DKG32 Posted July 16 ID:1577892 Share Posted July 16 Domain: hxxps://mirror.serverius.net/ IP: 91.221.69.39 MB Classification: Trojan This domain is used to host & serve repos for several Linux based systems with the apt package manager. Malwarebytes blocks access to this domain, so NAT connected Linux virtual machines on the Windows host running MB are unable to retrieve updates. Visiting the domain via a browser will show which vendors host their repos on. " Could not connect to mirror.serverius.net:80 (127.113.0.8). - connect (111: Connection refused) Cannot initiate the connection to mirror.serverius.net:80 (2001:db8::113:3). - connect (101: Network is unreachable)" Malwarebytes: -Software Information- Version: 4.5.33.272 Components Version: 1.0.2069 Update Package Version: 1.0.72505 Thanks! Link to post Share on other sites More sharing options...
Staff Dashke Posted July 17 Staff ID:1577961 Share Posted July 17 Hi, DKG32, This is a valid block, we have a detection on this mirror as it is a host to several malicious packages - Link to post Share on other sites More sharing options...
DKG32 Posted July 17 Author ID:1578017 Share Posted July 17 How does this block protect an end user? This domain and IP will never connect to a potential victim end user. Malwarebytes is effectively blocking the download of Kali ISOs/VMs etc (hxxps://www.kali.org/get-kali/) It doesn't make any sense to block that download. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now