Thursday, December 7, 2017

Wapack Labs Sinkhole Blacklist

TLP AMBER ANNOUNCEMENT:

Reporting Period: Dec 04, 2017

Wapack Labs identified connections from 2637 unique IP addresses, which are checking in with one of the many Wapack Labs sinkholes.

Action recommendation: Users should immediately place each of these IP addresses in a monitor or block status in intrusion prevention systems.

This TLP AMBER report is available only to Red Sky Alliance members.