Рубрика: google.com

The host at this IP address (35.239.243.107) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://telescopelms.com/document7806.zip https://telescopelms.com/document4753.zip AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 107.243.239.35.bc.googleusercontent.com

The host at this IP address (35.193.38.118) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://www.noticiare.com.br/oihpj/jmjhf2/ AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 118.38.193.35.bc.googleusercontent.com

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 74.125.142.108 on port 587 TCP (SMTP from/to: ugosouth400@gmail.com): $ telnet 74.125.142.108 587 Trying 74.125.142.108… Connected to… Читать далее HawkEye botnet controller @74.125.142.108

The host at this IP address (35.238.218.46) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: http://newsite.modernformslights.com/wp-content/azi-nq-489998/ http://newsite.modernformslights.com/wp-content/FILE/si6tf7m-98252522-3462445217-gb8w-7o4lai/ http://newsite.modernformslights.com/wp-content/open_module/open_cloud/4819984528326_e84088eL5EnnO/ AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 46.218.238.35.bc.googleusercontent.com

The host at this IP address (34.80.153.8) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://littlerosespace.com/css/b3To6XlfV/ https://littlerosespace.com/css/sites/ AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 8.153.80.34.bc.googleusercontent.com

The host at this IP address is being (ab)used to «listbomb» email addresses: From: katriane@designdevelopment.in Subject: Professional Website Design Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================ In order… Читать далее Abused / misconfigured newsletter service (listbombing)

The host at this IP address is being (ab)used to «listbomb» email addresses: From: ‘HUA-HIN SUPSIRI PROPERTY’ <info@huahinsupsiri.com> Subject: Merry Cristmas and Happy New Year 2020 Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk… Читать далее Abused / misconfigured newsletter service (listbombing)

Spammer hosting located here: http://khoskas.duckdns.org/crpto -> http://vlkproyal.info/?target=-X —> http://tracking.jimtedmorris.com/aff_c?offer_id=X —> http://de.the-cryptosoftware.com/?TrackingID=X —-> https://grandefex.com/ $ dig +short grandefex.com 34.98.73.147 Spam sample ================================= Received: from kgtra.minakros.info (17rkrh21.ni.net.tr [95.173.179.17]) by X (Postfix) with ESMTP id X for <Xh>; Fri, 27 Dec 2019 X X-Apparently-To: X Fri, 06 Dec 2019 X Authentication-Results: X Received-SPF: pass (domain of gmail.com designates… Читать далее Spammer hosting @34.98.73.147

Spammer hosting located here: http://8s4.us/YGHaz -> https://trackyour.delivery/?r=CH —> https://package-tracking.buzz/CH/ —> https://package-tracking.xyz/CH/ —> https://package-tracking.blue/CH/ —> https://www.uppwytracking.com/X —-> http://oinkclick.host/api/tracking/visit-r?cid=X ——> http://app.clickpigs.com/api/tracking/visit-r?cid=X ——> https://pigsmix.com/id/6/?aid=X ——-> https://a.gymtracker.net/v2/?lng=X $ dig +short a.gymtracker.net 104.26.6.12 104.26.7.12

The host at this IP address is emitting spam emails. Spam sample ========================================= From: emile@designdevelopment.in Subject: Professional Website Design =========================================