Malware / Botnet / Phishing hosting server @92.53.71.105

According to our telemetry and our own intelligence, the host at this IP address has been setup by cyber criminals for the exclusive purpose of hosting phishing sites, malware distribution sites and/or botnet controllers. We therefore advise our users to block any traffic from/to this IP address.

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.

Malware botnet controller at 92.53.71.105 port 443.
$ telnet 46.161.1.31 443
Trying 46.161.1.31…
Connected to 46.161.1.31.
Escape character is ‘^]’

Malicious domains observed at this IP address:
atom-softs.com. 600 IN A 92.53.71.105
atom-tw.com. 600 IN A 92.53.71.105
atom-tweak.net. 600 IN A 92.53.71.105
atomtweak.com. 600 IN A 92.53.71.105
atomtweaks.com. 600 IN A 92.53.71.105
banhamm.com. 600 IN A 92.53.71.105
beachbig.com. 600 IN A 92.53.71.105
best1488.com. 600 IN A 92.53.71.105
bethats.com. 600 IN A 92.53.71.105
blackinstalls.com. 600 IN A 92.53.71.105
bthuu.com. 600 IN A 92.53.71.105
chinett.com. 600 IN A 92.53.71.105
cloudjah.com. 600 IN A 92.53.71.105
condash.com. 600 IN A 92.53.71.105
cranonline.com. 600 IN A 92.53.71.105
dailykan.com. 600 IN A 92.53.71.105
djher.com. 600 IN A 92.53.71.105
far-lbs.com. 600 IN A 92.53.71.105
farlabed.com. 600 IN A 92.53.71.105
farlabus.com. 600 IN A 92.53.71.105
farlabweb.com. 600 IN A 92.53.71.105
freehar.com. 600 IN A 92.53.71.105
fuck-systems.com. 600 IN A 92.53.71.105
g-farlab.com. 600 IN A 92.53.71.105
geoshit.com. 600 IN A 92.53.71.105
getatomtweak.com. 600 IN A 92.53.71.105
getnek.com. 600 IN A 92.53.71.105
glclick.com. 600 IN A 92.53.71.105
gokaef.com. 600 IN A 92.53.71.105
gripeee.com. 600 IN A 92.53.71.105
gvnoweb.com. 600 IN A 92.53.71.105
i-farlab.com. 600 IN A 92.53.71.105
i-farlabs.com. 600 IN A 92.53.71.105
i-labspro.com. 600 IN A 92.53.71.105
in-softs.com. 600 IN A 92.53.71.105
it-farlab.com. 600 IN A 92.53.71.105
johnsol.com. 600 IN A 92.53.71.105
kayattr.com. 600 IN A 92.53.71.105
koren24.com. 600 IN A 92.53.71.105
labs-pr.com. 600 IN A 92.53.71.105
led-vr.com. 600 IN A 92.53.71.105
liveme202.com. 600 IN A 92.53.71.105
mindurl.com. 600 IN A 92.53.71.105
myfarlab.com. 600 IN A 92.53.71.105
nanbier.com. 600 IN A 92.53.71.105
netgul.com. 600 IN A 92.53.71.105
newfarlab.com. 600 IN A 92.53.71.105
nextinstall.info. 600 IN A 92.53.71.105
nongeeeeet.com. 600 IN A 92.53.71.105
noplayboy.com. 600 IN A 92.53.71.105
offtechnology.com. 600 IN A 92.53.71.105
onlinepleb.com. 600 IN A 92.53.71.105
ouclick.com. 600 IN A 92.53.71.105
payfilms.com. 600 IN A 92.53.71.105
pcrare.com. 600 IN A 92.53.71.105
proatomtweak.com. 600 IN A 92.53.71.105
royalyo.com. 600 IN A 92.53.71.105
sammore.com. 600 IN A 92.53.71.105
search1search.com. 600 IN A 92.53.71.105
sharemem.com. 600 IN A 92.53.71.105
soft-me.com. 600 IN A 92.53.71.105
softsme.com. 600 IN A 92.53.71.105
spiritualpay.top. 600 IN A 92.53.71.105
thepe.net. 600 IN A 92.53.71.105
thispacific-pact.top. 600 IN A 92.53.71.105
vrsrat.com. 600 IN A 92.53.71.105
wwwwcube.com. 600 IN A 92.53.71.105
yourkok.com. 600 IN A 92.53.71.105
zodomain.com. 600 IN A 92.53.71.105

Опубликовано
В рубрике selectel.ru

Добавить комментарий

Ваш адрес email не будет опубликован. Обязательные поля помечены *