Автор: blog

The host at this IP address (52.163.122.115) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: http://goldcoastoffice365.com.au/temp/OCT/ http://goldcoastoffice365.com.au/temp/invoice/sjz8vco1o19/06hr22141545123d5e2mdjojchldx/ http://goldcoastoffice365.com.au/temp/report/5awgnu04p6u/ http://goldcoastoffice365.com.au/temp/FILE/ieBFc89ffPgMRX/ http://goldcoastoffice365.com.au/temp/Pages/oELBN0YOwEQ6ieJTsfj0/ http://goldcoastoffice365.com.au/temp/Sxb0Kx1cCv7vlazsatX7vqIxyzTTeykbjedPB8b7HhWi0BO/ http://goldcoastoffice365.com/temp/JVjhjq/ http://goldcoastoffice365.com/temp/swift/jbpn6pn4m8/ http://goldcoastoffice365.com/temp/RAr9U/ http://goldcoastoffice365.com/temp/9HCdvrEa/ http://goldcoastoffice365.com/temp/INC/2CXnBe3it2/ http://goldcoastoffice365.com/temp/Document/pppSSSYqLY/ AS number: AS8075 AS name: MICROSOFT-CORP-MSN-AS-BLOCK

The host at this IP address (23.96.103.159) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://help.hizuko.com/groovy-count/FILE/pkiadn813d-00034986/ https://help.hizuko.com/groovy-count/47HLm/INC/238785/9ymyqfn7z0y-165424/ https://help.hizuko.com/groovy-count/oct/0xmvft0c9nff/ AS number: AS8075 AS name: MICROSOFT-CORP-MSN-AS-BLOCK

The host at this IP address (52.173.77.140) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: http://catchpoolshetlands.co.uk/border-design-fjk/8fGEiO7xg7WfdRWDoQ/ http://catchpoolshetlands.co.uk/border-design-fjk/ohTJ/ https://catchpoolshetlands.co.uk/border-design-fjk/ohTJ/ AS number: AS8075 AS name: MICROSOFT-CORP-MSN-AS-BLOCK

The host at this IP address (104.43.140.101) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://technologydistilled.com/a-nurse-ss8d9/z/ AS number: AS8075 AS name: MICROSOFT-CORP-MSN-AS-BLOCK

The host at this IP address (20.79.41.2) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: http://20.79.41.2/bins/Ares.arm4 http://20.79.41.2/bins/Ares.arm5 http://20.79.41.2/bins/Ares.arm http://20.79.41.2/bins/Ares.sh4 http://20.79.41.2/bins/Ares.ppc http://20.79.41.2/bins/Ares.arm7 http://20.79.41.2/bins/Ares.m68k http://20.79.41.2/bins/Ares.mpsl http://20.79.41.2/bins/Ares.x86 http://20.79.41.2/bins/Ares.arm6 http://20.79.41.2/bins/Ares.mips AS number: AS8075 AS name: MICROSOFT-CORP-MSN-AS-BLOCK

The host at this IP address is being (ab)used to «listbomb» email addresses: From: esoexperthtml56@outlook.com Subject: Magento Templates Design & Customizations Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================… Читать далее Abused / misconfigured newsletter service (listbombing)

The host at this IP address is emitting spam emails. Spam sample ========================================= From: dayana44dyer@hotmail.com Subject: Fd: Website Redesign & Re DnD =========================================

The host at this IP address is emitting spam emails. Spam sample ========================================= From: shariqwebsolutionservice@hotmail.com Subject: 1st page of Google =========================================

hXXp://junkrunnersarsenal.cf/chase.login.com.en-us.noredirect-true.destpage-dashboard-inav-menu-myacct-acctsum/ junkrunnersarsenal.cf pakgeographics.org stat-ivory.tk ivory-stats.tk freebtcsatoshi.tk kiwancorp-services2.tk ivory-csgo.tk sandcgiftideas.tk artzilly.tk ruisilva.ml frizerstvomacho.tk adultdatinghome.tk appslogin.ml gladyseslater.cf carlandstaceyposters.cf carlandstaceyposters.ga carlandstaceyposters.gq carlandstaceyposters.ml nkn-learning.tk

The host at this IP address is being (ab)used to «listbomb» email addresses: From: jasminaemcgrath@hotmail.com Subject: Re-web-Designer/Developer Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================ In order to resolve… Читать далее Abused / misconfigured newsletter service (listbombing)