Received: from mail.komalla.me ([64.227.34.236]) From: «Account Manager» <contact@komalla.me> Subject: [], uw saldo is onlangs bijgewerkt Date: Fri, 8 Apr 2022 04:2x:xx -0700
Malware distribution @185.185.69.122
The host at this IP address is currently being used to distribute malware. Malware distribution located here: hXXp://shfpudpqth.top/strong/mix.exe $ dig +short shfpudpqth.top 185.185.69.122 Referencing malware binaries (MD5 hash): 9c287453cdeefc0effea16c5c1890edf — AV detection: 40 / 70 (57.14)
OrcusRAT botnet controller @51.83.134.252
The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 51.83.134.252 on port 17650 TCP: $ telnet 51.83.134.252 17650 Trying 51.83.134.252… Connected to 51.83.134.252. Escape character… Читать далее OrcusRAT botnet controller @51.83.134.252
Abused / misconfigured newsletter service (listbombing)
The host at this IP address is being (ab)used to «listbomb» email addresses: From: Schulman b.v. Amsterdam Auctions <info@schulman.nl> Subject: Auction 370, 371 & E-06 Veiling — Only 4 days to go! Nog maar 4 dagen te gaan! Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As… Читать далее Abused / misconfigured newsletter service (listbombing)
Malware botnet controller @185.251.91.152
The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller at 185.251.91.152 on port 443. $ telnet 185.251.91.152 443 Trying 185.251.91.152… Connected to 185.251.91.152. Escape character is ‘^]’ Malicious domains observed at this IP… Читать далее Malware botnet controller @185.251.91.152
Malware botnet controller @135.125.250.232
The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 135.125.250.232 on port 443: $ telnet 135.125.250.232 443 Trying 135.125.250.232… Connected to 135.125.250.232. Escape character is ‘^]’ Related malicious domains observed at… Читать далее Malware botnet controller @135.125.250.232
Malware botnet controller @85.208.208.112
The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 85.208.208.112 port 443: $ telnet 85.208.208.112 443 Trying 85.208.208.112… Connected to 85.208.208.112. Escape character is ‘^]’… Читать далее Malware botnet controller @85.208.208.112
Malware / Botnet / Phishing hosting server @185.185.69.86
According to our telemetry and our own intelligence, the host at this IP address has been setup by cyber criminals for the exclusive purpose of hosting phishing sites, malware distribution sites and/or botnet controllers. We therefore advise our users to block any traffic from/to this IP address. The host at this IP address is obviously… Читать далее Malware / Botnet / Phishing hosting server @185.185.69.86
Malware / Botnet / Phishing hosting server @141.8.199.2
The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 141.8.199.2 port 443: $ telnet 141.8.199.2 443 Trying 141.8.199.2… Connected to 141.8.199.2. Escape character is ‘^]’.… Читать далее Malware / Botnet / Phishing hosting server @141.8.199.2
Smoke Loader botnet controller @45.135.233.190
The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Smoke Loader botnet controller located at 45.135.233.190 on port 80 (using HTTP POST): hXXp://afrocalite.ga/ afrocalite.ga. 600 IN A 45.135.233.190 Referencing malware binaries (MD5 hash): 3d75271eb12cedd6440f8ed22724840c — AV… Читать далее Smoke Loader botnet controller @45.135.233.190