Рубрика: selectel.ru

Received: from s12.megojom.ru (46.148.224.235 [46.148.224.235]) Date: Mon, 6 Dec 2021 10:2x:xx +0000 From: Aleksandr <info@s12.megojom.ru> Subject: Предложение 46.148.224.234 grehemon.ru 46.148.224.235 megojom.ru 46.148.224.236 tefalongo.ru 46.148.224.237 eseneno.ru 46.148.224.238 derwerer.r

The host at this IP address is currently being used to distribute malware. Malware distribution located here: hXXp://petknorra.com/index.php petknorra.com. 600 IN A 95.213.165.235 Referencing malware binaries (MD5 hash): 4e221de7e53d00818f4bd091ee3f85a6 — AV detection: 25 / 67 (37.31)

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 45.8.124.82 on port 443: $ telnet 45.8.124.82 443 Trying 45.8.124.82… Connected to 45.8.124.82. Escape character is… Читать далее Malware botnet controller @45.8.124.82

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. ArkeiStealer botnet controller located at 31.184.249.165 on port 80 (using HTTP GET): hXXp://file-file-host4.com/tratata.php file-file-host4.com. 600 IN A 31.184.249.165 Smoke Loader botnet controller located at 31.184.249.165 on port… Читать далее Malware distribution & malware botnet controllers @31.184.249.165

Received: from s6.megojom.ru (megojom.ru [94.26.251.138]) Date: Fri, 3 Dec 2021 06:1x:xx +0000 From: Aleksandr <info@s6.megojom.ru> Subject: Предложение 94.26.251.138 megojom.ru 94.26.251.139 tefalongo.ru 94.26.251.140 eseneno.ru 94.26.251.141 grehemon.ru 94.26.251.142 derwerer.ru

194.87.185.14 bos24login.com 2021-11-29 15:03:56 194.87.185.14 bos24online.com 2021-12-02 09:45:36 194.87.185.14 citationsherbe.at 2021-12-01 22:09:17 194.87.185.14 companynet-mbank.com 2021-12-02 15:12:21 194.87.185.14 companynet-mbank.net 2021-11-30 19:11:24 194.87.185.14 eonsabode.at 2021-12-01 16:31:21 194.87.185.14 flowsrectifie.at 2021-12-02 07:41:33 194.87.185.14 gbn05.18rbcgy.xyz 2021-09-30 15:47:27 194.87.185.14 idea-secure-login.com 2021-12-01 22:25:46 194.87.185.14 ideabank-logowanie.net 2021-12-02 01:16:18 194.87.185.14 lpkobiznes.cc 2021-12-02 01:15:53 194.87.185.14 lpkobiznes.me 2021-12-02 01:15:59 194.87.185.14 millenet-login.com 2021-12-01 02:16:32 194.87.185.14 odatingactualiz.at 2021-12-02… Читать далее Hosting phishing domains

Received: from s7.megojom.ru (megojom.ru [81.163.24.106]) Date: Thu, 2 Dec 2021 07:3x:xx +0000 From: Aleksandr <info@s7.megojom.ru> Subject: Предложение 81.163.24.106 megojom.ru 81.163.24.107 tefalongo.ru 81.163.24.108 eseneno.ru 81.163.24.109 derwerer.ru 81.163.24.110 welbryh.ru

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 95.213.216.194 on port 443: $ telnet 95.213.216.194 443 Trying 95.213.216.194… Connected to 95.213.216.194. Escape character is… Читать далее Malware botnet controller @95.213.216.194

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. ArkeiStealer botnet controller located at 95.213.165.249 on port 80 (using HTTP GET): hXXp://file-file-host4.com/tratata.php $ dig +short file-file-host4.com 95.213.165.249 Referencing malware binaries (MD5 hash): 16a32ce5e3bde626c4fe08878a2c3682 — AV detection:… Читать далее ArkeiStealer botnet controller @95.213.165.249

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 45.8.124.17 on port 443: $ telnet 45.8.124.17 443 Trying 45.8.124.17… Connected to 45.8.124.17. Escape character is… Читать далее Malware botnet controllers @45.8.124.17