blog — Страница 200

RaccoonStealer botnet controller @172.67.136.46

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. RaccoonStealer botnet controller located at 172.67.136.46 on port 80 (using HTTP GET): http://teleliver.top/rino115sipsip http://livetelive.top/rino115sipsip http://teleger.top/rino115sipsip http://telestrong.top/rino115sipsip http://tgrampro.top/rino115sipsip http://teleghost.top/rino115sipsip http://teleroom.top/rino115sipsip http://telemir.top/rino115sipsip http://teletelo.top/rino115sipsip

Spamvertised website

Received: from er0o.cazitex.be (40.86.186.112) From: Slots Casino<[]@oneshoptattoo.com> Subject: 500 � tervetuliaisbonuksen + 50 ilmaiskierrosta Date: Wed, 03 Nov 2021 14:3x:xx +0100 http://oneshoptattoo.com/[] oneshoptattoo.com. 35 IN A 45.143.95.124

spam emitter @143.198.44.192

Received: from ihfkks.netsirk.com (143.198.44.192) From: Iphone 13<reply@apple.ru!>;<service@stayfriends.de> Subject: Machen Sie jetzt mit und gewinnen Sie das neue iPhone 13. Der Gewinner wird per E-Mail benachrichtigt! Date: Thu, 04 Nov 2021 01:0x:xx +0000

Unsubscribe URI IP address

This IP address appears in spam sent by OMICS, an academic and business publisher of «peer-reviewed open access journals». This spam is sent to scraped, purchased, or appended lists. The IP address appears in an unsubscribe link in spam. We have verified that the IP address is live and functioning. SPAM SAMPLE: Received: from smtp.g.theopenjournals.com… Читать далее Unsubscribe URI IP address

irs phishing server

34.66.212.59|haxiriq.com|2021-11-02 01:21:30 34.66.212.59|redirect.allstarhood.com|2021-11-02 19:37:02 34.66.212.59|taxverify77.com|2021-10-31 14:40:52 34.66.212.59|usgetfunds.com|2021-11-03 08:37:04 hXXps://usgetfunds.com/r/5vjmObV

«Piush Verma» / OMICS

A number of scattered VPS servers in the dnsrd.com domain are sending spam for OMICS, a publisher of «peer-reviewed open access journals» advertised by spam sent to scraped, purchased, or appended lists. SENDING IPs: 159.65.198.110 gsc1.pm.dnsrd.com 167.99.223.197 gsc2.pm.dnsrd.com 165.232.156.54 gsc3.pm.dnsrd.com 143.198.61.118 gsc4.pm.dnsrd.com 206.189.7.137 gsc5.pm.dnsrd.com 64.227.76.145 gsc6.pm.dnsrd.com 64.227.70.140 gsc7.pm.dnsrd.com 64.227.78.106 gsc8.pm.dnsrd.com 64.227.70.171 gsc9.pm.dnsrd.com 64.227.78.214 gsc10.pm.dnsrd.com 143.198.235.231… Читать далее «Piush Verma» / OMICS