64.225.60.108|uspostal-service.com|2022-04-05 01:07:05 64.225.60.108|verified-securedusps.com|2022-04-15 04:41:03 verified-uspservice.dynamic-dns.net has address 64.225.60.108
Автор: blog
MAAS/PAAS server
20.211.113.86|artemarusshiola.com|2022-04-14 22:46:34 20.211.113.86|artembulletshiola.com|2022-04-12 13:33:11 20.211.113.86|artemevgenevichshiola.com|2022-04-14 06:56:16 20.211.113.86|artemfeelshiola.com|2022-04-12 16:17:17
Malware botnet controller @34.65.129.76
The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 34.65.129.76 port 443: $ telnet 45.8.124.63 443 Trying 45.8.124.63… Connected to 45.8.124.63. Escape character is ‘^]’… Читать далее Malware botnet controller @34.65.129.76
Malware / Botnet / Phishing hosting server @35.233.53.229
According to our telemetry and our own intelligence, the host at this IP address has been setup by cyber criminals for the exclusive purpose of hosting phishing sites, malware distribution sites and/or botnet controllers. We therefore advise our users to block any traffic from/to this IP address. The host at this IP address is running… Читать далее Malware / Botnet / Phishing hosting server @35.233.53.229
Abused / misconfigured newsletter service (listbombing)
The host at this IP address is being (ab)used to «listbomb» email addresses: From: Canonita Mexican Soul Food – Venetian Las Vegas <tavistockrestaurants@c.pxsmail.com> Subject: Cinco de Mayo Festivities Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages… Читать далее Abused / misconfigured newsletter service (listbombing)
Spam Emitter! (Malaysian Export Academy) (P2P Hub)
This IP address is sending spam for the Malaysian Export Academy, part of a Malaysia-based spam operation that we still call by its earlier name P2P Hub. This organization offers business training seminars and advertises its seminars by sending spam to scraped, purchased or appended lists. Received: from gtrade22.com (ip55.ip-139-99-115.net [139.99.115.55]) Date: Thu, 14 Apr… Читать далее Spam Emitter! (Malaysian Export Academy) (P2P Hub)
Phish spam site @199.188.200.48
Received: from vps687333278993 (5.230.72.70 [5.230.72.70]) From: «PancakeSwap» <support@pancakeswap.finance> Subject: Help us prevent your wallet from suspension Date: Thu, 14 Apr 2022 08:3x:xx +0200 https://sprada-b.de.banking-private.entry.naijaex.com/rapporto.php sprada-b.de.banking-private.entry.naijaex.com. 1200 IN A 199.188.200.48 naijaex.com. 172799 IN NS dns2.namecheaphosting.com. naijaex.com. 172799 IN NS dns1.namecheaphosting.com. dns1.namecheaphosting.com. 172799 IN A 156.154.132.200 dns2.namecheaphosting.com. 172799 IN A 156.154.133.200
spam emitter @128.199.112.150
Received: from mail.madiolab.me ([128.199.112.150]) From: «E-Wallet» <contact@madiolab.me> Subject: [], je hebt onlangs nieuwe BTC Date: Wed, 13 Apr 2022 05:4x:xx -0700
spam emitter @159.203.35.163
Received: from mail.hortsapp.live ([159.203.35.163]) From: «E-Wallet» <contact@hortsapp.live> Subject: [], je hebt onlangs nieuwe BTC Date: Wed, 13 Apr 2022 09:1x:xx -0700
Fodcha botnet controller @170.187.254.249
Fodcha botnet controller hosted here: $ dig +short fridgexperts.cc 194.156.224.102 170.187.254.249 162.33.177.146 194.53.108.90 5.253.235.163 162.33.178.66 172.105.241.100 194.53.108.94 See also: https://buaq.net/go-109482.html