Malware / Botnet / Phishing hosting server @35.233.53.229

According to our telemetry and our own intelligence, the host at this IP address has been setup by cyber criminals for the exclusive purpose of hosting phishing sites, malware distribution sites and/or botnet controllers. We therefore advise our users to block any traffic from/to this IP address.

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.

Malware botnet controller at 35.233.53.229 port 443.
$ telnet 46.161.1.31 443
Trying 46.161.1.31…
Connected to 46.161.1.31.
Escape character is ‘^]’

Malicious domains observed at this IP address:
atom-softs.com. 600 IN A 46.17.43.235
atom-tw.com. 600 IN A 46.17.43.235
atom-tweak.com. 600 IN A 46.17.43.235
atom-tweak.net. 600 IN A 46.17.43.235
atomtweak.com. 600 IN A 46.17.43.235
atomtweaks.com. 600 IN A 46.17.43.235
banhamm.com. 600 IN A 46.17.43.235
beachbig.com. 600 IN A 46.17.43.235
best1488.com. 600 IN A 46.17.43.235
bethats.com. 600 IN A 46.17.43.235
blackinstalls.com. 600 IN A 46.17.43.235
bthuu.com. 600 IN A 46.17.43.235
chinett.com. 600 IN A 46.17.43.235
cloudjah.com. 600 IN A 46.17.43.235
condash.com. 600 IN A 46.17.43.235
cranonline.com. 600 IN A 46.17.43.235
dailykan.com. 600 IN A 46.17.43.235
directll.com. 600 IN A 46.17.43.235
djher.com. 600 IN A 46.17.43.235
far-lbs.com. 600 IN A 46.17.43.235
farlabed.com. 600 IN A 46.17.43.235
farlabus.com. 600 IN A 46.17.43.235
farlabweb.com. 600 IN A 46.17.43.235
freehar.com. 600 IN A 46.17.43.235
fuck-systems.com. 600 IN A 46.17.43.235
g-farlab.com. 600 IN A 46.17.43.235
geoshit.com. 600 IN A 46.17.43.235
getatomtweak.com. 600 IN A 46.17.43.235
getnek.com. 600 IN A 46.17.43.235
glclick.com. 600 IN A 46.17.43.235
gokaef.com. 600 IN A 46.17.43.235
gripeee.com. 600 IN A 46.17.43.235
gvnoweb.com. 600 IN A 46.17.43.235
i-farlab.com. 600 IN A 46.17.43.235
i-farlabs.com. 600 IN A 46.17.43.235
i-labspro.com. 600 IN A 46.17.43.235
in-softs.com. 600 IN A 46.17.43.235
it-farlab.com. 600 IN A 46.17.43.235
johnsol.com. 600 IN A 46.17.43.235
kayattr.com. 600 IN A 46.17.43.235
koren24.com. 600 IN A 46.17.43.235
labs-pr.com. 600 IN A 46.17.43.235
led-vr.com. 600 IN A 46.17.43.235
liveme202.com. 600 IN A 46.17.43.235
mindurl.com. 600 IN A 46.17.43.235
myfarlab.com. 600 IN A 46.17.43.235
nanbier.com. 600 IN A 46.17.43.235
netgul.com. 600 IN A 46.17.43.235
newfarlab.com. 600 IN A 46.17.43.235
nextinstall.info. 600 IN A 46.17.43.235
nongeeeeet.com. 600 IN A 46.17.43.235
noplayboy.com. 600 IN A 46.17.43.235
oberon-files.com. 600 IN A 46.17.43.235
offtechnology.com. 600 IN A 46.17.43.235
onlinepleb.com. 600 IN A 46.17.43.235
ouclick.com. 600 IN A 46.17.43.235
payfilms.com. 600 IN A 46.17.43.235
pcrare.com. 600 IN A 46.17.43.235
proatomtweak.com. 600 IN A 46.17.43.235
royalyo.com. 600 IN A 46.17.43.235
sammore.com. 600 IN A 46.17.43.235
search1search.com. 600 IN A 46.17.43.235
sharemem.com. 600 IN A 46.17.43.235
soft-me.com. 600 IN A 46.17.43.235
softsme.com. 600 IN A 46.17.43.235
soulmos.com. 600 IN A 46.17.43.235
spiritualpay.top. 600 IN A 46.17.43.235
test-amg.com. 600 IN A 46.17.43.235
thepe.net. 600 IN A 46.17.43.235
thispacific-pact.top. 600 IN A 46.17.43.235
ticketcolor.com. 600 IN A 46.17.43.235
vrsrat.com. 600 IN A 46.17.43.235
wwwwcube.com. 600 IN A 46.17.43.235
yourkok.com. 600 IN A 46.17.43.235
zodomain.com. 600 IN A 46.17.43.235

Опубликовано
В рубрике google.com

Добавить комментарий

Ваш адрес email не будет опубликован. Обязательные поля помечены *