Рубрика: microsoft.com

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 20.226.20.129 on port 80 (using HTTP POST): hXXp://iofajfioshnguiosfui.from-pa.com/novidades/inspecionando.php $ dig +short iofajfioshnguiosfui.from-pa.com 20.226.20.129 Referencing malware binaries (MD5 hash): 3030d0b1335357da24960cd99e54ef02 — AV detection:… Читать далее Malware botnet controller @20.226.20.129

20.216.24.101|secure06-wells.com|2022-04-18 19:46:43

52.184.18.103|bgsecureaiamato09y-chase.com|2022-04-09 21:28:06 52.184.18.103|bocotkelem01a-chase.com|2022-04-09 08:11:59 52.184.18.103|chase-secure07a.management-help-customer2022.com|2022-04-09 15:01:10 52.184.18.103|chase.clepet-atami.com|2022-04-08 15:03:59 52.184.18.103|chase.costumer-care2022.com|2022-04-11 15:01:34 52.184.18.103|chase.help-customer-mail2022.com|2022-04-09 15:01:16 52.184.18.103|chase.index.mangagement-secure08.com|2022-04-08 15:03:57 52.184.18.103|chase.information12.problem-unusual-activity-account.com|2022-04-12 15:01:22 52.184.18.103|chase.secure05an.com|2022-04-05 15:06:42 52.184.18.103|chase.secure05as.com|2022-04-05 15:04:05 52.184.18.103|chase.secure05at.com|2022-04-05 15:01:19 52.184.18.103|chase.secure06cs.com|2022-04-05 15:03:59 52.184.18.103|chase.secure06ur.com|2022-04-08 15:03:55 52.184.18.103|chase.secure07ca.com|2022-04-05 15:03:17 52.184.18.103|chase.secure07sm.com|2022-04-08 15:03:59 52.184.18.103|chase.secure08ct.com|2022-04-08 15:04:03 52.184.18.103|chase.secure09.help-management-security-info2022.com|2022-04-10 15:01:22 52.184.18.103|dbsecuremodeko09k-chase.com|2022-04-09 19:41:15 52.184.18.103|dbsecurepadiah09w-chase.com|2022-04-13 21:46:08 52.184.18.103|dcsecureadiakcnt02b-chase.com|2022-04-05 23:45:24 52.184.18.103|dfsecuremandehkn06y-chase.com|2022-04-07 08:13:28 52.184.18.103|dggsecurebalnjo05r-chase.com|2022-04-15 15:01:27 52.184.18.103|dhhsecuremodekobana06s-chase.com|2022-04-11 21:31:24 52.184.18.103|dhsecurebanget07p-chase.com|2022-04-06 14:47:04 52.184.18.103|dkksecurehancua09r-chase.com|2022-04-11 17:32:50 52.184.18.103|dllsecurebadabuak05yy-chase.com|2022-04-11 08:12:58 52.184.18.103|dmsecurekuneii03u-chase.com|2022-04-10 08:11:49 52.184.18.103|dnsecuresantiang07u-chase.com|2022-04-09… Читать далее phishing server

20.230.61.235|heldesk-boa-update.com|2022-04-16 11:34:42

GoDaddy hosts the A record and provides domain registration fof the domain openaccessjournalsnews.com This domain is registered by OMICS, a publisher of open-access journals that solicits contributions and (by implication) subscriptions through spam sent to scraped, purchased or appended email addresses. This domain appears in dropbox email addresses in Reply-to headers of spam, which means… Читать далее Spam MX (Opast Publishing Group) (OMICS)

20.211.113.86|artemarusshiola.com|2022-04-14 22:46:34 20.211.113.86|artembulletshiola.com|2022-04-12 13:33:11 20.211.113.86|artemevgenevichshiola.com|2022-04-14 06:56:16 20.211.113.86|artemfeelshiola.com|2022-04-12 16:17:17

20.127.2.83|auth05-wells.com|2022-04-14 00:21:26 20.127.2.83|secure-28wells.com|2022-04-13 11:41:40 20.127.2.83|secure84-chase.com|2022-04-14 01:54:17 20.127.2.83|secure98-wells.com|2022-04-13 19:41:59

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 20.197.177.145 on port 80 (using HTTP POST): hXXp://20.197.177.145/MEU/serv.php Referencing malware binaries (MD5 hash): 9df8bf2e2d212f8a8ce51c5d91712478 — AV detection: 4 / 59 (6.78)

20.77.56.159|irs-manage-profile-refund.com|2022-04-13 00:40:08

apps.punyapajatulaichase.com has address 20.89.131.194 apps.managementalrtchase.com has address 20.89.131.194 apps.managementaccchase.com has address 20.89.131.194