The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 51.195.167.0 on port 5200 TCP: $ telnet 51.195.167.0 5200 Trying 51.195.167.0… Connected to 51.195.167.0. Escape character… Читать далее AveMariaRAT botnet controller @51.195.167.0
Malware distribution @188.165.62.4
The host at this IP address is currently being used to distribute malware. Malware distribution located here: hXXp://188.165.62.4/44467.7730002314.dat $ nslookup 188.165.62.4 ip4.ip-188-165-62.eu
Canadian Pharmacy
This IP address is currently in use as a nameserver for spamvertized domains. This enables the resolving of spammed domains to the actual websites. This SBL record can only be removed if this IP address stops answering DNS queries for spamvertized domain names. takelightdeal.su trustpricebuy.su trylightdeal.su
RemcosRAT botnet controller @149.202.247.162
The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 149.202.247.162 on port 29091 TCP: $ telnet 149.202.247.162 29091 Trying 149.202.247.162… Connected to 149.202.247.162. Escape character… Читать далее RemcosRAT botnet controller @149.202.247.162
Spamvertised website
Received: from zih.getpromoproduct.com (40.90.202.21) From: Øknonomi <service@mottylean.no> Subject: [], Senk dine lånekostnader og spar penger Date: Wed, 29 Sep 2021 09:0x:xx +0200 https://bluelifet.com/?a=2393&oc=13623&c=[]&m=3&s1= 34.90.165.178 https://vxb.surveyedlinks.com/?kw=2393&s1=[]&s2= 141.94.188.146