Рубрика: contabo.de

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Socelars botnet controller located at 161.97.64.205 on port 80 (using HTTP POST): hXXp://www.wvmjack.com/ $ dig +short www.wvmjack.com 161.97.64.205 $ nslookup 161.97.64.205 vmi779689.contaboserver.net Referencing malware binaries (MD5 hash):… Читать далее Socelars botnet controller @161.97.64.205

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Socelars botnet controller located at 185.169.252.236 on port 80 (using HTTP POST): hXXp://www.adcbnwa.com/Home/Index/hdecny $ dig +short www.adcbnwa.com 185.169.252.236 $ nslookup 185.169.252.236 vmi803628.contaboserver.net Referencing malware binaries (MD5 hash):… Читать далее Socelars botnet controller @185.169.252.236

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Socelars botnet controller located at 185.169.252.236 on port 80 (using HTTP POST): hXXp://www.adcbnwa.com/Home/Index/hdecny $ dig +short www.adcbnwa.com 185.169.252.236 $ nslookup 185.169.252.236 vmi803628.contaboserver.net Referencing malware binaries (MD5 hash):… Читать далее Socelars botnet controller @185.169.252.236

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Socelars botnet controller located at 164.68.101.131 on port 80 (using HTTP POST): hXXp://www.ebooktype.com/Home/Index/lkdinl $ dig +short www.ebooktype.com 164.68.101.131 $ nslookup 164.68.101.131 vmi808518.contaboserver.net Referencing malware binaries (MD5 hash):… Читать далее Socelars botnet controller @164.68.101.131

This IP address is sending spam for OMICS, a publisher of «open-access» journals that solicits contributions and (by implication) subscriptions through spam sent to scraped, purchased or appended email addresses. OMICS is an extremely high-volume of its type, and has over 200 current and closed SBL listings. SPAM SAMPLE: Received: from e1.academichub.biz (vmi805235.contaboserver.net [167.86.67.89]) Received:… Читать далее Spam Emitter (OMICS)

;; QUESTION SECTION: ;wealthy-investors.com. IN A ;; ANSWER SECTION: wealthy-investors.com. 240 IN A 23.231.40.101 wealthy-investors.com. 240 IN A 95.217.232.235 wealthy-investors.com. 240 IN A 104.223.153.137 wealthy-investors.com. 240 IN A 144.91.89.195 wealthy-investors.com. 240 IN A 31.207.45.238

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Socelars botnet controller located at 185.169.252.236 on port 80 (using HTTP POST): hXXp://www.ekgcp.com/Home/Index/hdecny $ dig +short www.ekgcp.com 185.169.252.236 $ nslookup 185.169.252.236 vmi803628.contaboserver.net Referencing malware binaries (MD5 hash):… Читать далее Socelars botnet controller @185.169.252.236

185.252.234.147|1lta-com.wtf|2022-02-18 15:53:26 185.252.234.147|3f3.info|2022-02-08 14:19:07 185.252.234.147|5port.us|2022-02-18 05:46:10 185.252.234.147|9qud.ws|2022-02-10 21:37:01 185.252.234.147|a-pplemapalatamerica.cc|2022-02-18 15:11:47 185.252.234.147|account-xiaom1.in|2022-02-18 04:41:24 185.252.234.147|af-jre.top|2022-02-22 00:07:20 185.252.234.147|ai-ppl.co|2022-02-15 07:46:35 185.252.234.147|ai-ppl.xyz|2022-02-13 12:46:25 185.252.234.147|app-le-id-i.cloud|2022-02-19 08:11:07 185.252.234.147|app-serch-gt.cc|2022-02-18 11:37:10 185.252.234.147|app1jk.com|2022-02-12 23:36:15 185.252.234.147|appe-find.info|2022-02-08 11:08:08 185.252.234.147|appl-us.cc|2022-02-16 21:21:26 185.252.234.147|apple-icloud.ws|2022-02-13 15:01:16 185.252.234.147|apple-id.ws|2022-02-19 08:11:14 185.252.234.147|apple-jr.com|2022-02-18 05:46:25 185.252.234.147|apple-ld.in|2022-02-14 20:07:50 185.252.234.147|apple-login.ws|2022-02-09 21:01:41 185.252.234.147|apple-pr1.cc|2022-02-14 15:04:01 185.252.234.147|apple-sopp-icloud.cc|2022-02-21 22:16:10 185.252.234.147|apple.com.ec|2022-02-22 02:40:43 185.252.234.147|apple.com.ht|2022-02-10 15:01:08 185.252.234.147|apple.com.nf|2022-02-21 20:44:26 185.252.234.147|apple.net.pe|2022-02-04 16:03:03 185.252.234.147|appleid-mx.com|2022-02-13 01:41:25 185.252.234.147|appleid.com.kz|2022-02-11 15:37:23 185.252.234.147|applela.co|2022-02-19… Читать далее phishing server

bank phish securecitizensbank.net 2022-02-21 18:57:45 Fake finance/loan company bespokefundingltd.com 2022-02-15 08:14:07 fake logistics ecarrierlogistics.com 2022-01-17 14:34:34 fake lawfirm almondlfirm.com 2022-01-10 14:23:45 fake realstate company agronfms.com 2021-12-14 16:52:35 fake logistics cross-border-logistics.com 2021-11-13 21:57:43 fake bank limitedstandardbk.com 2021-11-13 07:36:16 fake logistics crossborder-logistics.com 2021-11-12 06:03:18 Fake bank concordtrstbnk.com 2021-10-25 19:41:52 securecitizensbank.net has address 161.97.154.73 bespokefundingltd.com has address 161.97.154.73… Читать далее phishing / fraud server

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Socelars botnet controller located at 178.238.230.180 on port 80 (using HTTP POST): hXXp://www.cakederam.com/Home/Index/djksye $ dig +short www.cakederam.com 178.238.230.180 $ nslookup 178.238.230.180 vmi476613.contaboserver.net