AZORult botnet controller @172.67.180.183

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.

AZORult botnet controller located at 172.67.180.183 on port 80 (using HTTP POST):
hXXp://australiadish.bar/kendrick/index.php

$ dig +short australiadish.bar
172.67.180.183

Referencing malware binaries (MD5 hash):
681f206fe52d8049f3ca6743211d2c7c — AV detection: 14 / 68 (20.59)

Other malicious domain names hosted on this IP address:
www.podzamcze.org 172.67.180.183
ueray.com 172.67.180.183
todomaskota.com 172.67.180.183
australiadish.bar 172.67.180.183

Добавить комментарий

Ваш адрес email не будет опубликован.