The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 45.141.102.82 port 443: $ telnet 45.141.102.82 443 Trying 45.141.102.82… Connected to 45.141.102.82. Escape character is ‘^]’… Читать далее Loki botnet controller @45.141.102.82
irs phishing server
20.120.112.223|fillformgetpayment-irs.com|2022-03-14 19:50:38 20.120.112.223|formgetmypayment-irs.com|2022-03-14 20:21:42 20.120.112.223|formgettingmypayment-irs.com|2022-03-14 19:52:06 20.120.112.223|getmypayment-irsgov.online|2022-03-14 19:47:13
phishing server
20.231.16.177|auth23-wells.com|2022-03-11 00:13:01 20.231.16.177|auth57-wells.com|2022-03-14 20:21:29
RedLineStealer botnet controller @185.11.73.22
The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 185.11.73.22 on port 45202 TCP: $ telnet 185.11.73.22 45202 Trying 185.11.73.22… Connected to 185.11.73.22. Escape character… Читать далее RedLineStealer botnet controller @185.11.73.22
Loki botnet controller @195.133.45.240
The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller at 195.133.45.240 on port 443: $ telnet 195.133.45.240 443 Trying 195.133.45.240… Connected to 195.133.45.240. Escape character is ‘^]’ argentixyz.com. 600 IN A 195.133.45.240 argentxyz.com.… Читать далее Loki botnet controller @195.133.45.240
Cybercrime site/forum: infodig.ch / infodig.domains / infodig.sx
Stolen credit card data websites: https://ascarding.com/ >>> https://infodig.is/ infodig.ch. 600 IN A 45.8.127.6 infodig.domains. 600 IN A 45.8.127.6 infodig.sx. 600 IN A 45.8.127.6 ________________ Was: infodig.ch. 600 IN A 45.141.101.93 infodig.domains. 600 IN A 45.141.101.93 infodig.sx. 600 IN A 45.141.101.93 ________________ Was: infodig.ch. 600 IN A 185.188.183.32 infodig.domains. 600 IN A 185.188.183.32 infodig.sx. 600 IN… Читать далее Cybercrime site/forum: infodig.ch / infodig.domains / infodig.sx
Vjw0rm botnet controller @51.81.193.203
The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 51.81.193.203 on port 62742 TCP: $ telnet 51.81.193.203 62742 Trying 51.81.193.203… Connected to 51.81.193.203. Escape character… Читать далее Vjw0rm botnet controller @51.81.193.203
DCRat botnet controller @3.132.159.158
The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 3.132.159.158 on port 15838 TCP: $ telnet 3.132.159.158 15838 Trying 3.132.159.158… Connected to 3.132.159.158. Escape character… Читать далее DCRat botnet controller @3.132.159.158
RaccoonStealer botnet controller @176.58.98.13
The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. RaccoonStealer botnet controller located at 176.58.98.13 on port 80 (using HTTP POST): hXXp://176.58.98.13/ $ nslookup 176.58.98.13 176-58-98-13.ip.linodeusercontent.com Referencing malware binaries (MD5 hash): bf21f20b191d0323e7e603d10033f926 — AV detection: 42… Читать далее RaccoonStealer botnet controller @176.58.98.13
Malware botnet controller @185.63.191.169
The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 185.63.191.169 on port 80 (using HTTP GET): hXXp://185.63.191.169/API/2/configure.php $ nslookup 185.63.191.169 g0rbunov.gordei.fvds.ru Referencing malware binaries (MD5 hash): 5eb13192123cb1e7327d51d1c6bfdf44 — AV detection: 42… Читать далее Malware botnet controller @185.63.191.169