Reporting Period: December 28, 2017
Wapack Labs identified connections from 811 new unique IP addresses, which are checking in with one of the many Wapack Labs sinkholed domains.
Contact Wapack Labs for more information: 603-606-1246, or feedback@wapacklabs.com
Action recommendation: Users should immediately place each of these IP addresses in a monitor or block status in intrusion prevention systems.
This TLP AMBER report is available only to Red Sky Alliance members.