share Posted June 2, 2016 Block is being removed. Link to post Share on other sites More sharing options...
Recommended Posts