Spamvertised domain hosting

% Abuse contact for ‘2.56.58.0 — 2.56.59.255’ is ‘abuse@serverion.com’ inetnum: 2.56.58.0 — 2.56.59.255 netname: SERVER-2-56-58-0 country: NL org: ORG-SB666-RIPE admin-c: SBAH21-RIPE tech-c: SBAH21-RIPE status: ASSIGNED PA mnt-by: PREFIXBROKER-MNT created: 2021-05-03T18:09:59Z last-modified: 2021-05-03T18:09:59Z source: RIPE organisation: ORG-SB666-RIPE org-name: Serverion BV org-type: OTHER address: Krammer 8 address: 3232HE Brielle address: Netherlands abuse-c: SBAH21-RIPE mnt-ref: PREFIXBROKER-MNT mnt-by: PREFIXBROKER-MNT… Читать далее Spamvertised domain hosting

spam support (domains)

domain used in spam operation comparescience.com/vi/the-universe-is-made-of-protons-neutrons-electrons

RaccoonStealer botnet controller @172.67.190.94

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. RaccoonStealer botnet controller located at 172.67.190.94 on port 80 (using HTTP GET): hXXp://telegin.top/agrybirdsgamerept $ dig +short telegin.top 172.67.190.94 Referencing malware binaries (MD5 hash): 031c3e6879c19733ed4ce32e0e83f428 — AV detection:… Читать далее RaccoonStealer botnet controller @172.67.190.94

TeamBot botnet controller @104.21.57.122

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. TeamBot botnet controller located at 104.21.57.122 on port 80 (using HTTP GET): hXXp://telegin.top/capibar $ dig +short telegin.top 104.21.57.122 Referencing malware binaries (MD5 hash): 12e085599119bedc6c218ad1c339bc60 — AV detection:… Читать далее TeamBot botnet controller @104.21.57.122

Loki botnet controller @172.67.219.104

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 172.67.219.104 on port 80 (using HTTP POST): hXXp://74f26d34ffff049368a6cff8812f86ee.gq/BN111/fre.php $ dig +short 74f26d34ffff049368a6cff8812f86ee.gq 172.67.219.104 Referencing malware binaries (MD5 hash): 5e11788d890d97045cd8d830b25527f6 — AV detection:… Читать далее Loki botnet controller @172.67.219.104

AZORult botnet controller @172.67.186.23

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. AZORult botnet controller located at 172.67.186.23 on port 80 (using HTTP POST): hXXp://21slg.xyz/PL341/index.php $ dig +short 21slg.xyz 172.67.186.23

Loki botnet controller @172.67.143.28

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 172.67.143.28 on port 80 (using HTTP POST): hXXp://jyiikm.xyz/dby/w2/fre.php $ dig +short jyiikm.xyz 172.67.143.28 Referencing malware binaries (MD5 hash): d576c9dc10e4705d5ee7a2d75349f45e — AV detection:… Читать далее Loki botnet controller @172.67.143.28

OskiStealer botnet controller @104.21.86.112

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. OskiStealer botnet controller located at 104.21.86.112 on port 80 (using HTTP POST): hXXp://stanelectronics.xyz/6.jpg $ dig +short stanelectronics.xyz 104.21.86.112 Referencing malware binaries (MD5 hash): e029f21834d5ceea1006d1658768f4dc — AV detection:… Читать далее OskiStealer botnet controller @104.21.86.112

RaccoonStealer botnet controller @104.21.79.96

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. RaccoonStealer botnet controller located at 104.21.79.96 on port 80 (using HTTP GET): hXXp://telegka.top/sa115bayon $ dig +short telegka.top 104.21.79.96 Referencing malware binaries (MD5 hash): 00502f2c9c6bfcaa288f596aac9b415b — AV detection:… Читать далее RaccoonStealer botnet controller @104.21.79.96

Malware botnet controller @104.21.87.76

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 104.21.87.76 on port 80 (using HTTP GET): hXXp://hsiens.xyz/addInstall.php $ dig +short hsiens.xyz 104.21.87.76 Referencing malware binaries (MD5 hash): 00d7b192e8017f1140bb2ee59456dbca — AV detection:… Читать далее Malware botnet controller @104.21.87.76