Рубрика: microsoft.com

The following IP addresses are sending high volume of spam. The owners of remotebiclass.com appear to be running a spam operation. All sending IP addresses are on the Microsoft Azure cloud. SENDING IPs: 40.88.8.128 40.88.12.203 40.117.213.199 52.152.236.66 52.188.49.246 52.224.162.196 SPAM SAMPLE: Received: from ip103.remotebiclass.com (ip103.remotebiclass.com [52.224.162.196]) Date: Sun, 21 Mar 2021 13:##:## -0400 From: <x>… Читать далее remotebiclass.com

The following IP addresses are sending high volume of spam. The owners of remotebiclass.com appear to be running a spam operation. All sending IP addresses are on the Microsoft Azure cloud. SENDING IPs: 40.88.8.128 40.88.12.203 40.117.213.199 52.152.236.66 52.188.49.246 52.224.162.196 SPAM SAMPLE: Received: from ip103.remotebiclass.com (ip103.remotebiclass.com [52.224.162.196]) Date: Sun, 21 Mar 2021 13:##:## -0400 From: <x>… Читать далее remotebiclass.com

The following IP addresses are sending high volume of spam. The owners of remotebiclass.com appear to be running a spam operation. All sending IP addresses are on the Microsoft Azure cloud. SENDING IPs: 40.88.8.128 40.88.12.203 40.117.213.199 52.152.236.66 52.188.49.246 52.224.162.196 SPAM SAMPLE: Received: from ip103.remotebiclass.com (ip103.remotebiclass.com [52.224.162.196]) Date: Sun, 21 Mar 2021 13:##:## -0400 From: <x>… Читать далее remotebiclass.com

Dutch spamming bmetrack.com Received: from ytyy-24.norwayeast.cloudapp.azure.com (HELO scbh.threadsafe.org) (51.13.82.134) by xxx; Mon, 22 Mar 2021 17:22:02 +0000 Date: Mon, 22 Mar 2021 18:01:50 +0100 From: NOS Bitcoin <bounce@threadsafe.org> Subject: Word miljonair in 4 maanden Message-ID:<xx.xx@xx.1netcQR.com> Content-Type: text/html; charset=»utf-8″ Content-Transfer-Encoding: 8bit Received:from radio.bluesmi.co.uk (radio.bluesmi.co.uk (may be forged)) by mail114c7.megamailservers.com (8.14.9/8.13.1) with ESMTP id xx for <chogan33@sasktel.net>;… Читать далее Spamming bitcoin fraud

https://google@www.indice.com/redir.asp?pagina=http://qti.ai/9uJrEQ >>> http://qti.ai/9uJrEQ >>> https://giveuglow.com/0/0/0/06f897486390b5a4b8d572437fea2d79/ysf// >>> https://healthcareandnutritions.com/?63e971faae99c31274338ac2b2492e51 www.indice.com. 299 IN A 82.223.99.211 qti.ai. 3535 IN A 107.180.43.9 giveuglow.com. 299 IN A 23.94.251.185 healthcareandnutritions.com. 299 IN A 172.67.154.238 healthcareandnutritions.com. 299 IN A 104.21.6.50 ____________ Received: from vdds-52.francecentral.cloudapp.azure.com (HELO pyx8.pimpyourbrilliance.com) (51.103.83.70) by xxxx; Tue, 23 Mar 2021 12:21:38 +0000 From: B|tco|n Bu||etin <lCbfL@giorgioss.com> To: xx Reply-To: reply_to@x-x.pimpyourbrilliance.com… Читать далее Spamming bitcoin fraud

The host at this IP address is emitting spam emails. Spam sample ========================================= From: mark_saxena@outlook.com Subject: Re: Follow-Up =========================================

http://link.argifocus.com/4LA-092920?url=onon.in/099mU#kPZpLT4noOyxOP4CnKwpeTJd2WbRfRCPYUifQnxV5yMV >>> http://onon.in/099mU#kPZpLT4noOyxOP4CnKwpeTJd2WbRfRCPYUifQnxV5yMV >>> https://popularfitgen.com/0/0/0/71fdae89ecd1b54633cb40e26d849cd2/medb/24/ >>> https://healthcareandnutritions.com/ ;; QUESTION SECTION: ;link.argifocus.com. IN A ;; ANSWER SECTION: link.argifocus.com. 3599 IN CNAME focrpt101.argifocus.com. focrpt101.argifocus.com. 3599 IN A 205.142.96.62 onon.in. 14399 IN A 162.241.149.157 ____________ Received: from vdds-28.centralindia.cloudapp.azure.com (HELO adostudio.it) (20.197.63.3) by xx; Wed, 24 Mar 2021 10:xx:26 +0000 Received: from present.shiflurence.net (present.shiflurence.net [40.85.254.69]) by mx.kpnmail.nl (Halon) with… Читать далее Spamming Bitcoin fraud

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 40.71.91.165 on port 1993 TCP: $ telnet 40.71.91.165 1993 Trying 40.71.91.165… Connected to 40.71.91.165. Escape character… Читать далее Vjw0rm botnet controller @40.71.91.165

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 20.194.23.12 on port 5901 TCP: $ telnet 20.194.23.12 5901 Trying 20.194.23.12… Connected to 20.194.23.12. Escape character… Читать далее Vjw0rm botnet controller @20.194.23.12

fe-shop18.ru. 3599 IN NS ns2.pe-sipodemos.com. fe-shop18.ru. 3599 IN NS ns1.pe-sipodemos.com. ns1.pe-sipodemos.com. 299 IN A 40.67.244.144 ns2.pe-sipodemos.com. 299 IN A 20.72.208.97 40.67.244.144 ns1.pe-aps.com 2021-04-10 07:01:38 40.67.244.144 ns1.pe-sipodemos.com 2021-04-09 22:05:03 20.72.208.97 ns2.pe-aps.com 2021-04-10 07:01:38 20.72.208.97 ns2.pe-sipodemos.com 2021-04-10 06:55:14 Phishing and carder DNS domains: @ns_.pe-aps.com asialloyds.com com-portal.net lieusim.com sdfsdfsdfsqweqweqweqwe.com sudohackers.com @ns_.pe-sipodemos.com 1823sc0t6a-28stup934.com 1s1c01t1a1-7acc771.com 1sc0ti1a171-7a1cc7.com 2021scot1a187.com 4sc0ta729462349-2374.com 4sc7ta7-ac09ia.com 58345-7sc0ta9up1nf0.com… Читать далее Dirty range: Hosting phishing and carder DNS servers