Рубрика: google.com

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 35.193.121.248 on port 5005 TCP: $ telnet 35.193.121.248 5005 Trying 35.193.121.248… Connected to 35.193.121.248. Escape character… Читать далее njrat botnet controller @35.193.121.248

The host at this IP address is being (ab)used to «listbomb» email addresses: From: Carol Edwards <caroledwards@adthrive.com> Subject: XXX Will Earn More at AdThrive — We Guarantee It Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages… Читать далее Abused / misconfigured newsletter service (listbombing)

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 34.121.150.14 on port 4542 TCP: $ telnet 34.121.150.14 4542 Trying 34.121.150.14… Connected to 34.121.150.14. Escape character… Читать далее BitRAT botnet controller @34.121.150.14

irsassistancescenter.com has address 35.240.183.95

84 t-shirt spam domains land here. (Correction 161 domains and a long history…) There is no point listing them because they change regularly. Here is just ONE: trontee.com

onlineidchase07bredirect.support has address 35.232.10.102 verifyonlineidchase07b.support has address 35.232.10.102

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 35.238.66.156 on port 80 (using HTTP POST): hXXp://akiwinds.duckdns.org/chats/fre.php $ dig +short akiwinds.duckdns.org 35.238.66.156 $ nslookup 35.238.66.156 156.66.238.35.bc.googleusercontent.com Other malicious domain names hosted… Читать далее Loki botnet controller @35.238.66.156

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 35.238.66.156 on port 80 (using HTTP POST): hXXp://frinqy.gq/apps/fre.php $ dig +short frinqy.gq 35.238.66.156 $ nslookup 35.238.66.156 156.66.238.35.bc.googleusercontent.com Other malicious domain names hosted… Читать далее Loki botnet controller @35.238.66.156

Received: from mail-ot1-f67.google.com (mail-ot1-f67.google.com [209.85.210.67]) From: «Marla J. Martino» <tranngan225@gmail.com> Reply-To: tranngan225@gmail.com Date: Fri, 1 Oct 2021 07:25:54 -0700 Subject: [SALE OFF] []’s Family Tee Shirt Collection https://tanametee.com/searchname?q=[] 68.65.120.217 https://teefaname004.com/search?q=[] 198.54.120.85 https://dhktshop.com/_/search?q=[] 35.244.233.73

34.84.186.54 csrf-pb.shop 34.84.186.54 my-soflbank-jp.com 34.84.186.54 mb-solfbank-jp.co 34.84.186.54 info-server.shop 34.84.186.54 soflbank.top 34.84.186.54 my-soflbank-jp.top 34.84.186.54 my-solfbank-jp.co 34.84.186.54 inform-bank.shop 34.84.186.54 etc-malfei-jp.co 34.84.186.54 id-mb-solfbank-jp.co 34.84.186.54 softbank-jp.top 34.84.186.54 my-softbank-jp.shop 34.84.186.54 my-softbank-jp.top