5.61.37[.]209IP address
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 8 years ago
What the reports say
1 report, newest first · the exact sentence from each-
BadRabbit: spread of new cryptolocker“This domain name 1dnscontrol.com has IP 5.61.37[.]209.”
Indicators reported together
named in the same reports- 185.149.120[.]3in 1 report
- 1dnscontrol[.]comin 1 report
- www.fontanka[.]ruin 1 report
- hxxp://argumenti[.]ruin 1 report
- argumenti[.]ruin 1 report
- hxxp://argumentiru[.]comin 1 report
- argumentiru[.]comin 1 report
- fbbdc39af1139aebba4da004475e8839in 1 report
- webcheck01[.]netin 1 report
- webdefense1[.]netin 1 report
- secure-check[.]hostin 1 report
- firewebmail[.]comin 1 report
- secureinbox[.]emailin 1 report
- secure-dns1[.]netin 1 report
- hxxp://www.fontanka[.]ru/in 1 report
Copy these 15 indicators · defanged
Thanks — we review every report.