Рубрика: selectel.ru

Received: from s8.megojom.ru (megojom.ru [94.26.250.157]) Date: Wed, 17 Nov 2021 15:0x:xx +0000 From: Aleksandr <info@s8.megojom.ru> Subject: Предложение 94.26.250.114 kroshem.ru 94.26.250.115 opengmon.ru 94.26.250.116 jombengon.ru 94.26.250.117 alomengo.ru 94.26.250.118 veromeng.ru 94.26.250.154 eseneno.ru 94.26.250.155 derwerer.ru 94.26.250.156 yeremont.ru 94.26.250.157 megojom.ru 94.26.250.158 uwentos.ru

tag-manager.net. 600 IN A 45.8.124.251 _______________ Was: tag-manager.net. 600 IN A 193.42.114.54 _______________ Was: 185.207.137.113 artitam.com 2020-11-21 04:33:33 185.207.137.113 googlemanagerapi.com 2021-11-16 01:41:10 185.207.137.113 tag-manager.net 2021-11-16 01:30:47 185.207.137.113 traxtibidox.net 2021-11-14 03:50:23 _______________ Was: 213.183.59.219 googlemanagerapi.com 2021-11-14 02:20:54 213.183.59.219 tag-manager.net 2021-11-14 18:56:05 _______________ Was: 45.138.25.29 tag-manager.net 2021-09-27 16:08:32 _______________ Was: 5.188.88.4 fraudlabzpros.com 2021-09-23 23:11:14 5.188.88.4 googlemanagerapi.com 2021-09-24… Читать далее Botnet spammed phishing domains: Phishing Google & Facebook users

All over this /24 helo: y2uymtljowfj.clientesnet.de msgid: x@45.33.4.118 srcip: 194.87.185.53 from: fatura1637081575@apoioclientes.com bodyfrom: Minha Claro Subject: Fatura Claro em atraso. timestamp: 2021-11-16 x bodyurl: mailto:alfredo.souza@hmrag.com bodyurl: https://links.claro.negociafacil.com.br/ …. helo: zgrkymi5nmrk.clientesnet.de srcip: 194.87.185.115 timestamp: 2021-11-16 x from: fatura1637098478@apoioclientes.com to: x Subject: Fatura Claro em atraso. bodyfrom: Minha Claro

According to our telemetry and our own intelligence, the host at this IP address has been setup by cyber criminals for the exclusive purpose of hosting phishing sites, malware distribution sites and/or botnet controllers. We therefore advise our users to block any traffic from/to this IP address. Malware botnet controller located at 45.8.124.114 on port… Читать далее Malware / Botnet / Phishing hosting server @45.8.124.114

According to our telemetry and our own intelligence, the host at this IP address has been setup by cyber criminals for the exclusive purpose of hosting phishing sites, malware distribution sites and/or botnet controllers. We therefore advise our users to block any traffic from/to this IP address. Malware botnet controller located at 45.8.124.114 on port… Читать далее Malware / Botnet / Phishing hosting server @45.8.124.114

Received: from s6.megojom.ru (megojom.ru [77.244.217.178]) Date: Tue, 16 Nov 2021 11:3x:xx +0000 From: Aleksandr <info@s6.megojom.ru> Subject: Предложение 77.244.217.178 megojom.ru 77.244.217.179 eseneno.ru 77.244.217.180 derwerer.ru 77.244.217.181 yeremont.ru 77.244.217.182 uwentos.ru

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 45.8.124.219 on port 443: $ telnet 45.8.124.219 443 Trying 45.8.124.219… Connected to 45.8.124.219. Escape character is… Читать далее Malware botnet controllers @45.8.124.219

Received: from s17.megojom.ru (megojom.ru [31.172.135.30]) Date: Mon, 15 Nov 2021 14:0x:xx +0000 From: Aleksandr <info@s17.megojom.ru> Subject: Предложение 31.172.135.26 eseneno.ru 31.172.135.27 derwerer.ru 31.172.135.28 yeremont.ru 31.172.135.29 uwentos.ru 31.172.135.30 megojom.ru

Was SBL536276 47.89.252.64/32 Was SBL536138 47.251.44.214/32 Was SBL536089 47.251.12.133/32 Was SBL536014 47.254.184.139/32 finportalspkdeutschland.com has address 45.8.124.239 spkidservice.com has address 45.8.124.239 spk-portal.com has address 45.8.124.239 kontoabgleichterminal.com has address 45.8.124.239 giro-home-spkupdate.com has address 45.8.124.239 finportal-spk-home.com has address 45.8.124.239 spk-datenmanager.com has address 45.8.124.239 systemlog-spk.com has address 45.8.124.239 girofilialinfo-spk.com has address 45.8.124.239 live-spk-home.com has address 45.8.124.239 endverbraucherspk.com has address… Читать далее Assorted phish landing sites.

Received: from s6.megojom.ru (megojom.ru [185.186.2.142]) Date: Sun, 14 Nov 2021 15:0x:xx +0000 From: Aleksandr <info@s6.megojom.ru> Subject: Предложение 185.186.2.138 eseneno.ru 185.186.2.139 yeremont.ru 185.186.2.140 uwentos.ru 185.186.2.141 dsergom.ru 185.186.2.142 megojom.ru