The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 141.8.198.106 port 443: $ telnet 141.8.198.106 443 Trying 141.8.198.106… Connected to 141.8.198.106. Escape character is ‘^]’… Читать далее Malware botnet controller @141.8.198.106
ArkeiStealer, Smoke botnet controller and malware distribution @141.8.198.194
According to our telemetry and our own intelligence, the host at this IP address has been setup by cyber criminals for the exclusive purpose of hosting phishing sites, malware distribution sites and/or botnet controllers. We therefore advise our users to block any traffic from/to this IP address. The host at this IP address is running… Читать далее ArkeiStealer, Smoke botnet controller and malware distribution @141.8.198.194
Malware botnet controller @195.133.45.32
The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 195.133.45.32 port 443: $ telnet 195.133.45.32 443 Trying 195.133.45.32… Connected to 195.133.45.32. Escape character is ‘^]’… Читать далее Malware botnet controller @195.133.45.32
Malware / Botnet / Phishing hosting server @185.251.88.236
According to our telemetry and our own intelligence, the host at this IP address has been setup by cyber criminals for the exclusive purpose of hosting phishing sites, malware distribution sites and/or botnet controllers. We therefore advise our users to block any traffic from/to this IP address. Malware botnet controller located at 185.251.88.236 443 TCP:… Читать далее Malware / Botnet / Phishing hosting server @185.251.88.236
Malware botnet controller @193.42.113.3
The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller at 193.42.113.3 on port 443. $ telnet 193.42.113.3 443 Trying 193.42.113.3… Connected to 193.42.113.3. Escape character is ‘^]’ Malicious domains observed at this IP… Читать далее Malware botnet controller @193.42.113.3
Spam Hosting (hrandpayroll.com & hrandpayroll.net)
This IP address is hosting the website www.hrandpayroll.com. The domain has been seen repeatedly in spam and has various Spamhaus blocklistings going back or over a year. From bounces+13681372-<x> Received: from wrqvxtdp.outbound-mail.sendgrid.net (wrqvxtdp.outbound-mail.sendgrid.net [149.72.167.211]) Date: Fri, 25 Mar 2022 13:##:## +0000 (UTC) From: 2022 Payroll Compliance <debs@hrandpayroll.net> Reply-To: debs@hrandpayroll.net Subject: New Travel Pay Regulations <snip>… Читать далее Spam Hosting (hrandpayroll.com & hrandpayroll.net)
Malware / Botnet / Phishing hosting server @95.213.216.166
According to our telemetry and our own intelligence, the host at this IP address has been setup by cyber criminals for the exclusive purpose of hosting phishing sites, malware distribution sites and/or botnet controllers. We therefore advise our users to block any traffic from/to this IP address. Malware botnet controller located at 95.213.216.166 443 TCP:… Читать далее Malware / Botnet / Phishing hosting server @95.213.216.166
Malware botnet controller @46.17.248.66
The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 46.17.248.66 port 443: $ telnet 46.17.248.66 443 Trying 46.17.248.66… Connected to 46.17.248.66. Escape character is ‘^]’… Читать далее Malware botnet controller @46.17.248.66
spam source
54.39.7.197 pietro3.mta.emailsendingwizz.com «pietro3.mta.emailsendingwizz.com» 2022-03-25T11:40:00Z (+/-10 min) 54.39.7.197/32 (54.39.7.197 .. 54.39.7.197) 54.39.239.55 pietro2.mta.emailsendingwizz.com «pietro2.mta.emailsendingwizz.com» 2022-03-25T11:30:00Z (+/-10 min) 54.39.239.56 pietro8.mta.emailsendingwizz.com «pietro8.mta.emailsendingwizz.com» 2022-03-25T11:30:00Z (+/-10 min) 54.39.239.57 pietro7.mta.emailsendingwizz.com «pietro7.mta.emailsendingwizz.com» 2022-03-25T11:30:00Z (+/-10 min) 54.39.239.48/28 (54.39.239.48 .. 54.39.239.63) 66.70.160.169 pietro5.mta.emailsendingwizz.com «pietro5.mta.emailsendingwizz.com» 2022-03-25T11:30:00Z (+/-10 min) 66.70.160.169/32 (66.70.160.169 .. 66.70.160.169) 142.44.253.252 pietro4.mta.emailsendingwizz.com «pietro4.mta.emailsendingwizz.com» 2022-03-25T11:30:00Z (+/-10 min) 142.44.253.252/32 (142.44.253.252 .. 142.44.253.252) 167.114.80.60 pietro6.mta.emailsendingwizz.com «pietro6.mta.emailsendingwizz.com»… Читать далее spam source
spam source
54.39.7.197 pietro3.mta.emailsendingwizz.com «pietro3.mta.emailsendingwizz.com» 2022-03-25T11:40:00Z (+/-10 min) 54.39.7.197/32 (54.39.7.197 .. 54.39.7.197) 54.39.239.55 pietro2.mta.emailsendingwizz.com «pietro2.mta.emailsendingwizz.com» 2022-03-25T11:30:00Z (+/-10 min) 54.39.239.56 pietro8.mta.emailsendingwizz.com «pietro8.mta.emailsendingwizz.com» 2022-03-25T11:30:00Z (+/-10 min) 54.39.239.57 pietro7.mta.emailsendingwizz.com «pietro7.mta.emailsendingwizz.com» 2022-03-25T11:30:00Z (+/-10 min) 54.39.239.48/28 (54.39.239.48 .. 54.39.239.63) 66.70.160.169 pietro5.mta.emailsendingwizz.com «pietro5.mta.emailsendingwizz.com» 2022-03-25T11:30:00Z (+/-10 min) 66.70.160.169/32 (66.70.160.169 .. 66.70.160.169) 142.44.253.252 pietro4.mta.emailsendingwizz.com «pietro4.mta.emailsendingwizz.com» 2022-03-25T11:30:00Z (+/-10 min) 142.44.253.252/32 (142.44.253.252 .. 142.44.253.252) 167.114.80.60 pietro6.mta.emailsendingwizz.com «pietro6.mta.emailsendingwizz.com»… Читать далее spam source