=================================================
= This message has been generated automatically =
=================================================
Hello
You are receiving this email because your email address is recognized by Abuseix [1] as abuse-mail for the IP address 95.181.153.56.
This email has been generated automatically by URLhaus [2] to inform you about one or more malware distribution sites that are currently being hosted on 95.181.153.56:
* Host information
IP address: 95.181.153.56
Hostname: 40434.vm.spacecore.network
AS number: 210993
AS name: SPACECORE
* Malware URL(s)
URL: hXXp://95[.]181.153.56/dWg22.exe
Proof: https://urlhaus.abuse.ch/url/1896970
The said URLs are actively being used at the moment to distribute malware. I therefore kindly ask you to remove the said files at your earliest convenience to prevent that other internet users get infected with malware.
As the said website(s) have been likely compromised, you may also want to reset the customer’s FTP account and make sure that any installed content management system (CMS) like WordPress, Typo3 or Joomla (including any 3rd party plugins) are up to date.
Should you have any question please do not hesitate to drop a line to: admin[at]abuse{dot}ch
Best regards,
abuse.ch
[1] https://www.abusix.com/contactdb
[2] https://urlhaus.abuse.ch/
