Metamorfo botnet controller @104.21.34.196

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Metamorfo botnet controller located at 104.21.34.196 on port 80 (using HTTP GET): hXXp://infodatt.com/cookieDatabase/ $ dig +short infodatt.com 104.21.34.196 Other malicious domain names hosted on this IP address:… Читать далее Metamorfo botnet controller @104.21.34.196

RaccoonStealer botnet controller @172.67.168.153

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. RaccoonStealer botnet controller located at 172.67.168.153 on port 80 (using HTTP GET): hXXp://telegatt.top/agrybirdsgamerept $ dig +short telegatt.top 172.67.168.153 Referencing malware binaries (MD5 hash): 56ac1130ae56b1fe76660923ededc39c — AV detection:… Читать далее RaccoonStealer botnet controller @172.67.168.153

Metamorfo botnet controller @172.67.215.87

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Metamorfo botnet controller located at 172.67.215.87 on port 80 (using HTTP GET): hXXp://bcorvo.com/cookieDatabase/ $ dig +short bcorvo.com 172.67.215.87 Other malicious domain names hosted on this IP address:… Читать далее Metamorfo botnet controller @172.67.215.87

RaccoonStealer botnet controller @104.21.26.237

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. RaccoonStealer botnet controller located at 104.21.26.237 on port 80 (using HTTP GET): hXXp://telegatt.top/agrybirdsgamerept $ dig +short telegatt.top 104.21.26.237 Referencing malware binaries (MD5 hash): a89e87f448f4a29cd41eebc3c1b2807a — AV detection:… Читать далее RaccoonStealer botnet controller @104.21.26.237

PredictLabs / Sphere Digital

Spam Subject: Welcome To Your Life Insurance Spam Sender: Flower Shop Design — 3000 Custer Road Suite 270 Numb 541 Plano, TX 75075 US ——————————————————————————— Payload: 104.22.9.151 = quotes.ecoverage.com = quotes.ecoverage.com.cdn.cloudflare.net ——————————————————————————— DDomain Name: ecoverage.com Registry Domain ID: 4212043_DOMAIN_COM-VRSN Registrar WHOIS Server: WHOIS.ENOM.COM Registrar URL: WWW.ENOM.COM Updated Date: 2019-08-31T03:58:18.00Z Creation Date: 1999-01-19T05:00:00.00Z Registrar Registration Expiration… Читать далее PredictLabs / Sphere Digital

RaccoonStealer botnet controller @104.21.61.215

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. RaccoonStealer botnet controller located at 104.21.61.215 on port 80 (using HTTP GET): hXXp://tgmirror.top/stevuitreen $ dig +short tgmirror.top 104.21.61.215 Referencing malware binaries (MD5 hash): 209ed3853c9ac9a5a76fc48808869188 — AV detection:… Читать далее RaccoonStealer botnet controller @104.21.61.215

RaccoonStealer botnet controller @104.21.31.246

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. RaccoonStealer botnet controller located at 104.21.31.246 on port 80 (using HTTP GET): hXXp://telemirror.top/teneleven11pro $ dig +short telemirror.top 104.21.31.246 Other malicious domain names hosted on this IP address:… Читать далее RaccoonStealer botnet controller @104.21.31.246

RedLineStealer botnet controller @104.21.66.135

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 104.21.66.135 on port 443 TCP: $ telnet 104.21.66.135 443 Trying 104.21.66.135… Connected to 104.21.66.135. Escape character… Читать далее RedLineStealer botnet controller @104.21.66.135

RedLineStealer botnet controller @172.67.169.55

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 172.67.169.55 on port 443 TCP: $ telnet 172.67.169.55 443 Trying 172.67.169.55… Connected to 172.67.169.55. Escape character… Читать далее RedLineStealer botnet controller @172.67.169.55