kjrub.com(zeus banking trojan hosted in United States Hostdime.com Inc)

isreali hecker using zeus botnet and rat

kjrub.no-ip.org 46.120.170.54 this is home ip for sure

Outgoing connection to remote server: kjrub.no-ip.org TCP port 101
Outgoing connection to remote server: kjrub.no-ip.org TCP port 99
Outgoing connection to remote server: kjrub.no-ip.org TCP port 1604

kjrub.com
kjrub.com 64.37.52.109

Opened listening TCP connection on port: 39698
Download URLs
http://64.37.52.109/Zeus/config.bin (kjrub.com)
http://64.37.52.109/Zeus/config.bin (kjrub.com)

Outgoing connection to remote server: kjrub.com TCP port 80
Outgoing connection to remote server: kjrub.com TCP port 80

hosting infos:
http://whois.domaintools.com/64.37.52.109
http://whois.domaintools.com/46.120.170.54

Categories: Uncategorized