Friday, December 1, 2017

Wapack Labs Sinkhole Blacklist

TLP AMBER ANNOUNCEMENT:

Reporting Period: Nov 27, 2017

Wapack Labs identified connections from the following 300 unique IP addresses (full list of 3615 IPs is on a corresponding .csv file), which are checking in with one of the many Wapack Labs sinkholes.

Action recommendation: Users should immediately place each of these IP addresses in a monitor or block status in intrusion prevention systems.

This TLP AMBER report is available only to Red Sky Alliance members.