Stupid attacking domain — andrewsaluk.com

Looks like some bozo has managed to take over a large number of machines and launch some sort of zombie attack against blogs. If you see andrewsaluk.com filling up your referrer log, block the hosts. They are likely zombies.


Just checked the domain (IP address 211.180.238.254) — it originates in South Korea. Definitely points to either a script-kiddie or a zombie on a high-speed connection.
[FOLLOW UP: here]

6 Replies to “Stupid attacking domain — andrewsaluk.com”

  1. Thanks for the info. I couldn’t figure out who or what this site was that was accounting for 40% of my hits.
    I still don’t quite understand, but I went ahead and blocked the IP.

Leave a Reply

Your email address will not be published. Required fields are marked *