Рубрика: selectel.ru

Spam sources. Same spammer previously on 5.188.158.{69,212}. ======================================================================= Return-Path: <> Received: from viata.es (unknown [37.9.13.173]) by x (Postfix) with ESMTP id x for <x>; Wed, 9 Feb 2022 xx:xx:xx +0000 (UTC) MIME-Version: 1.0 From:Home Depot <dealspromo@x.hosakomatel.co.nl> Subject:CLAlM Your Free Dyson Vacuum NOW! Reply-To: reply_to@waketech.xx To: x Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=UTF-8 Date: Wed, 09 Feb… Читать далее spam sources

Spam source. Same spammer previously on 5.188.158.{69,212}. ======================================================================= Return-Path: <> Received: from viata.es (unknown [37.9.13.222]) by x (Postfix) with ESMTP id x for <x>; Wed, 9 Feb 2022 xx:xx:xx +0000 (UTC) MIME-Version: 1.0 From:Home Depot <dealspromo@x.hosakomatel.co.nl> Subject:CLAlM Your Free Dyson Vacuum NOW! Reply-To: reply_to@waketech.xx To: x Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=UTF-8 Date: Wed, 09 Feb… Читать далее spam source

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Amadey botnet controller located at 5.182.4.47 on port 80 (using HTTP POST): hXXp://5.182.4.47/k0uTrd3d/index.php Referencing malware binaries (MD5 hash): 4297279784bf4da33488b2b9e0f89ef6 — AV detection: 44 / 68 (64.71) 7d9b08b20133884fd55a92cc45f23bc2… Читать далее Amadey botnet controller @5.182.4.47

Received: from s3.goronet.ru (s3.goronet.ru [82.202.237.141]) Date: Tue, 8 Feb 2022 13:2x:xx +0000 From: Aleksandr <info@s3.goronet.ru> Subject: Предложение 82.202.237.138 goronet.ru 82.202.237.139 goronet.ru 82.202.237.140 goronet.ru 82.202.237.141 goronet.ru 82.202.237.142 goronet.ru

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 62.182.159.86 on port 65531 TCP: $ telnet 62.182.159.86 65531 Trying 62.182.159.86… Connected to 62.182.159.86. Escape character… Читать далее RedLineStealer botnet controller @62.182.159.86

Received: from s6.goronet.ru (s6.goronet.ru [82.148.4.139]) Date: Sat, 22 Jan 2022 16:0x:xx +0000 From: Aleksandr <info@s6.goronet.ru> Subject: Предложение 82.148.4.130 goronet.ru 82.148.4.132 goronet.ru 82.148.4.138 goronet.ru 82.148.4.139 goronet.ru

2022-01-27 gotogml.com. 60 IN A 194.87.1.5 2022-01-26 gotogml.com. 60 IN A 194.87.1.3 2022-01-26 gotogml.com. 60 IN A 85.208.186.181 2022-01-24 gotogml.com. 60 IN A 194.87.1.2 2022-01-22 gotogml.com. 60 IN A 194.87.185.76 2022-01-20 gotogml.com. 60 IN A 194.87.185.11 2022-01-18 gotogml.com. 60 IN A 5.188.160.30 Received: from iustocouny.newdom.com (20.77.57.222) Date: Mon, 17 Jan 2022 12:34:00 +0000 From: 💖💖… Читать далее Spamvertised websites

2022-02-01 gotogml.com. 60 IN A 194.87.1.4 2022-01-31 gotogml.com. 60 IN A 194.87.1.5 2022-01-20 gotogml.com. 60 IN A 194.87.185.11 2022-01-18 gotogml.com. 60 IN A 5.188.160.30 Received: from iustocouny.newdom.com (20.77.57.222) Date: Mon, 17 Jan 2022 12:34:00 +0000 From: 💖💖 Charming Russian Girls 💖💖 <> Subject: Find Your Russian Girl Who is Your Destiny 😍😍 https://storage.googleapis.com/emsidan/clickk.html#[] 142.250.65.80 http://gotogml.com/track/[]… Читать далее Spamvertised website

Received: from s9.goronet.ru (s9.goronet.ru [185.91.55.251]) Date: Wed, 2 Feb 2022 00:1x:xx +0000 From: Aleksandr <info@s9.goronet.ru> Subject: Предложение 185.91.55.250 goronet.ru 185.91.55.251 goronet.ru 185.91.55.253 goronet.ru

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 95.143.179.186 on port 4633 TCP: $ telnet 95.143.179.186 4633 Trying 95.143.179.186… Connected to 95.143.179.186. Escape character… Читать далее RaccoonStealer botnet controller @95.143.179.186