Loki botnet controller @172.67.183.45

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.

Loki botnet controller located at 172.67.183.45 on port 80 (using HTTP POST):
hXXp://hdmibonquet.ir/oge/five/fre.php

$ dig +short hdmibonquet.ir
172.67.183.45

Referencing malware binaries (MD5 hash):
f1a00a5cee1d447a64a26695ad573243 — AV detection: 25 / 65 (38.46)

Other malicious domain names hosted on this IP address:
ir-micro.com 172.67.183.45
idoc.pub 172.67.183.45
ntandingsundhosmala.tk 172.67.183.45
www.oglobo-saude.com 172.67.183.45
hdmibonquet.ir 172.67.183.45

Добавить комментарий

Ваш адрес email не будет опубликован.