DhiaLite

Suspicious .pl short lived subdomains - Nov 30, 2013

Nov 30th, 2013
218
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.31 KB | None | 0 0
  1. Sat, Nov 30 2013
  2. #DhiaLite - New Campaign of suspicious short lived .pl subdomains started resolving today to 37.220.15.11
  3.  
  4. Spike in traffic for these subdomains then they stop resolving.
  5.  
  6. EK to identify.
  7.  
  8. There are still a few subdomains on this IP which might indicate the campaign is still in its early stage.
  9.  
  10. These subdomains are registered under the Polish city 2LD
  11.  
  12. boleslawiec.pl
  13.  
  14. #Sample of subdomains on 37.220.15.11
  15.  
  16. welco.imagica-bs.boleslawiec.pl
  17. sunbu.mirbb.boleslawiec.pl
  18. space.regensburg.boleslawiec.pl
  19. skept.cursoinglesonline.boleslawiec.pl
  20. radio.imagica-bs.boleslawiec.pl
  21. pragu.cursoinglesonline.boleslawiec.pl
  22. pmai.regensburg.boleslawiec.pl
  23. pipsf.imagica-bs.boleslawiec.pl
  24. nuevo.reaplicante.boleslawiec.pl
  25. nestn.imagica-bs.boleslawiec.pl
  26. labad.imagica-bs.boleslawiec.pl
  27. kurab.regensburg.boleslawiec.pl
  28. kuhs.mirbb.boleslawiec.pl
  29. kobi2.reaplicante.boleslawiec.pl
  30. jungf.reaplicante.boleslawiec.pl
  31. gemir.cursoinglesonline.boleslawiec.pl
  32. flirt.cursoinglesonline.boleslawiec.pl
  33. easy4.americansworking.boleslawiec.pl
  34. diego.reaplicante.boleslawiec.pl
  35. debat.cursoinglesonline.boleslawiec.pl
  36. dcbox.autopilot101.boleslawiec.pl
  37. charl.regensburg.boleslawiec.pl
  38. blueb.mirbb.boleslawiec.pl
  39. blogt.mirbb.boleslawiec.pl
  40. bjosh.regensburg.boleslawiec.pl
  41. ambaf.cursoinglesonline.boleslawiec.pl
  42.  
  43. END
Add Comment
Please, Sign In to add comment