microsoft.com — Страница 58

Vjw0rm botnet controller @20.41.98.11

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 20.41.98.11 on port 52019 TCP: $ telnet 20.41.98.11 52019 Trying 20.41.98.11… Connected to 20.41.98.11. Escape character… Читать далее Vjw0rm botnet controller @20.41.98.11

Vjw0rm botnet controller @40.117.139.198

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 40.117.139.198 on port 7974 TCP: $ telnet 40.117.139.198 7974 Trying 40.117.139.198… Connected to 40.117.139.198. Escape character… Читать далее Vjw0rm botnet controller @40.117.139.198

Spamming magipapa.club / pinkvioly.com / senchones-consclean.icu / wingcards.com / silencil.com etc.

Tell us where to send your bottle FOX HEALTH SPECIAL REPORT: ‘Nature’s Oxycontin’ Jamie Richardson from Dallas, Texas just netted one of the biggest deals in Shark Tank history with this pain-relieving product. This breakthrough product not only alleviates pain, it also: — Reduces social anxiety — Reduces cigarette addiction — Regulates blood sugar —… Читать далее Spamming magipapa.club / pinkvioly.com / senchones-consclean.icu / wingcards.com / silencil.com etc.

AsyncRAT botnet controller @52.250.60.164

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 52.250.60.164 on port 6821 TCP: $ telnet 52.250.60.164 6821 Trying 52.250.60.164… Connected to 52.250.60.164. Escape character… Читать далее AsyncRAT botnet controller @52.250.60.164

AsyncRAT botnet controller @20.199.112.16

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 20.199.112.16 on port 3535 TCP: $ telnet 20.199.112.16 3535 Trying 20.199.112.16… Connected to 20.199.112.16. Escape character… Читать далее AsyncRAT botnet controller @20.199.112.16

phishing server

hXXps://fb-pageinfo-100000168877451232651958952610.tk/confirmreg.htm fb-pagecontent-1000277530354637288341.tk fb-pagecontent-1000277530354637288344.tk fb-pagecontent-1000277530354637288346.tk fb-pagecontent-1000277530354637288349.tk fb-pagecontent-1000277530354637288342.tk fb-pageevent-10000016566738493040270.tk fb-pageinfo-10000012635487269514685756205.tk fb-pageevent-10000016566738493040268.tk fb-pagecontent-1000249652131203456439.tk fb-pagecontent-1000249652131203456437.tk fb-pagecontent-1000249652131203456432.tk fb-privacy-1000004248715562451141-tw.tk revolution-admin-1000000200300123456789102345359.tk revolution-admin-1000000200300123456789102345353.tk revolution-admin-1000000200300123456789102345357.tk revolution-admin-1000000200300123456789102345367.tk revolution-admin-1000000200300123456789102345361.tk revolution-admin-1000000200300123456789102345364.tk revolution-admin-1000000200300123456789102345363.tk revolution-admin-1000000200300123456789102345370.tk revolution-admin-1000000200300123456789102345365.tk revolution-admin-1000000200300123456789102345369.tk revolution-admin-1000000200300123456789102345362.tk revolution-admin-1000000200300123456789102345368.tk revolution-admin-10000002003001234567891023453700.tk fb-privacy-1000004248715562451146-tw.tk fb-privacy-1000004248715562451156-tw.tk fb-privacy-1000004248715562451148-tw.tk fb-privacy-1000004248715562451144-tw.tk fb-privacy-1000004248715562451158-tw.tk fb-privacy-1000004248715562451160-tw.tk fb-privacy-1000004248715562451150-tw.tk fb-privacy-1000004248715562451145-tw.tk fb-privacy-1000004248715562451147-tw.tk fb-privacy-1000004248715562451152-tw.tk fb-privacy-1000004248715562451149-tw.tk fb-privacy-1000004248715562451143-tw.tk fb-privacy-1000004248715562451154-tw.tk fb-privacy-1000004248715562451159-tw.tk fb-privacy-1000004248715562451151-tw.tk fb-privacy-1000004248715562451157-tw.tk fb-pagecontent-1000249652131203456436.tk fb-pageevent-10000016566738493040264.tk fb-pagecontent-1000249652131203456433.tk fb-pagecontent-1000249652131203456431.tk fb-pagecontent-1000249652131203456438.tk fb-pageevent-10000016566738493040267.tk fb-pageevent-10000016566738493040266.tk fb-pagecontent-1000249652131203456430.tk fb-pagecontent-1000249652131203456435.tk fb-pageevent-10000016566738493040265.tk revolution-admin-1000000200300123456789102345356.tk revolution-admin-1000000200300123456789102345354.tk revolution-admin-10000002003001234567891023453522.tk… Читать далее phishing server

Vjw0rm botnet controller @52.231.26.149

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 52.231.26.149 on port 6903 TCP: $ telnet 52.231.26.149 6903 Trying 52.231.26.149… Connected to 52.231.26.149. Escape character… Читать далее Vjw0rm botnet controller @52.231.26.149

BitRAT botnet controller @20.80.15.232

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 20.80.15.232 on port 2222 TCP: $ telnet 20.80.15.232 2222 Trying 20.80.15.232… Connected to 20.80.15.232. Escape character… Читать далее BitRAT botnet controller @20.80.15.232

sqlbiteach.com

The following IP addresses are sending high quantities of spam for the domain sqlbiteach.com. The domain is advertising seminars/training on the use of Microsoft products. The domain sqlbiteach.com is hosted on Microsoft Azure. SENDING IPs: 40.121.95.7 ip100.sqlbiteach.com 40.121.235.70 ip102.sqlbiteach.com 52.152.233.140 ip103.sqlbiteach.com 52.170.24.174 ip10.sqlbiteach.com 52.226.22.72 ip08.sqlbiteach.com 104.41.129.178 ip09.sqlbiteach.com SPAM SAMPLE: Received: from ip102.sqlbiteach.com (ip102.sqlbiteach.com [40.121.235.70]) Date:… Читать далее sqlbiteach.com