« February 2008 · August 2008 · July 2010 »
|
|
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
- 26.06.2008: FIRST Conference - Vancouver, Canada
- 24.06.2008: FIRST Conference - Vancouver, Canada
- 04.06.2008: AbuseSec08 Conference - Karlsruhe, Germany
- 27.05.2008: When Adobe Flash Attacks
- 23.05.2008: AUS-CERT Conference - Gold Coast, Australia
- 14.05.2008: See below.
- 13.05.2008: SQL Injection: The Game
- 07.05.2008: New SQL Injection Attacks and New Malware: winzipices.cn
- 24.04.2008: Thousands of More Hacked Websites Targeting Your Passwords
- 20.04.2008: Entropy and Bot Counts
- 10.04.2008: DSL Reports under DDoS Attack Again
Wednesday, 14 May 2008
Full list of Injected Sites
Warning: We strongly suggest that readers NOT visit websites mentioned as being behind the attacks discussed. They should be considered dangerous and capable of infecting your system.
Below is a list of domains used in the mass SQL injections that insert malicious javascript into websites. We've also included an approximate number of pages infected (according to Google). Note that these numbers decay with time. Some of these domains were injected long ago and have been cleaned. At their height, their numbers may have been larger.
Some of these have been re-injected by URL encoding the script names. So if a host/domain shows up in parentheses and also in the list unencoded, these were two separate injection runs.
The List
This list can now be downloaded at the following link: sql-inj-list.txt
Last Updated: 01/29/09 14:02:09 -0700
Domain (455 domains) Count Date Found
---------------------------------------------------------------------------------------------
www.nihaorr1.com 468,000 na/na/na
free.hostpinoy.info 444,000 na/na/na
xprmn4u.info 369,000 na/na/na
www.nmidahena.com 140,000 na/na/na
%6b%6b%36%2e%75%73 (kk6.us) 106,000 na/na/na
%73%61%79%38%2E%75%73 (s.see9.us) 97,000 na/na/na
go.nnd.hk 92,400 11/04/08
www.wakasa.or.jp 87,700 11/12/08
winzipices.cn 75,000 na/na/na
%66%75%63%6B%75%75%2E%75%73 (fuckuu.us) 73,000 na/na/na
www.killpp.cn 69,000 na/na/na
sb.5252.ws 69,000 na/na/na
www.aspder.com 62,000 na/na/na
www.11910.net 47,000 na/na/na
bbs.jueduizuan.com 44,000 na/na/na
www.bluell.cn 44,000 na/na/na
www.2117966.net 39,000 na/na/na
s.see9.us 39,000 na/na/na
www.mtno.ru 36,600 01/20/09
www.nvepe.ru 34,400 01/20/09
xvgaoke.cn 33,000 na/na/na
1.hao929.cn 20,000 na/na/na
teiri.cn 18,500 01/20/09
www.414151.com 17,000 na/na/na
dbios.org 15,900 01/20/09
www.hiwowpp.cn 15,300 na/na/na
cc.18dd.net 15,000 na/na/na
yl18.net 15,000 na/na/na
www.wmpd.ru 13,100 01/20/09
www.kisswow.com.cn 13,000 na/na/na
urkb.net 13,000 na/na/na
tejary.net 11,200 01/20/09
www.etyj.ru 10,300 01/29/09
c.uc8010.com 9500 na/na/na
www.loveqianlai.cn 9200 na/na/na
www.ko118.cn 9070 11/02/08
rnmb.net 7000 na/na/na
iwdown.com 6850 01/23/09
www.ririwow.cn 6000 na/na/na
mvoyo.com 5890 12/11/08
mcuve.cn 4460 01/20/09
jjmaoduo.3322.org 4370 08/22/08
www.killwow1.cn 4000 na/na/na
www.xiaobaishan.net 3700 na/na/na
www.qiqigm.com 3600 na/na/na
www.wowgm1.cn 3500 na/na/na
www.98hs.ru 3240 08/11/08
mo98g.cn 2860 08/04/08
www.wowyeye.cn 2800 na/na/na
9i5t.cn 2500 na/na/na
c11.8866.org 2500 na/na/na
computershello.cn 2300 na/na/na
www.tlcn.net 2100 na/na/na
www3.800mg.cn 1720 08/22/08
chanm.cn 1710 08/12/08
www.z008.net 1600 na/na/na
www.lijg.ru 1560 01/22/09
abc.verynx.cn 1520 07/24/08
b15.3322.org 1200 na/na/na
www.qiqicc.cn 1100 na/na/na
www.direct84.com 1100 na/na/na
www.heihei117.cn 900 na/na/na
www.caocaowow.cn 900 na/na/na
1.verynx.cn 852 07/21/08
www.qiuxuegm.com 800 na/na/na
www.wowofmusiopl.com.cn 752 na/na/na
www.locale48.com 730 na/na/na
firestnamestea.cn 700 na/na/na
www.j8j8hei.cn 630 na/na/na
%61%2E%6B%61%34%37%2E%75%73 (a.ka47.us) 600 na/na/na
fami4ka.net 590 na/na/na
www.westpacsecuresite.com 580 na/na/na
www.supbnr.com 575 na/na/na
www.redir94.com 575 na/na/na
www.rexec39.com 540 na/na/na
%61%31%38%38%2E%77%73 (a188.ws) 500 na/na/na
www.en-us18.com 490 na/na/na
www.hitlistesi.com 469 08/11/08
www0.douhunqn.cn 441 08/22/08
www.cdport.eu 433 na/na/na
ck1.in 425 na/na/na
www.ncb2.ru 379 07/28/08
www.ujnc.ru 359 08/14/08
www.adjuncnet.com 315 na/na/na
www.rundll92.com 290 na/na/na
www.dbgbron.com 263 na/na/na
www.sysid72.com 260 na/na/na
i8jdd.cn 250 08/05/08
n.uc8010.com 250 na/na/na
www.libid53.com 250 na/na/na
www.qiqi111.cn 230 na/na/na
heartgames.cn 220 na/na/na
www.logid83.com 215 na/na/na
www.30area.ru 207 10/15/08
www.update34.com 200 na/na/na
www2.s800qn.cn 199 10/11/08
www.bsko.ru 182 07/28/08
www.datajto.com 180 na/na/na
www.browsad.com 178 na/na/na
jjmaobuduo.3322.org 176 08/07/08
www.adw95.com 170 na/na/na
tjwh202.162.ns98.cn 160 na/na/na
www.netcfg9.ru 153 10/15/08
www.jetadwor.com 150 na/na/na
www.aladbnr.com 145 na/na/na
www.kj5s.ru 138 07/28/08
www.bnrbasead.com 137 na/na/na
www.cookieadw.com 135 na/na/na
www3.ss11qn.cn 133 09/22/08
www.asslad.com 133 na/na/na
www.bannerupd.com 130 na/na/na
nb88.cn 130 na/na/na
www.clrbbd.com 125 na/na/na
www.appdad.com 115 na/na/na
www.bigadnet.com 105 na/na/na
1.cool0.biz 105 na/na/na
www.updatebnr.com 100 na/na/na
flyzhu.9966.org 100 na/na/na
www.sslnet72.com 100 na/na/na
www.advertbnr.com 100 na/na/na
www.script46.com 93 na/na/na
www.apidad.com 92 na/na/na
www.loctenv.com 91 na/na/na
www.fengnima.cn 90 na/na/na
www.tag58.com 90 na/na/na
www.banner82.com 90 na/na/na
17gamo.com 88 12/11/08
www.gitporg.com 86 na/na/na
smeisp.cn 85 na/na/na
a814.cn 79 08/12/08
www.bnradd.mobi 79 na/na/na
www.lang42.ru 75 10/15/08
www.brsadd.com 73 na/na/na
jjmaoduo2.3322.org 72 08/07/08
www.bosf.ru 70 07/28/08
hoursebuilds.cn 70 na/na/na
www.bywd.ru 69 08/05/08
www.qqcc123.cn 68 na/na/na
www.hyperadw.com 65 na/na/na
www.adsitelo.com 59 na/na/na
www.njep.ru 58 07/28/08
okey123.cn 55 na/na/na
www.worldofwarcrokft.com 52 07/31/08
d.388b.cn 50 08/13/08
www.adbtch.com 50 na/na/na
b.kaobt.cn 50 na/na/na
www.cb3f.ru 45 08/14/08
www.getadw.com 45 na/na/na
www.nihao112.com 45 na/na/na
al.99.vc 45 na/na/na
www.aidushu.net 45 na/na/na
www.porv.ru 41 08/05/08
a.13175.com 40 na/na/na
www.chliyi.com 40 na/na/na
free.edivid.info 40 na/na/na
52-o.cn 40 na/na/na
www.fucksb.net 40 na/na/na
www60.actualization.cn 40 na/na/na
d39.6600.org 40 na/na/na
www.mainadt.com 39 na/na/na
www.qq117cc.cn 39 na/na/na
www.asodbr.com 39 na/na/na
www.b4so.ru 36 07/28/08
www.sitevgb.ru 35 10/15/08
www.oics.ru 34 07/28/08
h28.8800.org 34 na/na/na
l61.3322.org 32 na/na/na
www.armsart.com 30 08/11/08
001yl.com 30 na/na/na
ucmal.com 30 na/na/na
t.uc8010.com 30 na/na/na
www.nudk.ru 29 07/22/08
shygddc.cn 29 08/08/08
www.53refer.ru 28 10/15/08
yrwap.cn 27 08/11/08
www.bjxt.ru 27 07/28/08
www.ncbw.ru 27 08/05/08
www2.1000ylc.cn 26 08/22/08
www.dota11.cn 25 na/na/na
www.pingbnr.com 25 na/na/na
www.driver95.ru 24 10/15/08
www.portadrd.com 23 na/na/na
www.bnrbtch.com 23 na/na/na
www.vrelel.ru 23 10/15/08
www.blockkd.com 22 na/na/na
www.allocbn.mobi 21 na/na/na
www.o1o2qq.cn 20 07/23/08
www.bnrcompro.com 20 na/na/na
y66.us 20 na/na/na
m11.3322.org 20 na/na/na
bc0.cn 20 na/na/na
%33%2E%74%72%6F%6A%61%6E%38%2E%63%6F%6D (3.trojan8.com) 20 na/na/na
www.ojns.ru 20 08/05/08
www.blcadw.com 17 na/na/na
www.clsidw.com 17 na/na/na
www.adword71.com 17 na/na/na
killpp.cn 16 na/na/na
www.bnradw.com 16 na/na/na
www.ibse.ru 16 08/05/08
cmiia.com 15 na/na/na
www.sslput4.com 15 na/na/na
www.exe94.com 14 na/na/na
www.adwadb.mobi 14 na/na/na
www.8hcs.ru 14 08/05/08
www.bnrcntrl.com 13 na/na/na
w11.6600.org 13 na/na/na
usuc.us 13 na/na/na
www.chk06.ru 13 10/15/08
www.hlpadw.com 12 na/na/na
www.bgsr.ru 12 08/05/08
www.uhwc.ru 11 08/05/08
www.pbtgr.ru 10 01/20/09
www.jumpbnr.com 10 na/na/na
www.advabnr.com 10 na/na/na
www.siteid38.com 10 na/na/na
www.msshamof.com 10 na/na/na
www.refer68.com 10 na/na/na
www.google9.info 10 na/na/na
www.okcd.ru 10 08/14/08
www.nbh3.ru 9 08/14/08
www.bluexzz.cn 8 08/12/08
xunlei.verynx.cn 8 07/21/08
www.wowgm2.cn 8 na/na/na
mm.jsjwh.com.cn 8 na/na/na
newasp.com.cn 7 na/na/na
www.gty5.ru 7 07/28/08
www.gty5.ru 7 07/28/08
www.nwj4.ru 7 08/05/08
www.catdbw.mobi 6 na/na/na
www.app52.com 6 na/na/na
www.asp707.com 6 na/na/na
%6D%31%31%2E%33%33%32%32%2E%6F%72%67 (m11.3322.org) 6 na/na/na
www.errghr.ru 6 10/15/08
chat27.by.ru 5 08/11/08
www.nudk.ru 5 07/18/08
www.updatead.com 5 na/na/na
www.win496.com 5 na/na/na
usuc.us 5 na/na/na
www.adwsupp.com 5 na/na/na
www.juc8.ru 5 08/14/08
www.cnld.ru 4 08/14/08
www.jkn3.ru 4 08/14/08
www.brcporb.ru 4 na/na/na
www.view89.com 4 na/na/na
17ge.cn 4 na/na/na
www.err68.com 4 na/na/na
ww.xnibi.com 4 09/02/08
www.upgradead.com 2 na/na/na
www.adword72.com 2 na/na/na
kk6.us 2 na/na/na
www.clickbnr.com 1 na/na/na
www.117275.cn 1 na/na/na
c23.2288.org 1 na/na/na
sysid72.com 1 na/na/na
www.encode72.com 1 na/na/na
www.exec51.com 1 na/na/na
www.pingadw.com 1 na/na/na
www.lksr.ru 1 07/23/08
zirvehit.com 1 08/11/08
www.locm.ru 1 08/14/08
vb008.cn ? na/na/na
www.wow112.cn ? na/na/na
www.nihaoel3.com ? na/na/na
p060523.info ? na/na/na
o7n9.cn ? na/na/na
www.rundll841.com ? na/na/na
www.jetdbs.com ? na/na/na
www.dbdomaine.com ? na/na/na
www.domaincld.com ? na/na/na
www.clsiduser.com ? na/na/na
www.heiheinn.cn ? na/na/na
www.coldwop.com ? na/na/na
www.alzhead.com ? na/na/na
www.chinabnr.com ? na/na/na
www.adwbnr.com ? na/na/na
www.chkbnr.com ? na/na/na
www.chkadw.com ? na/na/na
www.apps84.com ? na/na/na
www.appid37.com ? na/na/na
www.aspssl63.com ? na/na/na
www.aspx49.com ? na/na/na
www.base48.com ? na/na/na
www.batch29.com ? na/na/na
www.bin963.com ? na/na/na
www.bios47.com ? na/na/na
www.hlpgetw.com ? na/na/na
www.getbwd.com ? na/na/na
www.dbupdr.com ? na/na/na
www.lang34.com ? na/na/na
www.cid26.com ? na/na/na
www.rid34.com ? na/na/na
www.tid62.com ? na/na/na
www.dl251.com ? na/na/na
www.st212.com ? na/na/na
www.adwste.mobi ? na/na/na
www.bnrupdate.mobi ? na/na/na
www.adupd.mobi ? na/na/na
www.hdadwcd.com ? na/na/na
www.kadport.com ? na/na/na
www.suppadw.com ? na/na/na
www.web923.com ? na/na/na
www.csl24.com ? na/na/na
www.get49.net ? na/na/na
www.pid72.com ? na/na/na
www.pid76.net ? na/na/na
www.maigol.cn ? na/na/na
www.cntrl62.com ? na/na/na
www.config73.com ? na/na/na
www.default37.com ? na/na/na
www.debug73.com ? na/na/na
www.canclvr.com ? na/na/na
www.ktrcom.com ? na/na/na
www.lokriet.com ? na/na/na
www.mainbvd.com ? na/na/na
www.portwbr.com ? na/na/na
www.stiwdd.com ? na/na/na
www.testwvr.com ? na/na/na
www.ucomddv.com ? na/na/na
www.upcomd.com ? na/na/na
www.ausadd.com ? na/na/na
www.ausbnr.com ? na/na/na
www.crtbond.com ? na/na/na
www.destbnp.com ? na/na/na
www.gbradp.com ? na/na/na
www.gbradw.com ? na/na/na
www.usaadp.com ? na/na/na
www.usaadw.com ? na/na/na
www.usabnr.com ? na/na/na
www.adwnetw.com ? na/na/na
www.bnsdrv.com ? na/na/na
www.butdrv.com ? na/na/na
www.cdrpoex.com ? na/na/na
www.cliprts.com ? na/na/na
www.drvadw.com ? na/na/na
www.hdrcom.com ? na/na/na
www.loopadd.com ? na/na/na
www.movaddw.com ? na/na/na
www.nopcls.com ? na/na/na
www.pyttco.com ? na/na/na
www.tctcow.com ? na/na/na
www.bkpadd.mobi ? na/na/na
www.destad.mobi ? na/na/na
www.porttw.mobi ? na/na/na
www.tertad.mobi ? na/na/na
www.addrl.com ? na/na/na
www.adpzo.com ? na/na/na
www.gbradde.tk ? na/na/na
www.btoperc.ru ? na/na/na
www.grtsel.ru ? na/na/na
www.korfd.ru ? na/na/na
www.rcdplc.ru ? na/na/na
www.adwr.ru ? na/na/na
www.bnrc.ru ? na/na/na
www.iogp.ru ? na/na/na
www.lodse.ru ? na/na/na
www.rrcs.ru ? na/na/na
www.sdkj.ru ? na/na/na
www.sslwer.ru ? na/na/na
www.vcre.ru ? na/na/na
www.adwbn.ru ? 07/18/08
www.4cnw.ru ? 07/18/08
www.90mc.ru ? 07/18/08
www.d5sg.ru ? 07/18/08
www.gb53.ru ? 07/18/08
www.h23f.ru ? 07/18/08
www.jex5.ru ? 07/18/08
www.jvke.ru ? 07/18/08
www.keec.ru ? 07/18/08
www.keje.ru ? 07/18/08
www.lkc2.ru ? 07/18/08
www.5kc3.ru ? 07/18/08
www.kc43.ru ? 07/18/08
www.ecx2.ru ? 07/19/08
www.4vrs.ru ? 07/22/08
www.9jsr.ru ? 07/22/08
www.bts5.ru ? 07/22/08
www.cgt4.ru ? 07/22/08
www.chds.ru ? 07/22/08
www.cvsr.ru ? 07/22/08
www.kgj3.ru ? 07/22/08
www.jve4.ru ? 07/24/08
www.ch35.ru ? 07/24/08
www.kjwd.ru ? 07/24/08
www.ncwc.ru ? 07/24/08
www.kodj.ru ? 07/24/08
www.iroe.ru ? 07/24/08
www.kpo3.ru ? 07/24/08
www.nemr.ru ? 07/24/08
www.bce8.ru ? 07/24/08
www.pfd2.ru ? 07/24/08
www.nmr43.ru ? 07/24/08
www.kr92.ru ? 07/24/08
www.po4c.ru ? 07/24/08
www.b4so.ru ? 07/27/08
www.bjxt.ru ? 07/27/08
www.bnsr.ru ? 07/27/08
www.bosf.ru ? 07/27/08
www.bsko.ru ? 07/27/08
www.kj5s.ru ? 07/27/08
www.ncb2.ru ? 07/27/08
www.njep.ru ? 07/27/08
www.oics.ru ? 07/27/08
www.bnsr.ru ? 07/28/08
www.ba1do.com ? 08/05/08
sdo.1000mg.cn ? 08/07/08
cv34.co.uk ? 08/13/08
db23.co.uk ? 08/13/08
www.3njx.ru ? 08/14/08
www.bcus2.ru ? 08/14/08
www.beyry.ru ? 08/21/08
www.iopc4.ru ? 08/21/08
www.iopoe.ru ? 08/21/08
www.jetp6.ru ? 08/21/08
www.loopk.ru ? 08/21/08
www.netr2.ru ? 08/21/08
www.nucop.ru ? 08/21/08
www.port04.ru ? 08/21/08
www.ueur3.ru ? 08/21/08
www.vj64.ru ? 08/21/08
www.2b24.ru ? 08/29/08
www.cg33.ru ? 08/29/08
www.cv2e.ru ? 08/29/08
www.cv32.ru ? 08/29/08
www.mc2n.ru ? 08/29/08
www.mj5f.ru ? 08/29/08
www.oc32.ru ? 08/29/08
www.vswc.ru ? 08/29/08
www.jic2.ru ? 09/03/08
www.19ssl.net ? 09/08/08
www.24aspx.com ? 09/08/08
www.64do.com ? 09/08/08
www.aspx46.com ? 09/08/08
www.22net.ru ? 09/10/08
www.4net9.ru ? 09/10/08
www.51com.ru ? 09/10/08
www.64asp.ru ? 09/10/08
www.92prt.ru ? 09/10/08
www.acr34.ru ? 09/10/08
www.asl39.ru ? 09/10/08
www.fst9.ru ? 09/10/08
www.net83.ru ? 09/10/08
www.sel92.ru ? 09/10/08
www.mnbenio.ru ? 09/17/08
www.mnicbre.ru ? 09/17/08
www.pkseio.ru ? 09/17/08
www.vtg43.ru ? 09/17/08
www.ctiry.ru ? 09/25/08
www.deryv.ru ? 09/25/08
www.mentoe.ru ? 09/25/08
www.mheop.ru ? 09/25/08
www.pormce.ru ? 09/25/08
www.xenbv.ru ? 09/25/08
www.4log-in.ru ? 10/15/08
www.47mode.name ? 10/23/08
www.81dns.ru ? 10/23/08
www.berjke.ru ? 10/23/08
=>Posted May 14, 2008, at 07:42 AM by Mike Johnson
