[!] This SBL record is to show an example of ongoing network abuse. It currently is not being published in the SBL list, but is instead being presented on the webpage so that the network owner has evidence to investigate and correct the problem. w 209.85.160.198 mail-qt1-f198.google.com «mail-qt1-f198.google.com» 2021-12-04T20:40:00Z (+/-10 min) w 209.85.160.199 mail-qt1-f199.google.com «mail-qt1-f199.google.com»… Читать далее spam source
spam source
[!] This SBL record is to show an example of ongoing network abuse. It currently is not being published in the SBL list, but is instead being presented on the webpage so that the network owner has evidence to investigate and correct the problem. w 209.85.160.198 mail-qt1-f198.google.com «mail-qt1-f198.google.com» 2021-12-04T20:40:00Z (+/-10 min) w 209.85.160.199 mail-qt1-f199.google.com «mail-qt1-f199.google.com»… Читать далее spam source
spam source
[!] This SBL record is to show an example of ongoing network abuse. It currently is not being published in the SBL list, but is instead being presented on the webpage so that the network owner has evidence to investigate and correct the problem. w 209.85.160.198 mail-qt1-f198.google.com «mail-qt1-f198.google.com» 2021-12-04T20:40:00Z (+/-10 min) w 209.85.160.199 mail-qt1-f199.google.com «mail-qt1-f199.google.com»… Читать далее spam source
spam source
[!] This SBL record is to show an example of ongoing network abuse. It currently is not being published in the SBL list, but is instead being presented on the webpage so that the network owner has evidence to investigate and correct the problem. w 209.85.160.183 mail-qt1-f183.google.com «mail-qt1-f183.google.com» 2021-12-04T20:50:00Z (+/-10 min) w 209.85.160.188 mail-qt1-f188.google.com «mail-qt1-f188.google.com»… Читать далее spam source
spam source
[!] This SBL record is to show an example of ongoing network abuse. It currently is not being published in the SBL list, but is instead being presented on the webpage so that the network owner has evidence to investigate and correct the problem. w 209.85.160.183 mail-qt1-f183.google.com «mail-qt1-f183.google.com» 2021-12-04T20:50:00Z (+/-10 min) w 209.85.160.188 mail-qt1-f188.google.com «mail-qt1-f188.google.com»… Читать далее spam source
spam source
[!] This SBL record is to show an example of ongoing network abuse. It currently is not being published in the SBL list, but is instead being presented on the webpage so that the network owner has evidence to investigate and correct the problem. w 209.85.160.183 mail-qt1-f183.google.com «mail-qt1-f183.google.com» 2021-12-04T20:50:00Z (+/-10 min) w 209.85.160.188 mail-qt1-f188.google.com «mail-qt1-f188.google.com»… Читать далее spam source
spam source
[!] This SBL record is to show an example of ongoing network abuse. It currently is not being published in the SBL list, but is instead being presented on the webpage so that the network owner has evidence to investigate and correct the problem. w 209.85.160.183 mail-qt1-f183.google.com «mail-qt1-f183.google.com» 2021-12-04T20:50:00Z (+/-10 min) w 209.85.160.188 mail-qt1-f188.google.com «mail-qt1-f188.google.com»… Читать далее spam source
Snowshoe spam ranges
? 143.55.227.11 13.static.win.donaldjtrump.com «13.static.win.donaldjtrump.com» 2021-12-04T21:30:00Z (+/-10 min) ? 143.55.227.31 15.static.win.donaldjtrump.com «15.static.win.donaldjtrump.com» 2021-12-04T20:20:00Z (+/-10 min) ? 143.55.227.136 14.static.win.donaldjtrump.com «14.static.win.donaldjtrump.com» 2021-12-04T20:20:00Z (+/-10 min) ? 143.55.227.166 17.static.win.donaldjtrump.com «17.static.win.donaldjtrump.com» 2021-12-04T20:20:00Z (+/-10 min) ? 143.55.227.243 12.static.win.donaldjtrump.com «12.static.win.donaldjtrump.com» 2021-12-04T20:20:00Z (+/-10 min) 143.55.227.0/24 (143.55.227.0 .. 143.55.227.255) w? 161.38.194.206 2.static.win.donaldjtrump.com «2.static.win.donaldjtrump.com» 2021-12-04T20:30:00Z (+/-10 min) 161.38.194.206/32 (161.38.194.206 .. 161.38.194.206) w? 161.38.198.190 3.static.win.donaldjtrump.com «3.static.win.donaldjtrump.com» 2021-12-04T21:30:00Z… Читать далее Snowshoe spam ranges
Malware botnet controller @45.8.124.82
The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 45.8.124.82 on port 443: $ telnet 45.8.124.82 443 Trying 45.8.124.82… Connected to 45.8.124.82. Escape character is… Читать далее Malware botnet controller @45.8.124.82
Smoke Loader botnet controller @195.24.68.11
The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Smoke Loader botnet controller located at 195.24.68.11 on port 80 (using HTTP POST): http://galala.ru/upload/ galala.ru. 3600 IN A 195.24.68.11 $ dig +short -x 91.189.114.12 wcarp.hosting.nic.ru.