Рубрика: selectel.ru

Received: from s6.megojom.ru (megojom.ru [185.186.2.109]) Date: Tue, 5 Oct 2021 10:0x:xx +0000 From: Aleksandr <info@s6.megojom.ru> Subject: Предложение 185.186.2.106 qweter.ru 185.186.2.107 telefonsho.ru 185.186.2.108 yeremont.ru 185.186.2.109 megojom.ru 185.186.2.110 uwentos.ru

Stolen credit card data sites: https://i.imgur.com/iU5pwcO.gif ccshop.pw. 600 IN A 95.213.216.148 ________________ Was: ccshop.pw. 600 IN A 5.188.89.49 ________________ Was: ccshop.pw. 600 IN A 194.147.78.213 ________________ Was: ccshop.pw. 600 IN A 5.180.137.32 _______________ Was: ccshop.pw. 600 IN A 185.189.13.57 _______________ Was: ccshop.pw. 600 IN A 195.66.114.38 _______________ Was: ccshop.pw. 600 IN A 195.22.149.187 ________________ Was:… Читать далее Carding fraud site/forum: ccshop.pw

According to our telemetry and our own intelligence, the host at this IP address has been setup by cyber criminals for the exclusive purpose of hosting phishing sites, malware distribution sites and/or botnet controllers. We therefore advise our users to block any traffic from/to this IP address. Malware botnet controller located at 82.202.194.6 on port… Читать далее Malware / Botnet / Phishing hosting server @82.202.194.6

Spam emissions seen from 31.172.134.170 31.172.134.171 31.172.134.172 31.172.134.173 31.172.134.174 Received: from s8.megojom.ru (31.172.134.173 [31.172.134.173]) Date: Sun, 3 Oct 2021 09:3x:xx +0000 From: Aleksandr <info@s8.megojom.ru> Subject: Предложение

Received: from s5.alinjgom.ru (185.143.174.147 [185.143.174.147]) Date: Sat, 2 Oct 2021 07:0x:xx +0000 From: Aleksandr <info@s5.alinjgom.ru> Subject: Предложение

Received: from s8.alinjgom.ru (185.149.243.59 [185.149.243.59]) Date: Fri, 1 Oct 2021 04:0x:xx +0000 From: Aleksandr <info@s8.alinjgom.ru> Subject: Предложение Spam emissions seen from: 185.149.243.58 185.149.243.59 185.149.243.60 185.149.243.61 185.149.243.62

2021-09-30 spammer still active, listing reactivated 185.186.2.82 185.186.2.83 185.186.2.84 185.186.2.85 185.186.2.86 Received: from s2.albret.ru (albret.ru [185.186.2.140]) Date: Sat, 31 Jul 2021 10:5x:xx +0000 From: Aleksandr <info@s2.albret.ru> Subject: Предложение

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 109.234.156.178 on port 5655 TCP: $ telnet 109.234.156.178 5655 Trying 109.234.156.178… Connected to 109.234.156.178. Escape character… Читать далее RemoteManipulator botnet controller @109.234.156.178

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 185.175.44.167 on port 5655 TCP: $ telnet 185.175.44.167 5655 Trying 185.175.44.167… Connected to 185.175.44.167. Escape character… Читать далее RemoteManipulator botnet controller @185.175.44.167

Spam emissions seen from: 78.155.202.66 78.155.202.67 78.155.202.68 78.155.202.69 78.155.202.70 Received: from s6.alinjgom.ru (alinjgom.ru [78.155.202.66]) Date: Wed, 29 Sep 2021 08:0x:xx +0000 From: Aleksandr <info@s6.alinjgom.ru> Subject: Предложение