Malware distribution & botnet controller @176.119.158.193

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.

Malware botnet controller located at 176.119.158.193 on port 443:
$ telnet 176.119.158.193 443
Trying 176.119.158.193…
Connected to 176.119.158.193.
Escape character is ‘^]’

Malicious domains observed at this IP address:
cloudfsnbg.cc. 600 IN A 176.119.158.193
snatch.kim. 600 IN A 176.119.158.193
snatch.press. 600 IN A 176.119.158.193
snath.top. 600 IN A 176.119.158.193

Опубликовано
В рубрике ruvds.com

Добавить комментарий

Ваш адрес email не будет опубликован. Обязательные поля помечены *