Emerging Tor Threat alert - Packet drop, severity: Blacklist

Viruses and worms
1

See: https://panwdbl.appspot.com/lists/ettor.txt (listed there).
See: http://urlquery.net/report.php?id=1430429289627
valid-after 2015-04-29 21:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU o+IqiHzuatjVTq7pm3iu9I0A9eA 2015-04-29 12:40:38 198.245.50.148 9001 9030

valid-after 2015-04-29 22:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU o+IqiHzuatjVTq7pm3iu9I0A9eA 2015-04-29 12:40:38 198.245.50.148 9001 9030

valid-after 2015-04-29 23:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU o+IqiHzuatjVTq7pm3iu9I0A9eA 2015-04-29 12:40:38 198.245.50.148 9001 9030

valid-after 2015-04-30 00:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU o+IqiHzuatjVTq7pm3iu9I0A9eA 2015-04-29 12:40:38 198.245.50.148 9001 9030

valid-after 2015-04-30 01:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU o+IqiHzuatjVTq7pm3iu9I0A9eA 2015-04-29 12:40:38 198.245.50.148 9001 9030

valid-after 2015-04-30 02:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU o+IqiHzuatjVTq7pm3iu9I0A9eA 2015-04-29 12:40:38 198.245.50.148 9001 9030

valid-after 2015-04-30 03:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU o+IqiHzuatjVTq7pm3iu9I0A9eA 2015-04-29 12:40:38 198.245.50.148 9001 9030

valid-after 2015-04-30 04:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 05:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 06:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 07:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 08:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 09:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 10:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 11:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 12:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 13:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 14:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 15:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 16:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 17:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 18:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 19:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 20:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

valid-after 2015-04-30 21:00:00
r CTFVela 6Tp+O/mfPvwupu58RLiY4IGK0sU OmUki1R0f36EavjFjumC5pG6xkE 2015-04-30 03:34:59 198.245.50.148 9001 9030

Read: https://lists.emergingthreats.net/pipermail/emerging-sigs/2014-April/024102.html
There are no exit nodes on Tor hidden services. Enabling full rights in the browser.
Packet drop, severity: Blacklist. Monitoring threat.

polonus

2

On IP is website with this web rep → spamming
https://www.mywot.com/en/scorecard/vela.z0p.org?utm_source=addon&utm_content=warn-viewsc
Netcraft risk report: http://toolbar.netcraft.com/site_report?url=vela.z0p.org

Issues: http://www.dnsinspect.com/z0p.org/1430430825

D