[prev in list] [next in list] [prev in thread] [next in thread] 

List:       emerging-sigs
Subject:    [Emerging-Sigs] zlob dl site
From:       pepperjack () afferentsecurity ! com (Jack Pepper)
Date:       2008-02-29 15:43:32
Message-ID: 20080229094332.4ggt3o6q2scswws8 () mail ! afferentsecurity ! com
[Download RAW message or body]

I found a machine that was zlob infected.  it was also doing this:

16:15:54.751245 IP 172.28.9.73.49459 > 217.170.77.150.80: P  
3901384107:3901384266(159) ack 1655509713 win 16425
	0x0000:  4500 00c7 1c70 4000 8006 011b ac1c 0949  E....p at ........I
	0x0010:  d9aa 4d96 c133 0050 e88a 65ab 62ad 12d1  ..M..3.P..e.b...
	0x0020:  5018 4029 9d97 0000 4745 5420 2f72 6564  P.@)....GET./red
	0x0030:  6972 6563 742d 7365 7474 696e 6773 2e70  irect-settings.p
	0x0040:  6870 3f73 6964 3d30 2670 6e3d 2673 6169  hp?sid=0&pn=&sai
	0x0050:  643d 3026 6169 643d 3026 7665 7273 696f  d=0&aid=0&versio
	0x0060:  6e3d 3020 4854 5450 2f31 2e31 0d0a 5573  n=0.HTTP/1.1..Us
	0x0070:  6572 2d41 6765 6e74 3a20 756e 6b6e 6f77  er-Agent:.unknow
	0x0080:  6e0d 0a41 6363 6570 743a 202a 2f2a 0d0a  n..Accept:.*/*..
	0x0090:  486f 7374 3a20 6469 7265 6374 6e61 6d65  Host:.directname
	0x00a0:  7365 7276 6963 652e 636f 6d0d 0a43 6f6e  service.com..Con
	0x00b0:  6e65 6374 696f 6e3a 204b 6565 702d 416c  nection:.Keep-Al
	0x00c0:  6976 650d 0a0d 0a                        ive....

We have a domain "directnameservice.com" that appears to change every  
few minutes, and we have a user agent "Unknown", and the php pulls  
down an interesting file of 650 domains.

In case the domain file moves, I have attached it for inclusion in bhdns.

jp

-- 

Framework?  I don't need no stinking framework!

----------------------------------------------------------------
@fferent Security Labs:  Isolate/Insulate/Innovate  
http://www.afferentsecurity.com

-------------- next part --------------
redirect-settings
version: 4
domain:9mmporn.com
domain:adult-xxx-world.com
domain:allhentaimovies.com
domain:allsexfiles.com
domain:americanthumbs.com
domain:animetgp.lookitnow.com
domain:aquatgp.com
domain:asiansexstation.com
domain:babe5.com
domain:bighands-club.com
domain:blackbootyjuice.com
domain:bootybone.com
domain:celebrities-a-z.com
domain:celebrity-tgp.com
domain:clickhere4hardcore.com
domain:dailymoviepost.com
domain:eljardinsecreto.com
domain:eutopiamovies.com
domain:fasteddiesclips.com
domain:fetishscreen.com
domain:findpornstar.com
domain:freematureporn.org
domain:freepetites.com
domain:freeporndivxs.com
domain:granny-series.com
domain:jesuslovesporn.net
domain:laylaj.com
domain:legs-fetish.com
domain:leslickers.com
domain:linxxxzone.com
domain:listasian.com
domain:lostbush.com
domain:mature.poonfarm.com
domain:matureguide.com
domain:movie-gallery-post.com
domain:movies.allwayslinks.com
domain:nude-art.net
domain:obscenethumbs.com
domain:onlinestars.net
domain:oosex.net
domain:pantgp.com
domain:pantyhose.hotpornindex.com
domain:pictures-free.org
domain:pornstarsmaster.com
domain:pornstarstgp.com
domain:quierobdsm.com
domain:sexbane.com
domain:sinful-bordello.top-sex.us
domain:strapontgp.com
domain:submit.asianxangels.com
domain:submit.thehun.net
domain:sweetypics.com
domain:teenfirsttimers.com
domain:tgp.comfortsex.com
domain:tgpsubmit.persiankitty.com
domain:thumbsgallerypost.com
domain:top-sex-movies.com
domain:ultratoon4you.com
domain:undergroundlinks.com
domain:wannashagg.com
domain:www.000x.us
domain:www.100freeteenseries.com
domain:www.101sexmovies.com
domain:www.101teengirls.com
domain:www.123latex4free.com
domain:www.150teengalleries.com
domain:www.181st.net
domain:www.19young.com
domain:www.1eyesex.com
domain:www.2xfree.com
domain:www.3pic.com
domain:www.3xmania.com
domain:www.4whw.com
domain:www.69pornoplace.com
domain:www.69style.com
domain:www.6tgp.com
domain:www.7feel.net
domain:www.8teenporn.com
domain:www.8teenxxx.com
domain:www.aaasexpictures.com
domain:www.absolute-grannies.com
domain:www.actual-porn.com
domain:www.adultbigmovies.com
domain:www.adult-clips.com
domain:www.adultmoviespad.com
domain:www.ahvids.com
domain:www.al4a.com
domain:www.alexmovies.com
domain:www.allasiangals.com
domain:www.allassgals.com
domain:www.allblackgals.com
domain:www.allblowjobgals.com
domain:www.allbusty.net
domain:www.allbuttgals.com
domain:www.allcelebmovies.com
domain:www.allebonygals.com
domain:www.allgangbanggals.com
domain:www.allgaygals.com
domain:www.allgirlsalley.com
domain:www.allgrannygals.com
domain:www.allhairygals.com
domain:www.allhandjobgals.com
domain:www.allhentaigals.com
domain:www.allhousewifegals.com
domain:www.allindiangals.com
domain:www.alllatinagals.com
domain:www.alllesbiangals.com
domain:www.allmaturegals.com
domain:www.all-nude-celebrities.net
domain:www.all-nude-celebs.net
domain:www.alloldgals.com
domain:www.allpartygals.com
domain:www.allplumpergals.com
domain:www.allpreggogals.com
domain:www.allshavedgals.com
domain:www.allshemalegals.com
domain:www.allsweetbabes.com
domain:www.allthechicks.com
domain:www.alltittygals.com
domain:www.alltrannygals.com
domain:www.allwayslinks.com
domain:www.allwifegals.com
domain:www.alphathumbs.com
domain:www.amandalist.com
domain:www.amandapics.com
domain:www.amateurabuse.com
domain:www.amateurporns.com
domain:www.amatgp.com
domain:www.ambushinterview.com
domain:www.amplandmovies.com
domain:www.amsterdamsexxx.com
domain:www.analx2.com
domain:www.andrewlinks.com
domain:www.angelslinks.com
domain:www.angelsspot.com
domain:www.animaltgp2.com
domain:www.anyvids.com
domain:www.aroundtheworldsex.com
domain:www.asian-eros.com
domain:www.asianladyboytgp.com
domain:www.asianpic.org
domain:www.asianporntgp.com
domain:www.asiansexyshemales.com
domain:www.asiansmaster.com
domain:www.asianzilla.com
domain:www.askjolene.com
domain:www.assfilled.com
domain:www.asspussy.com
domain:www.assuwish.com
domain:www.assuwish.nl
domain:www.auntpolly.com
domain:www.awesomeporn.com
domain:www.babeaddicts.com
domain:www.baberankings.com
domain:www.badassteens.com
domain:www.barely18movies.com
domain:www.bdsmbookmarks.com
domain:www.bdw-movies.com
domain:www.beastyhunt.com
domain:www.beastyporn.com
domain:www.bestfacialmovies.com
domain:www.bestxxxseries.com
domain:www.bgchicks.com
domain:www.bgthumbs.com
domain:www.bigbustymania.com
domain:www.bigtitpornstars.net
domain:www.bigtitscastle.com
domain:www.bigtitsgalleries.com
domain:www.bigtittygals.com
domain:www.bigvids.com
domain:www.bizarre-rituals.com
domain:www.blackgallery.com
domain:www.blackgirls.ws
domain:www.blackporno.net
domain:www.blacksmut.com
domain:www.blaxxxploitation.com
domain:www.bluecelebrities.com
domain:www.blue-kitty.com
domain:www.bluemoonporn.com
domain:www.bobsspot.com
domain:www.boneme.com
domain:www.bonerfuel.com
domain:www.boobbutler.net
domain:www.booblord.com
domain:www.boobslinks.com
domain:www.boobsmates.com
domain:www.boobware.com
domain:www.boobway.org
domain:www.book-mark.net
domain:www.bottomspanked.com
domain:www.bravsfreeporn.com
domain:www.brazilla.com
domain:www.brdteengal.com
domain:www.brutaltgp.com
domain:www.bukkakepool.com
domain:www.bulkmature.com
domain:www.bunnyteens.com
domain:www.busty-stars.net
domain:www.call-kelly.com
domain:www.candycoatedteens.com
domain:www.candylist.com
domain:www.cartoonella.com
domain:www.catlist.com
domain:www.celebbox.com
domain:www.celeb-cafe.net
domain:www.celebrities-collection.com
domain:www.celebritiesempire.com
domain:www.celebrityacademy.com
domain:www.celebritygalleriesfree.com
domain:www.celebsdb.com
domain:www.cherryasia.com
domain:www.chilidot.com
domain:www.chubbyland.com
domain:www.chubbyland.com
domain:www.chubbytgp.com
domain:www.cindymovies.com
domain:www.cleanmoviepost.com
domain:www.clean-porn-movies.com
domain:www.clubsexy.net
domain:www.coedcherry.com
domain:www.connysthumbs.com
domain:www.cowlist.com
domain:www.crazynakedchick.com
domain:www.creamasia.com
domain:www.cultofslavery.com
domain:www.cumshotplanet.com
domain:www.cunt4all.com
domain:www.cutemovies.com
domain:www.dailybasis.com
domain:www.dailypornmovies.com
domain:www.daily-tits.com
domain:www.daily-video.com
domain:www.danishhardcore.net
domain:www.dansmovies.com
domain:www.defaceherface.com
domain:www.deliciousmovies.com
domain:www.digiporn.nl
domain:www.direct-porn.com
domain:www.dirtydaughter.com
domain:www.dirtylittleamateurs.com
domain:www.dirty-movies.com
domain:www.dirtyrhino.com
domain:www.djcelebs.com
domain:www.doctorsexy.com
domain:www.downassbitches.com
domain:www.dragonthumbz.com
domain:www.drunklife.com
domain:www.duckyporn.com
domain:www.easypic.com
domain:www.ebonyabuse.com
domain:www.ebonyblack.net
domain:www.ebonymaster.com
domain:www.ebonyxxxmovies.com
domain:www.edengay.com
domain:www.elephantlist.com
domain:www.elephantlist.com
domain:www.eljardinsecreto.net
domain:www.empirekink.com
domain:www.erobytes.com
domain:www.eroticamoviestation.com
domain:www.erotica-toon.com
domain:www.ethnicmaster.com
domain:www.ethnicpassion.com
domain:www.extrabigboobs.com
domain:www.extreme-anne.com
domain:www.extrememature.com
domain:www.famouspornstars.com
domain:www.fantasyold.com
domain:www.fatfucks.com
domain:www.fathut.com
domain:www.fat-old-movies.com
domain:www.feetmate.com
domain:www.fetishbank.net
domain:www.fetishpig.com
domain:www.finechixxx.com
domain:www.footfetishavenue.com
domain:www.footfetishdirectory.com
domain:www.footfetishgallery.net
domain:www.footster.net
domain:www.foxyteen.net
domain:www.freakthumbs.com
domain:www.free6.com
domain:www.free-adult-celebrities.com
domain:www.freebigmovies.com
domain:www.freeblackmovies.com
domain:www.freefemdom.org
domain:www.freegirlspictures.com
domain:www.freeheaven.com
domain:www.freeheaven.com
domain:www.freemilfs.com
domain:www.freemovieportal.com
domain:www.freemoviesdeluxe.com
domain:www.freepics.tv
domain:www.freepicseries.com
domain:www.free-pics-gallery.com
domain:www.freeporn4you.com
domain:www.free-porn-pages.net
domain:www.freepornpictures.org
domain:www.freepornvideos.tv
domain:www.freesexbomb.com
domain:www.freesexmgp.com
domain:www.free-sex-pics-tgp.com
domain:www.freesex-tgp.com
domain:www.free-teen-babes.com
domain:www.free-teen-sex-sex.com
domain:www.freexsite.com
domain:www.frenchcum.com
domain:www.fuckfaster.com
domain:www.fuckingfreemovies.com
domain:www.fuckk.com
domain:www.fucksakes.net
domain:www.fullvidz.com
domain:www.gaggedlist.com
domain:www.galleries4free.com
domain:www.galleryheaven.com
domain:www.gallerykeepers.com
domain:www.gen-sex.com
domain:www.get-vids.com
domain:www.getyerrocksoff.com
domain:www.goatlist.com
domain:www.goodnightsex.com
domain:www.goth-fetish.com
domain:www.gotmilkers.com
domain:www.grammasthumbs.com
domain:www.grannyfreesex.com
domain:www.grannypictures.com
domain:www.grannyplanet.com
domain:www.granny-post.com
domain:www.grannysextgp.com
domain:www.grannytitty.com
domain:www.hanksgalleries.com
domain:www.hanksgalleries.com
domain:www.hankshoneys.com
domain:www.happypinx.com
domain:www.hardcoregif.com
domain:www.hardcorepornfinder.com
domain:www.hardcorexxx.nl
domain:www.hardcorexxxmpegs.com
domain:www.hardhut.com
domain:www.home-made-videos.com
domain:www.honeymature.com
domain:www.hornyjessica.com
domain:www.horny-pornstar.com
domain:www.hotbabes4u.com
domain:www.hotfreesex4all.com
domain:www.hotfunhouse.com
domain:www.hotjapanesebabes.com
domain:www.hot-lesbian-porn-pictures.com
domain:www.hotorange.net
domain:www.hpornstars.com
domain:www.hqgal.com
domain:www.hqmovies.com
domain:www.hugeboobpics.com
domain:www.hugevids.com
domain:www.humansex.org
domain:www.hydroporn.com
domain:www.idealbabes.net
domain:www.ilovebigbreasts.com
domain:www.imoviepost.com
domain:www.jackstroker.com
domain:www.jamies-galleries.com
domain:www.japanesebeauties.net
domain:www.japanesefuck.com
domain:www.japan-kiss.com
domain:www.jennysbookmarks.com
domain:www.jerk-off-tgp.com
domain:www.jizzhut.com
domain:www.jizzonline.com
domain:www.joggs.com
domain:www.johnnypoker.com
domain:www.juggmovies.com
domain:www.juicyclips.com
domain:www.juicyshemales.com
domain:www.justgetnaked.com
domain:www.kainssexyteens.com
domain:www.kingofboobs.com
domain:www.kinkykarla.com
domain:www.kiss7-11.com
domain:www.kittyvids.com
domain:www.lanasbigboobs.com
domain:www.latexclub.com
domain:www.legfetishpost.com
domain:www.leggytgp.com
domain:www.lesbofuck.com
domain:www.lezpic.com
domain:www.libraryofthumbs.com
domain:www.libraryofthumbs.com
domain:www.lifeofslaves.com
domain:www.live-hot-sex.com
domain:www.longmovies.com
domain:www.lumberjack-links.com
domain:www.madrus.com
domain:www.madthumbs.com
domain:www.massgals.com
domain:www.mature-for-you.com
domain:www.maturehoes.com
domain:www.maturekingdom.com
domain:www.maturelinks.net
domain:www.mature-post.com
domain:www.maxsiu.com
domain:www.megapornolinks.com
domain:www.meoland.com
domain:www.met-free.com
domain:www.mikos-asian-thumbs.com
domain:www.missfemdom.com
domain:www.mmm100.com
domain:www.mobys-free-porn.com
domain:www.mojomansfreeporn.com
domain:www.mom-nude.com
domain:www.moviegalleries.com
domain:www.moviekitten.com
domain:www.moviepost.com
domain:www.moviesgold.com
domain:www.moviesguy.com
domain:www.movieshark.com
domain:www.moviesorgy.com
domain:www.movietitan.com
domain:www.movietomb.com
domain:www.movietrials.com
domain:www.movx.com
domain:www.myfreemilf.com
domain:www.myfreesexmovies.com
domain:www.mypornvids.com
domain:www.mysecretmovies.com
domain:www.n2teens.com
domain:www.nakedcelebspictures.com
domain:www.nastyniches.com
domain:www.nastyrat.com
domain:www.naughtylinks.net
domain:www.need4sex.com
domain:www.nextpicturez.com
domain:www.nipplee.com
domain:www.nipponidols.com
domain:www.no1pics.com
domain:www.nobullshits.com
domain:www.nude-bollywood.com
domain:www.nudecelebsmagazine.com
domain:www.nude-celebs-online.com
domain:www.nudestarz.com
domain:www.nudetitty.com
domain:www.nylonempire.com
domain:www.old69.com
domain:www.olderthumbs.com
domain:www.onlygonzo.net
domain:www.orangetgp.com
domain:www.orgyfuck.com
domain:www.osaka69.com
domain:www.pandamovies.com
domain:www.pantyhosefuckers.com
domain:www.pantyhosemania.com
domain:www.pantyhose-photo-art.com
domain:www.pantylegs.com
domain:www.pantywhores.com
domain:www.paradisex.net
domain:www.paysitetrailers.com
domain:www.p-bot.com
domain:www.peachydream.com
domain:www.perfect-babes.net
domain:www.perfectgirls.net
domain:www.persiankitty.com
domain:www.pervclips.com
domain:www.pichunter.com
domain:www.pinkworld.com
domain:www.planetfootfetish.com
domain:www.playmymovie.com
domain:www.pmsgalleries.com
domain:www.pornchixmovies.com
domain:www.pornno.com
domain:www.pornopanda.com
domain:www.porno-pics-free.com
domain:www.pornranger.net
domain:www.pornstarbook.com
domain:www.pornstarfinder.net
domain:www.pornstargalore.com
domain:www.pornstar-hangout.com
domain:www.pornstarhoes.com
domain:www.pornstarlibrary.com
domain:www.pornstarloverz.com
domain:www.pornstarmoviezone.com
domain:www.pornstar-paradise.com
domain:www.pornstarvid.com
domain:www.pornstar-world.net
domain:www.porntextlinks.com
domain:www.pornthunder.com
domain:www.premiumxxxcore.com
domain:www.purescans.com
domain:www.puresexmovies.com
domain:www.pussy.org
domain:www.pussydivine.com
domain:www.pussy-dreams.com
domain:www.ratedxcafe.com
domain:www.raunchymature.com
domain:www.realbignaturaltits.com
domain:www.realxworld.com
domain:www.redhotlatina.com
domain:www.ricefever.com
domain:www.richardsrealm.com
domain:www.rosethumbs.org
domain:www.rude-bitch.com
domain:www.santasporngirls.com
domain:www.scandalthumbs.com
domain:www.schnaggle.com
domain:www.schoolgirls4all.com
domain:www.schoolgirls-heaven.com
domain:www.screwedupmovies.com
domain:www.secretasiangirls.com
domain:www.series-tgp.com
domain:www.setsofsexygirls.com
domain:www.sex.com
domain:www.sex4it.com
domain:www.sexfoil.com
domain:www.sexgrannies.com
domain:www.sexismylife.com
domain:www.sexkanjer.nl
domain:www.sexmoviesnet.com
domain:www.sexmoviesportal.com
domain:www.sexmoviesworld.com
domain:www.sexoasis.com
domain:www.sexogratis.com.mx
domain:www.sexpoison.com
domain:www.sex-series.net
domain:www.sextitan.com
domain:www.sexwerold.com
domain:www.sexxx.ro
domain:www.sexxxyteenies.net
domain:www.sexyamateurcouples.com
domain:www.sexycelebritygallery.com
domain:www.sexygalleries.com
domain:www.sexyteenmodels.net
domain:www.sexzool.com
domain:www.shemaleexpose.com
domain:www.shemalesfantasy.com
domain:www.shemalesweeties.com
domain:www.shemaletrans.com
domain:www.shemp.com
domain:www.showthumbs.com
domain:www.silent-screams.com
domain:www.simplyvids.com
domain:www.sleazydream.com
domain:www.smileboobs.com
domain:www.smokinmovies.com
domain:www.smutblaster.com
domain:www.smutgod.com
domain:www.snakesworld.com
domain:www.spacethumbs.com
domain:www.spankingtgp.com
domain:www.spermpost.com
domain:www.spermshack.com
domain:www.spunklords.com
domain:www.starcelebs.com
domain:www.starletsofporn.com
domain:www.starletvids.com
domain:www.stickyhole.com
domain:www.stockingsempire.com
domain:www.stockingseries.com
domain:www.stockingtemptation.com
domain:www.sublimedirectory.com
domain:www.sublimepie.com
domain:www.suckbabe.com
domain:www.suckthis7.com
domain:www.sun69.com
domain:www.sunporno.com
domain:www.superhugetits.com
domain:www.superpornlist.com
domain:www.sweetcollegegirls.com
domain:www.sweet-hot-sex.com
domain:www.sweethotteens.com
domain:www.tattletails.com
domain:www.teenaffection.com
domain:www.teenbabes.ca
domain:www.teendolly.com
domain:www.teenfuckin.com
domain:www.teenie-action.com
domain:www.teeniefiles.com
domain:www.teeniemovies.com
domain:www.teeniesxxx.com
domain:www.teenpicseries.com
domain:www.teenplanet4free.com
domain:www.teens-lover.com
domain:www.tgpornstars.com
domain:www.tgpxtreme.com
domain:www.thebestselectiontgp.com
domain:www.thebookofporn.com
domain:www.thecun.com
domain:www.thehun.net
domain:www.thesexmatrice.com
domain:www.thevideodude.com
domain:www.thumbalalaika.com
domain:www.thumbbrain.com
domain:www.thumbgenie.com
domain:www.thumbnailpost.com
domain:www.thumboracle.com
domain:www.thumbzilla.com
domain:www.timsmovies.com
domain:www.tinyteentitties.net
domain:www.titmaniac.com
domain:www.titsfarm.com
domain:www.titsmaster.com
domain:www.todayshentai.com
domain:www.toons-for-adult.com
domain:www.topnudegalleries.com
domain:www.totally-free-bondage.com
domain:www.trannypornmovies.com
domain:www.trannysaloon.com
domain:www.triplecrownthreat.net
domain:www.truegalleries.net
domain:www.tslist.com
domain:www.tspartygirls.com
domain:www.ttporn.com
domain:www.twinkgals.com
domain:www.twinkys.com
domain:www.ultraflix.com
domain:www.ultrahardcoremovies.com
domain:www.ultra-pornstars.com
domain:www.ultrasexmovies.com
domain:www.unrealboobs.com
domain:www.usshemales.com
domain:www.video-post.com
domain:www.videosboard.com
domain:www.vidsgal.com
domain:www.vidsvidsvids.com
domain:www.virtualtgp.com
domain:www.vixen-domme.com
domain:www.voyeurzine.com
domain:www.webporns.com
domain:www.werold4sex.com
domain:www.wet-teen-pussy.net
domain:www.winabegos.com
domain:www.worldsex.com
domain:www.worldvideo.us
domain:www.x3movies.com
domain:www.x-clips.com
domain:www.xgirls.org
domain:www.xmovienow.com
domain:www.xnxx.com
domain:www.xtube.com
domain:www.xxl-tits.com
domain:www.xxx-attack.com
domain:www.xxxgalleries4free.com
domain:www.xxxgroupsex.com
domain:www.xxxstarters.com
domain:www.xxxthumbs4free.com
domain:www.youngerpost.com
domain:www.young-sexy.com
domain:www.your-free-porn.com
domain:www.youwantlinks.com
domain:www.youwantsex.net
domain:www.zthumbs.com

[prev in list] [next in list] [prev in thread] [next in thread]