The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 172.67.204.72 on port 80 (using HTTP POST): hXXp://cnkfeng.com/neds/Panel/five/fre.php $ dig +short cnkfeng.com 172.67.204.72 Other malicious domain names hosted on this IP address:… Читать далее Loki botnet controller @172.67.204.72
Рубрика: cloudflare.com
spam support (domains)
domain used in spam operation. preaccuous.com… 172.67.197.166, 104.21.13.37
spam support (domains)
domain used in spam operation. preaccuous.com… 172.67.197.166, 104.21.13.37
Loki botnet controller @172.67.188.53
The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 172.67.188.53 on port 80 (using HTTP POST): hXXp://samkoproducts.xyz/five/fre.php $ dig +short samkoproducts.xyz 172.67.188.53 Referencing malware binaries (MD5 hash): 0ef11d95ce195cb49efa5bfb435ac0e2 — AV detection:… Читать далее Loki botnet controller @172.67.188.53
Spammer hosting @104.21.72.151
German pill spam gang hosted here: $ dig +short doktor-rezeptfrei.at 104.21.72.151 172.67.186.68
Loki botnet controller @172.67.169.38
The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 172.67.169.38 on port 80 (using HTTP POST): hXXp://utensilsprod.xyz/five/fre.php $ dig +short utensilsprod.xyz 172.67.169.38 Referencing malware binaries (MD5 hash): 5ce9bc025711280fa8e91f12fa39e5ec — AV detection:… Читать далее Loki botnet controller @172.67.169.38
Spammer hosting @172.67.186.68
German pill spam gang hosted here: $ dig +short doktor-rezeptfrei.at 104.21.72.151 172.67.186.68
Spammer hosting @172.67.207.116
German pill spam gang hosted here: $ dig +short www.apotheke-potenz.de 172.67.207.116 104.21.50.164
Spammer hosting @104.21.50.164
German pill spam gang hosted here: $ dig +short www.apotheke-potenz.de 172.67.207.116 104.21.50.164
Malware botnet controller @172.67.199.242
The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 172.67.199.242 on port 80 (using HTTP POST): hXXp://staticimg.ikahega.com/api/ $ dig +short staticimg.ikahega.com 172.67.199.242 Referencing malware binaries (MD5 hash): 0ccaba8f07f43baba600ee09864dd488 — AV detection:… Читать далее Malware botnet controller @172.67.199.242