Linux.Siggen.1769

Technical Information

To ensure autorun and distribution:

Creates or modifies the following files:

/var/spool/cron/crontabs/root

Malicious functions:

Launches itself as a daemon

Launches processes:

cat /proc/version
cat /proc/cpuinfo
uname -a
getconf LONG_BIT
<SAMPLE_FULL_PATH> [stealth]
/usr/bin/crontab /tmp/nip9iNeiph5chee

Performs operations with the file system:

Modifies file access rights:

/var/spool/cron/crontabs/tmp.axMpBX

Creates or modifies files:

/root/.pid
/tmp/nip9iNeiph5chee
/var/spool/cron/crontabs/tmp.axMpBX
/tmp/[stealth].pid

Deletes files:

/tmp/nip9iNeiph5chee

Network activity:

Establishes connection:

<LOCAL_DNS_SERVER>
[2######00:30::681b:b2e4]:9
[2######00:30::681b:b3e4]:9
10#.##.178.228:9
10#.##.179.228:9
[2######00:30::6818:7b58]:9
[2######00:30::6818:7a58]:9
10#.#4.122.88:9
10#.#4.123.88:9
[2######00:30::681c:15c7]:9
[2######00:30::681c:14c7]:9
10#.#8.20.199:9
10#.#8.21.199:9
10#.#8.0.114:9
10#.#8.1.114:9
[2######50:4010:c0a::c5]:9
17#.##4.221.197:9
10#.#8.23.254:9
10#.#8.22.254:9
[2######00:30::681b:9be3]:9
[2######00:30::681b:9ae3]:9
10#.##.154.227:9
10#.##.155.227:9
[2######00:30::6812:3eb1]:9
[2######00:30::6812:3fb1]:9
10#.#8.63.177:9
19#.#0.9.66:9
[2#########2:0:1c21:12ff:fe00:183]:9
[2######00:30::681b:aa1a]:9
[2######00:30::681b:ab1a]:9
10#.#7.170.26:9
10#.#7.171.26:9
21#.#39.32.21:9
21#.#39.34.21:9
21#.#39.36.21:9
21#.#39.38.21:9
10#.#2.85.5:9
[2######0:ff03:1::102]:9
10#.#4.103.65:9
10#.#4.102.65:9
[2######00:30::6818:6741]:9
[2######00:30::6818:6641]:9
18#.#43.235.5:9
18#.#43.232.5:9
19#.#.78.216:9
19#.#.78.139:9
[2######00:30::681f:5a42]:9
[2######00:30::681f:5b42]:9
10#.#1.91.66:9
10#.#1.90.66:9
[2######00:31::681f:bd]:9
[2######00:31::681f:1bd]:9
10#.#1.0.189:9
18#.##9.110.153:9
18#.##9.108.153:9
18#.##9.109.153:9
18#.##9.111.153:9
23.##5.255.60:9
23.##5.255.59:9
[2#########300:0:46a:68ff:fe00:2366]:9
18#.##2.57.113:9
[2######50:4010:c05::99]:9
64.###.165.153:9
54.##4.248.69:9
54.##9.99.240:9
[2#####a60:0:10c3::1]:9
18#.#8.16.195:9
69.##7.18.183:9
70.##.97.227:9
[2######58:400:407::573]:9
13#.##9.86.115:9
[2########ec:0:149:210:195:135]:9
14#.##0.195.135:9
[2######8:aacb:2cd::1]:9
13#.##4.178.68:9
[2######00:30::681c:1640]:9
[2######00:30::681c:1740]:9
10#.#8.22.64:9
[2######8:120:434a::1]:9
78.##.76.45:9
[2######8:3::34d7:72ef]:9
[2######8:3::34d6:ef6d]:9
52.###.239.109:9
[2######00:30::681c:1e15]:9
[2######00:30::681c:1f15]:9
10#.#8.31.21:9
10#.#8.30.21:9
[2######00:30::6812:26d5]:9
[2######00:30::6812:27d5]:9
10#.#8.38.213:9
10#.#8.39.213:9
3.##.86.24:9
3.##.118.220:9
[2######00:30::681b:bc12]:9
[2######00:30::681b:bd12]:9
10#.#7.188.18:9
10#.#7.189.18:9
18#.#0.98.188:9
13#.##3.174.140:9
19#.##1.173.62:9
[2######00:30::681f:40b1]:9
[2######00:30::681f:41b1]:9
10#.#1.64.177:9
10#.##.130.143:9
10#.##.131.143:9
10#.##.153.135:9
10#.##.152.135:9
[2######00:30::681b:9987]:9
[2######00:30::681b:9887]:9
10#.##.153.135:80
10#.#12.69.5:80
10#.#8.9.100:9
10#.#8.8.100:9
[2######00:30::681c:964]:9
[2######00:30::681c:864]:9
18#.#3.178.6:80
18#.##4.137.176:80
[2######00:30::681b:b2df]:9
[2######00:30::681b:b3df]:9
10#.##.179.223:9
10#.##.178.223:9
[2######00:30::681b:8519]:9
[2######00:30::681b:8419]:9
10#.#7.132.25:9
10#.#7.133.25:9
10#.##.132.25:80
10#.##.122.88:80
34.###.138.199:9
[2##########64:c0c:ac60:beb3:d5c4:7a41]:9
18#.##5.248.8:80
37.###.144.216:80
5.##.248.44:80
10#.##7.77.228:80
10#.#8.0.114:80
12#.##.113.45:80
10#.##.23.254:80
14#.#08.66.3:80
17#.#.148.74:80
10#.##6.182.57:80
16#.#5.82.19:80
51.##.58.65:80
10#.##.154.227:80
89.##.248.92:80
46.#.170.229:80
81.##.48.78:80
88.###.102.185:80
95.###.101.212:80
88.##.77.172:80
78.###.239.188:80
94.##.147.131:80
18#.##6.100.52:80
89.##.250.94:80
10#.##.178.228:80
12#.##.65.215:80
19#.#0.9.66:80
10#.##.170.26:80
17#.#.121.246:80
78.##.209.20:80
52.###.30.254:80
21#.##9.32.21:80
19#.##.174.235:80
10#.#1.91.66:80
46.##.175.181:80
20#.#.83.245:80
37.##.56.44:80
19#.##.228.47:80
17#.##4.10.243:80
18#.##9.110.153:80
67.###.226.240:80
40.##.225.127:80
18#.##2.57.113:80
64.###.165.153:80
27.###.38.116:80
10#.##8.152.128:80
54.###.248.69:80
19#.##8.235.222:80
69.###.18.183:80
88.##.137.107:80
13#.##9.86.115:80
10#.#0.3.93:80
5.##.109.88:80
13#.##4.178.68:80
77.###.121.181:80
91.##.97.173:80
66.###.164.138:80
66.##.144.190:80
10#.##.38.213:80
10#.##9.86.57:80
18#.##.134.131:80
18#.##.227.57:80
20#.##.174.70:80
35.###.105.112:80
14#.##.63.238:80
89.###.107.34:80
10#.##.188.18:80
21#.##9.38.21:80
21#.##1.222.30:80
19#.##3.63.11:80
5.##.53.74:80
94.###.94.218:80
21#.##9.150.140:80
64.###.26.157:80
89.##.250.20:80
52.##.116.180:80
18#.##.97.250:80
13#.#4.96.81:80
17#.#2.26.25:80
94.###.209.113:80
13#.##1.203.137:80
10#.##.130.143:80
19#.##1.58.133:80
18#.##5.116.22:80
17#.#3.45.54:80
18#.#5.227.8:80
16#.#14.9.17:80
16#.##1.219.125:80
18#.##6.180.124:9
46.###.184.104:9
[2#######0:1:1:1:1:d38:c44d]:9
[2#######8:2001:63::46:104]:9
18#.##6.180.124:80
85.##4.153.25:9
[2##########81:8600:812a:5915:8d24:58f3]:9
85.###.153.25:80
19#.#.78.204:9
19#.#.78.189:9
14#.##8.168.153:80
[2######8:aaaa:4a4::1]:9
14#.##8.142.94:9
81.#.72.49:80
21#.##.175.84:80
82.###.140.68:80
[2######00:20::6818:a30]:9
[2######00:20::6818:b30]:9
10#.#4.10.48:9
10#.#4.11.48:9
10#.#4.10.48:80
14#.##8.169.224:9
[2#######0:a002:224::1000]:9
85.##.139.41:80
87.###.16.216:80
10#.#0.40.193:9
10#.#0.39.193:9
[2######00:10::6814:27c1]:9
[2######00:10::6814:28c1]:9
10#.##.40.193:80
[2######00:30::681b:a368]:9
[2######00:30::681b:a268]:9
10#.##.162.104:9
10#.##.163.104:9
[2######00:30::6812:2dc8]:9
[2######00:30::6812:2cc8]:9
10#.#8.45.200:9
10#.#8.44.200:9
10#.#9.159.70:9
10#.#9.160.70:9
19#.#.78.13:9
19#.#.78.12:9
18#.##3.88.11:80
17#.##.115.61:80
[2#######0:a002:221::1000]:9
14#.##8.169.221:9
37.##.249.5:80
54.##1.2.242:9
35.###.131.171:9
54.##.116.43:9
13#.##8.80.80:80
19#.#.147.52:9
19#.#.147.9:9
10#.#1.89.156:9
10#.#1.88.156:9
[2######00:30::681f:589c]:9
34.##5.49.195:9
34.###.180.131:9
54.##4.228.92:9
52.#.95.48:9
34.##6.253.53:9
34.##6.130.40:9
52.##.94.166:9
52.##.139.107:9
34.###.49.195:80
[2#####c20:1:30a1::1]:9
18#.#3.118.23:9
19#.##.13.151:80
54.###.201.183:80
14#.##5.146.194:80
10#.#8.62.177:9
10#.##.63.177:80
69.###.234.254:80
74.###.131.153:9
[2######50:4010:c0e::99]:9
74.###.131.153:80
52.##.104.239:9
52.##.73.13:9
52.##.107.106:9
10#.#1.1.189:9
10#.#1.0.189:80
18#.#.14.158:80
10#.#8.23.64:9
10#.#8.22.64:80
52.###.114.239:9
10#.#1.65.177:9
10#.##.64.177:80
10#.#7.101.53:9
10#.#7.100.53:9
[2######00::6811:6535]:9
[2######00::6811:6435]:9
[2######00:30::6818:6f6c]:9
[2######00:30::6818:6e6c]:9
10#.##.111.108:9
10#.##.110.108:9
[2######00:30::6818:79a4]:9
[2######00:30::6818:78a4]:9
10#.##.120.164:9
10#.##.121.164:9
18#.##.200.186:80
19#.##5.105.186:80
10#.#8.6.218:9
10#.#8.7.218:9
[2######00:30::681c:6da]:9
[2######00:30::681c:7da]:9
81.##9.145.94:9
[2######8:20a:202:1094::]:9
10#.#1.79.110:9
10#.#1.78.110:9
[2######00:30::681f:4f6e]:9
[2######00:30::681f:4e6e]:9
[2##########64:c0a:a58f:6b32:e401:3d8a]:9
87.###.189.172:9
21#.##4.120.196:9
18#.##3.196.156:9
[2######00:30::681b:8e46]:9
[2######00:30::681b:8f46]:9
10#.#7.142.70:9
10#.#7.143.70:9
[2#####280:1:12::35]:9
16#.##4.188.126:9
[2######00:10::6814:952e]:9
[2######00:10::6814:942e]:9
10#.#0.149.46:9
10#.#0.148.46:9
64.##.41.196:80
[2#######0:1:1:4a:39:0:87]:9
20#.#8.86.214:9
20#.##.86.214:80
[2######00::6811:7f12]:9
[2######00::6811:8012]:9
10#.#7.127.18:9
10#.#7.128.18:9
10#.##.127.18:80
20#.##.52.127:80
[2#####e80:1010::2:7]:9
19#.##4.249.102:9
19#.##4.249.102:80
94.###.192.51:80
16#.##1.224.113:80
18#.##9.115.112:80
17#.#2.59.28:9
[2######28:3:2665::28]:9
17#.#2.59.28:80
[2######00:30::681b:b8f4]:9
[2######00:30::681b:b9f4]:9
10#.##.185.244:9
10#.##.184.244:9
10#.##.185.244:80
18#.#3.178.9:80
[2########1:178:170:102:254:1]:9
17#.##0.102.254:9
10#.##.178.234:9
10#.##.179.234:9
16#.##8.23.162:80
14#.##8.142.94:80
91.##4.0.25:80
13.##.43.117:9
13.##.43.53:9
13.##.43.100:9
13.##.43.6:9
10#.##.162.104:80
[2######00:30::681f:599c]:9
18#.##.118.23:80
[2######8:aab9:6d0::1]:9
14#.##0.200.171:9
[2#########5:102:60c0:0:1d8a:6c7e]:9
46.##.213.131:9
18#.##8.78.121:443
10#.##0.8.173:443
21#.##9.36.21:80
62.##.240.85:80
5.##.249.44:9
[2######60::db:1152:20:1]:9
[2######28:3:2971::105]:9
17#.#2.59.105:9
17#.##.59.105:80
16#.##3.16.12:443
13.##.146.221:443
89.##.248.41:443
10#.#8.23.64:80
10#.##.65.177:80
50.##.77.49:443
10#.##.153.135:443
82.##.87.188:443
34.###.138.199:443
87.###.189.172:443
10#.##.39.193:443
52.##.16.93:80
10#.##.88.156:443
80.##.161.67:443
54.##.192.215:9
34.##1.181.6:9
54.##4.206.33:9
11#.##2.24.208:443
14#.##0.200.171:443
23.###.255.59:443
5.###.50.59:443
52.##8.51.60:9
52.##0.30.254:9
52.###.51.60:443
10#.##6.238.109:443
62.##9.128.72:9
62.###.128.154:9
62.###.128.166:9
62.###.128.151:9
62.##9.128.74:9
62.###.128.160:9
62.###.128.157:9
18#.#5.74.23:80
80.##.202.1:80
10#.##.100.53:80
18#.##.73.235:80
[2#######0:a002:225::1000]:9
14#.##8.169.225:9
14#.##8.169.225:80
52.###.114.226:80
23.###.63.64:443
[2######00:20::6819:3065]:9
[2######00:20::6819:2f65]:9
10#.#5.48.101:9
10#.#5.47.101:9
10#.##.48.101:80
83.##.205.54:80
45.##.98.203:80
[2######00:30::681f:58ae]:9
[2######00:30::681f:59ae]:9
10#.#1.89.174:9
10#.#1.88.174:9
10#.##.89.174:80
46.##9.36.51:9
46.##9.36.104:9
46.##9.36.50:9
46.##9.36.51:80
17#.##.169.175:443
74.###.215.86:80
18#.##4.35.26:443
10#.##.163.104:80
[2#########2:0:1c21:12ff:fe00:183]:80
10#.##.128.18:80
[2#########300:0:46a:68ff:fe00:2366]:80
[2######50:4010:c05::99]:80
70.##.97.227:80
[2##########81:8600:812a:5915:8d24:58f3]:80
[2######50:4010:c0e::99]:80
40.###.211.218:80
18#.#4.99.84:80
62.###.128.163:9
62.###.128.72:80
18#.#8.16.84:9
[2#####a60:0:1054::1]:9
18#.#8.16.84:80
[2######0:ff03:1::103]:9
10#.#2.85.122:9
10#.##.85.122:80
18#.##.73.42:443
[2######00:30::681b:9ae6]:9
[2######00:30::681b:9be6]:9
10#.##.155.230:9
10#.##.154.230:9
19#.##4.249.53:443
52.##.176.118:80
17#.##.158.105:443
13.##.150.128:80
85.##.73.235:443
13.###.136.9:443
62.###.197.40:80
37.###.41.125:443
10#.##.0.189:443
18#.#.161.101:80
21#.##.124.149:80
[2######28:3:2665::28]:80
91.###.136.163:80
[2######20:1:30a1::1]:80
[2######8:aacb:2cd::1]:80
10#.##.184.244:80
95.###.95.171:443
[2######50:4010:c0a::c5]:80
10#.#8.1.114:80
10#.##.22.254:80
18#.##3.196.156:443
13#.##7.220.179:443
84.###.182.215:80
10#.##.62.177:443
52.##.80.214:80
[2######00:30::681b:8108]:9
[2######00:30::681b:8008]:9
10#.#7.129.8:9
10#.#7.128.8:9
10#.#7.129.8:80
5.###.219.50:80
[2######00:30::681f:5d02]:9
[2######00:30::681f:5c02]:9
10#.#1.93.2:9
10#.#1.92.2:9
10#.#1.93.2:80
94.###.136.152:80
[2######58:400:407::573]:80
10#.##.131.143:80
52.##.107.106:443
17#.##4.221.197:443
[2######8:aaaa:4a4::1]:80
35.###.131.171:443
80.###.175.20:80
37.##.216.59:9
[2######8:aac4:70a::1]:9
[2#######0:30::681c:1640]:80
[2#######0:30::681c:1740]:80
[2#######0:30::681f:40b1]:80
[2#######0:30::681f:41b1]:80
[2######00:30::681b:9152]:9
[2######00:30::681b:9052]:9
10#.#7.144.82:9
10#.#7.145.82:9
18#.##9.139.134:80
67.###.21.186:80
10#.##.144.82:80
15#.##1.241.124:80
62.###.170.82:443
10#.##.154.230:443
14#.##9.205.4:80
[2#######0:30::681b:a368]:80
[2#######0:30::681b:a268]:80
[2#######0:1:1:4a:39:0:87]:80
[2######80:1010::2:7]:80
[2#####ec0:1::118]:9
18#.#04.29.80:9
13#.##.48.251:80
82.###.39.248:80
62.###.128.154:80
37.##.216.59:443
[2######00:20::6819:ee1e]:9
[2######00:20::6819:ef1e]:9
10#.#5.239.30:9
10#.#5.238.30:9
10#.##.239.30:80
[2######00::6811:7f12]:80
[2######00::6811:8012]:80
10#.##.185.249:9
10#.##.184.249:9
[2######00:30::681b:b8f9]:9
[2######00:30::681b:b9f9]:9
10#.##.185.249:80
10#.##.179.234:80
18#.##9.109.153:443
127.0.0.1:80
18#.##3.232.5:443
15#.##5.136.33:443
94.##6.70.99:80
10#.##.89.156:443
87.###.238.61:80
10#.#1.85.149:9
10#.#1.84.149:9
[2######00:30::681f:5595]:9
[2######00:30::681f:5495]:9
17#.##.40.133:80
84.###.227.175:443
[2######00:20::6819:268]:9
[2######00:20::6819:168]:9
10#.#5.1.104:9
10#.#5.2.104:9
87.###.16.103:80
21#.##2.43.107:80
[2######00:30::681b:ab4c]:9
[2######00:30::681b:aa4c]:9
10#.#7.171.76:9
10#.#7.170.76:9
10#.##.171.76:80
[2######00::6810:8921]:9
[2######00::6810:8a21]:9
10#.#6.137.33:9
10#.#6.138.33:9
10#.##.137.33:80
[2######00:30::681c:d95]:9
[2######00:30::681c:c95]:9
10#.#8.13.149:9
10#.#8.12.149:9
10#.##.13.149:80
10#.##.101.53:80
10#.##.40.193:443
10#.##.88.174:80
[2#######0:30::681b:b8f4]:80
[2#######0:30::681b:b9f4]:80
10#.##.1.189:443
82.###.212.168:9
78.###.217.221:9
82.###.204.197:9
82.###.204.166:9
82.###.212.168:80
[2######00:30::6812:32b2]:9
[2######00:30::6812:33b2]:9
10#.#8.51.178:9
10#.#8.50.178:9
91.##.193.5:80
[2######00:30::681b:8fc7]:9
[2######00:30::681b:8ec7]:9
10#.##.142.199:9
10#.##.143.199:9
10#.##.142.199:80
19#.##3.186.143:80
[2#####b40:0:248::52]:9
19#.#3.248.52:9
19#.##.248.52:80
82.##7.32.82:80
[2#########dead:1013:46:254:21:69]:9
46.##4.21.69:9
46.##4.21.69:80
10#.##.216.137:80
21#.##.168.120:80
[2######00:30::681f:5095]:9
[2######00:30::681f:5195]:9
10#.#1.80.149:9
10#.#1.81.149:9
10#.##.80.149:80
52.#.217.44:80
10#.##8.87.162:80
19#.#0.40.77:80
19#.##6.243.162:80
46.##.40.95:80
18.###.157.243:80
52.##8.29.39:80
35.###.247.230:80
18#.##5.48.136:80
79.###.127.68:80
19#.##.242.151:80
62.###.128.243:9
[2#####b80:a:113::1]:9
50.##.202.46:80
52.###.191.232:80
17#.##2.199.237:80
[2######00:30::681f:40cf]:9
[2######00:30::681f:41cf]:9
10#.#1.65.207:9
10#.#1.64.207:9
10#.##.65.207:80
[2######00:30::681c:7c1]:9
[2######00:30::681c:6c1]:9
10#.#8.7.193:9
10#.#8.6.193:9
10#.#8.7.193:80
[2######00:30::681b:add9]:9
[2######00:30::681b:acd9]:9
10#.##.173.217:9
10#.##.172.217:9
10#.##.173.217:80
5.##.249.44:443
66.#.33.149:9
66.#.32.21:9
66.#.33.21:9
20#.#9.64.43:80
[2######60:4802:34::15]:9
[2######60:4802:36::15]:9
[2######60:4802:38::15]:9
[2######60:4802:32::15]:9
10#.##.63.177:443
77.##.0.174:80
[2######00:20::6818:1959]:9
[2######00:20::6818:1859]:9
10#.#4.25.89:9
10#.#4.24.89:9
[2######00:5:1::23b:2a4f]:9
2.##.42.79:9
[2######00:30::6812:2ccd]:9
[2######00:30::6812:2dcd]:9
10#.#8.45.205:9
10#.#8.44.205:9
13.##.43.20:9
13.##.43.120:9
13.##.43.73:9
13.##.43.70:9
[2######00:30::681f:4326]:9
[2######00:30::681f:4226]:9
10#.#1.67.38:9
10#.#1.66.38:9
13#.##3.8.234:80
[2######00:30::6818:7438]:9
[2######00:30::6818:7538]:9
10#.#4.117.56:9
10#.#4.116.56:9
10#.##.117.56:80
[2######00:30::6818:791f]:9
[2######00:30::6818:781f]:9
10#.#4.120.31:9
10#.#4.121.31:9
10#.##.120.31:80
19#.#.201.65:80
18#.##.147.130:80
19#.#.156.40:80
51.##.119.64:80
10#.##5.115.142:80
19#.##1.172.7:443
10#.##.149.46:443
10#.##.142.70:443
91.###.176.246:443
18#.##6.160.107:80
89.##.248.82:80
88.###.49.154:80
83.###.216.27:80
88.##.114.122:80
95.###.24.133:80
88.##.30.41:80
[2######00:30::681b:b4e8]:9
[2######00:30::681b:b5e8]:9
10#.##.181.232:9
10#.##.180.232:9
10#.##.181.232:80
[2########20a:202:1041::1118]:80
18#.##.5.239:443
10#.##.145.82:80
13#.##2.150.110:80
10#.##.238.30:80
52.##.104.239:443
[2######60:0:1054::1]:80
[2######0:ff03:1::103]:80
[2######28:3:2971::105]:80
95.###.240.230:80
18#.##.154.60:80
14#.##1.231.51:80
[2######00:30::681b:8692]:9
[2######00:30::681b:8792]:9
95.###.92.130:80
18#.##.203.173:443
54.###.206.33:443
10#.##.135.146:9
10#.##.134.146:9
10#.##.135.146:80
[2#######0:30::681f:589c]:443
23.###.255.60:443
[2#######0:a002:225::1000]:80
94.##.83.79:80
13.##.43.100:443
18#.##.39.212:80
[2#######0:30::681f:599c]:443
19#.##8.240.29:443
16#.##.182.192:80
10#.##.178.234:80
14#.##1.16.56:80
18#.##3.235.5:443
[2#######0:30::681f:58ae]:80
93.###.150.51:80
21#.##5.115.173:80
18#.#.13.102:443
14#.##.168.187:80
64.##.206.232:80
[2#######0:30::681f:59ae]:80
21#.##4.120.196:443
18#.##2.57.32:80
[f#######8b:88ff:fefc:921d]:80
19#.##5.159.144:9
19#.##5.159.145:9
19#.#9.23.144:9
10#.##7.229.55:443
19#.#9.23.145:9
88.##.96.240:80
17#.##0.244.172:443
10#.##.143.199:80
51.##.251.241:80
10#.##.81.149:80
80.##.14.116:80
10#.##.1.104:443
19#.##5.159.144:80
10#.##.24.89:443
17#.#2.26.41:80
10#.##.64.207:80
10#.#8.6.193:80
10#.##.172.217:80
10#.##.116.56:80
10#.##.121.31:80
10#.##.180.232:80
79.###.126.131:443
10#.##.148.46:443
10#.##.143.70:443
[2#######0:30::681b:9152]:80
[2#######0:30::681b:9052]:80
62.##.244.28:443

HTTP GET requests:

pr##########eles.com:8081/project/active
pr##############.#om:8081/bots/chkVersion?currVers=3.04&arch=linux
pr##############.###:8081/bots/knock?worker=Universal&os=Linux&version=3.04
pr#############s.com:8081/gw?worker=backup&v=newback
ch#######o.ir/magento2018.zip
pr#########reles.com:8081/gw?worker=
da####.#rg/magento2018.zip
bi#####.com/magento2018.zip
di######.com/magento2018.zip
mo#########handbook.com/magento2018.zip
oh########tis.com/magento2018.zip
gi######.ir/magento2018.zip
d2#.###magento2018.zip
fu#####.ir/magento2018.zip
es########bari.ir/magento2018.zip
cr########nlijst.nl/magento2018.zip
da########ess.nl/magento2018.zip
ga####.#r/magento2018.zip
fi######.org/magento2018.zip
ho#########sgigant.nl/magento2018.zip
ja########tmans.com/magento2018.zip
vi##########.myshopify.com/magento2018.zip
wi##.###.ua/magento2018.zip
ar######.com/magento2018.zip
gs####.#et/magento2018.zip
en####.#r/magento2018.zip
mo#######c.ir/magento2018.zip
go#.##.#r/magento2018.zip
dt######.ru/magento2018.zip
de############svrouw.blogspot.com/magento2018.zip
be#######la.com/magento2018.zip
no#########raping.com/magento2018.zip
el#########erwarmen.eu/magento2018.zip
cd#####.ir/magento2018.zip
eb#.###/magento2018.zip
bu#########itters.com/magento2018.zip
bi########ay.com/magento2018.zip
ka####.#om/magento2018.zip
fa#######t.com/magento2018.zip
ho#######.com/magento2018.zip
li###.##/magento2018.zip
it##.##/magento2018.zip
is#####.com/magento2018.zip
dt####.#u/magento2018.zip
am#######.ir/magento2018.zip
gr#######d.ir/magento2018.zip
ma######.ir/magento2018.zip
de#######on.nl/magento2018.zip
ka########aar.nl/magento2018.zip
at###.##m/magento2018.zip
si#######l.ru/magento2018.zip
av#######er.ir/magento2018.zip
co#########-jobs.com/magento2018.zip
ch#####.ir/magento2018.zip
co#########rtswear.nl/magento2018.zip
fo########kht.ir/magento2018.zip
mi#####.com/magento2018.zip
di########ebi.com/magento2018.zip
ro######.com/magento2018.zip
ay#######ool.ir/magento2018.zip
sa######.qc.ca/magento2018.zip
dy########nal.com/magento2018.zip
ma#######to.ir/magento2018.zip
co#######ou.nu/magento2018.zip
co###########nking.blogspot.com/magento2018.zip
gn####.#r/magento2018.zip
lo#######.nl/magento2018.zip
ar##.##/magento2018.zip
he########rdur.com/magento2018.zip
vo##########.blogspot.com/magento2018.zip
li#######x.info/magento2018.zip
ki#######ine.nl/magento2018.zip
cl######.com/magento2018.zip
ma########er.com/magento2018.zip
bo#######ms.com/magento2018.zip
me####.#r/magento2018.zip
my#####.#om.ng/magento2018.zip
al########ri.com/magento2018.zip
ha#######.ir/magento2018.zip
gu########rapp.com/magento2018.zip
la########iowsky.nl/magento2018.zip
ge########vel.nl/magento2018.zip
he##########envertaling.nl/magento2018.zip
la########ndreis.nl/magento2018.zip
bo########.rocks/magento2018.zip
me#######.##arepoint.com/magento2018.zip
er########rends.com/magento2018.zip
fl###.##/magento2018.zip
wa########nakes.com/magento2018.zip
ma#######l.nl/magento2018.zip
my######.com/magento2018.zip
cr#########estats.com/magento2018.zip
ka######.com/magento2018.zip
la########olf.com/magento2018.zip
he######.com/magento2018.zip
cl#####.com/magento2018.zip
hu########udy.com/magento2018.zip
he########ics.com/magento2018.zip
is##.##/magento2018.zip
it#####.#om.ua/magento2018.zip
tw########ers.com/magento2018.zip
bl####.#u/magento2018.zip
ar#######gh.ir/magento2018.zip
mr####.#om/magento2018.zip
cm######.com/magento2018.zip
na####.#r/magento2018.zip
se########4x7.com/magento2018.zip
ev####.#l/magento2018.zip
em#######.ir/magento2018.zip
co####.#om/magento2018.zip
cr######.com/magento2018.zip
kh######.ir/magento2018.zip
ar#######l.ir/magento2018.zip
ma########sad.com/magento2018.zip
cr#######uws.nl/magento2018.zip
ve#####.hr/magento2018.zip
da#######.nl/magento2018.zip
ir######.com/magento2018.zip
ir#######l.com/magento2018.zip
ju########.co.jp/magento2018.zip
ir#######ce.com/magento2018.zip
ma######.com/magento2018.zip
am########igh.com/magento2018.zip
li######.ir/magento2018.zip
id######.ir/magento2018.zip
ex########ging.nl/magento2018.zip
my########ding.com/magento2018.zip
ma######.info/magento2018.zip
is#######o.com/magento2018.zip
fi######.cz/magento2018.zip
fr########kz.space/magento2018.zip
eo####.#e/magento2018.zip
ir#######.com/magento2018.zip
ni#######ll.it/magento2018.zip
ja##.###/magento2018.zip
ir#####.com/magento2018.zip
da########roy.ru/magento2018.zip
le#########geonline.ir/magento2018.zip
cr####.#om/magento2018.zip
my#########reentea.com/magento2018.zip
ir####.#r/magento2018.zip
ma########id.com/magento2018.zip
mp#######my.at/magento2018.zip
ha#####.org/magento2018.zip
fa####.#om/magento2018.zip
mi###.###.ua/magento2018.zip
co########pdf.com/magento2018.zip
er########rtar.com/magento2018.zip
ha######.ir/magento2018.zip
dr########dian.com/magento2018.zip
ma######.com/magento2018.zip
fr#######s.nl/magento2018.zip
ka#######.com/magento2018.zip
mr########ding.ir/magento2018.zip
ic####.#r/magento2018.zip
nd#####.ir/magento2018.zip
ma########ital.ir/magento2018.zip
mo########hemi.ir/magento2018.zip
ka#####.net/magento2018.zip
ga##.###/magento2018.zip
ed#######t.ir/magento2018.zip
do########ntrum.com/magento2018.zip
ki#######.nl/magento2018.zip
pe########ls.com/magento2018.zip
de######.com/magento2018.zip
la###########lengroningen.nl/magento2018.zip
de########jker.com/magento2018.zip
ko########ern.com/magento2018.zip
ha######.com/magento2018.zip
k-#######.ir/magento2018.zip
le#######c.com/magento2018.zip
dv#######.nl/magento2018.zip
ms#.##.#r/magento2018.zip
ar#######r.org/magento2018.zip
ba#######.com/magento2018.zip
ca#####.com/magento2018.zip
la#######d.nl/magento2018.zip
e-####.#l/magento2018.zip
vi#####.com/magento2018.zip
be#######int.ir/magento2018.zip
cl#########emani.com/magento2018.zip
bo##########hertraining.com/magento2018.zip
un##.###.ba/magento2018.zip
di######.com/magento2018.zip
kj#######had.ir/magento2018.zip
el#######ms.ir/magento2018.zip
ex#######g.ir/magento2018.zip
io#######y.ir/magento2018.zip
li#####.nl/magento2018.zip
na######.com/magento2018.zip
ch#######ne.ir/magento2018.zip
be########dol.org/magento2018.zip
ka#######eld.nl/magento2018.zip
cl#######.ir/magento2018.zip
di#######an.ir/magento2018.zip
cl#######.ir/magento2018.zip
da####.#o/magento2018.zip
ke###.##g/magento2018.zip
na###.##g/magento2018.zip
dr########biei.com/magento2018.zip
hi########atic.com/magento2018.zip
co#######r.com/magento2018.zip
gh####.#et/magento2018.zip
tu#######.app/magento2018.zip
no#########anner.com/magento2018.zip
lu#######s.nl/magento2018.zip
ar#######.ir/magento2018.zip
da#######a.ir/magento2018.zip
fu#######e.nl/magento2018.zip
ia######.ac.ir/magento2018.zip
hi#######.com/magento2018.zip
ka#######b.ir/magento2018.zip
le######.ru/magento2018.zip
as#########mbers.com/magento2018.zip
mi########armink.nl/magento2018.zip
me#########ingpost.org/magento2018.zip
co#####.#nfo/magento2018.zip
co######.nl/magento2018.zip
gh#######a.com/magento2018.zip
si########ster.me/magento2018.zip
of#######e.blog/magento2018.zip
mo#####.com/magento2018.zip
he#############deardeche.blogspot.com/magento2018.zip
en#########eslab.com/magento2018.zip
un#######le.co/magento2018.zip
ka#########althazar.nl/magento2018.zip
in#######.nl/magento2018.zip
in##.##/magento2018.zip
ho#######.com/magento2018.zip
ov##########tbemiddeling.nl/magento2018.zip
me########qazvin.ir/magento2018.zip
sw#####.pro/magento2018.zip
3a###.##/magento2018.zip
do####.#l/magento2018.zip
du###.##/magento2018.zip
eg########bazar.ir/magento2018.zip
le#######an.ir/magento2018.zip
bl###########ver.wordpress.com/magento2018.zip
fo####.#l/magento2018.zip
di#####.ca/magento2018.zip
el#############cuerdos4.blogspot.com/magento2018.zip
oo###.##m/magento2018.zip
na#########potheek.nl/magento2018.zip
fo#######j.com/magento2018.zip
oh##########s.com/s.nl?search=magento2018
dr########online.nl/magento2018.zip
pe###.##t/magento2018.zip
pi###.##/magento2018.zip
es#########ssors.com/magento2018.zip
pu########ms.com/magento2018.zip
ww#.######up.com/magento2018.zip
pa####.#l/magento2018.zip
ww#.#####s.ir/magento2018.zip
ww#.#######es24x7.com/magento2018.zip
st#######ike.nl/magento2018.zip
so######.com/magento2018.zip
ww#.##wacash.com/
sa###.##/magento2018.zip
sh#########ondheid.nl/magento2018.zip
of#######als.nl/magento2018.zip
ww#.#####e.nl/magento2018.zip
ho########artv.ir/magento2018.zip
mu##########kinderkamer.nl/magento2018.zip
mi#####.nl/magento2018.zip
mi#######n.nl/magento2018.zip
mi#########linghe.nl/magento2018.zip
mb#######ng.nl/magento2018.zip
mi#########erburo.nl/magento2018.zip
ww#.#####job.ir/magento2018.zip
mo#######on.nl/magento2018.zip
sv##.##/magento2018.zip
sh#######.com/magento2018.zip
ar#########baltea.com/magento2018.zip
al######.ir/magento2018.zip
ca#######r.com/magento2018.zip
vi#####.com/magento2018.zip
ar#######ng.com/magento2018.zip
vi#######.dk/magento2018.zip
me#####.nl/magento2018.zip
ho########on.com/magento2018.zip
sc######.com/magento2018.zip
tr#######.com/magento2018.zip
vo#######.nl/magento2018.zip
sm########.kiev.ua/magento2018.zip
in##########r.blogspot.com/magento2018.zip
we#########stnaija.com/magento2018.zip
kh#######le.ir/magento2018.zip
ho###esio.com/
ho#####.ca/magento2018.zip
st######.nl/magento2018.zip
bo########ge.com/magento2018.zip
si######.com/magento2018.zip
vo########ken.nu/magento2018.zip
sp##########venendaal.nl/magento2018.zip
co#########sions.com/magento2018.zip
in#######o.io/magento2018.zip
ga######.org.ru/magento2018.zip
av#####.ru/magento2018.zip
fi######.com/magento2018.zip
pa######.com/magento2018.zip
pr#######.nl/magento2018.zip
tr#####.com/magento2018.zip
tu#######.world/magento2018.zip
ww#.#########itis.com/s.nl?search=magento2018
ol#####.com/magento2018.zip
pa#######.com/magento2018.zip
bi####.#om/magento2018.zip
su#######pg.su/magento2018.zip
be#########ghtloss.com/magento2018.zip
cr###.##g/magento2018.zip
wf#########technik.de/magento2018.zip
mi#######kov.ru/magento2018.zip
do#######day.ru/magento2018.zip
mo#######nt.com/magento2018.zip
ed#######bd.com/magento2018.zip
yu#######.nl/magento2018.zip
ul######.com/magento2018.zip
aq#######an.ru/magento2018.zip
mc#######ce.ru/magento2018.zip
ya####.#n/magento2018.zip
al#######ko.com/magento2018.zip
vi########cht.com/magento2018.zip
vi#####.com/magento2018.zip
gr########ers.com/magento2018.zip
dw#########.blogspot.com/magento2018.zip
in#####.com/magento2018.zip
bp#.##.#k/magento2018.zip
de#######.or.id/magento2018.zip
vr#########ieleiden.nl/magento2018.zip
bu########oan.biz/magento2018.zip
fi#####.com/magento2018.zip
sv#####.com/magento2018.zip
pr#########.tumblr.com/magento2018.zip
co######.com/magento2018.zip
on########ing.nl/magento2018.zip
bd#######24.com/magento2018.zip
te#####.ru/magento2018.zip
ro#####.ru/magento2018.zip
ni######.ir/magento2018.zip
cr########ok.com.ua/magento2018.zip
tr###.##/magento2018.zip
pr######.nl/magento2018.zip
si########.social/magento2018.zip
na#######.eu/magento2018.zip
ru######.org/magento2018.zip
os#######r.com/magento2018.zip
os######.ir/magento2018.zip
re############inati.wordpress.com/magento2018.zip
re#######ns.ir/magento2018.zip
da#######.id/magento2018.zip
ot########es.com/magento2018.zip
ch########nts.com/magento2018.zip
pa###.##t/magento2018.zip
on######.ir/magento2018.zip
te#######a.us/magento2018.zip
ro#######.ir/magento2018.zip
we#########uidvat.nl/magento2018.zip
to#########sfinder.com/magento2018.zip
de######.pro/magento2018.zip
no####.#l/magento2018.zip
pa######.ir/magento2018.zip
to#######gn.com/magento2018.zip
st##########n.wordpress.com/magento2018.zip
an#######n.com/magento2018.zip
jd###.##t/magento2018.zip
ra#######r.net/magento2018.zip
3y######.com/magento2018.zip
ww#.########weightloss.com/magento2018.zip
ro#####.com/magento2018.zip
ag########ms.net/magento2018.zip
ri###.##/magento2018.zip
ak#####.com/magento2018.zip
ra########i.com.ua/magento2018.zip
pi##.###.jm/magento2018.zip
pa#######a.com/magento2018.zip
se########tors.com/magento2018.zip
fo########nform.ru/magento2018.zip
ri#####.com/magento2018.zip
ve#######en.nl/magento2018.zip
ra#######cpn.ir/magento2018.zip
je########il.com/magento2018.zip
ap#######4.com/magento2018.zip

DNS ASK:

pr#####ywirreles.com
ar###erver.org
at##o.com
av##-ad.ir
av###server.ir
av##iaz.ir
ba###archeh.ir
az###nsazeh.com
ba###-gsm.com
ba##av.ir
be###boro.com
be###rmkala.com
be###ozprint.ir
be####etaadol.org
bi##tja.com
bl##ux.ru
bo###dkhoms.com
bo###abzar.com
bo###ieplus.ir
ca##rco.com
ch###resane.ir
cd##ore.ir
ch###alino.ir
ch###osting.net
ch###happ.ir
ch##soo.ir
ci###ator.news
cl##int.com
cl#####akhtemani.com
cl###mooz.ir
cl##b24.com
cl###cart.ir
co###ran.com
co##n.com
co###solar.com
co#####registerir.com
cu###elube.it
cs##ro.ir
d2#.ir
da####olutions.com
da###nawards.ir
da##ar.co
di###azi.com
da###ekram.com
de##look.ir
di####ljanebi.com
di###ebaran.ir
dm##ns.pro
do##all.ir
dr####sajadian.com
do##aitt.ir
dr####anrabiei.com
eb#.com
ed###sport.ir
ej####ealstate.ir
em####sending.ir
eb###gold.com
el###or-cms.ir
em###azar.ir
en#####utureslab.com
er####t-bartar.com
en##go.ir
fa##20.com
es####nbarbari.ir
fa####samaneh.com
fa##fun.com
fe###yabgem.com
fi###ank.org
fi##show.cz
fo####lldokht.ir
fu##ala.ir
ga##mn.ir
ga###ravel.com
ge##l.org
gh###esara.com
gi##shop.ir
cl####tres.esy.es
ci####eachhotel.nl
cl###parking.id
cm###edders.com
co##fish.nl
co##dy.com
co#####asportswear.nl
co###gerule.com
co###ny.info
co###ct-you.nu
co#####ntal-jobs.com
cr###oup.com
cr###-nieuws.nl
da####erstroy.ru
da###iano.nl
da##ar.org
de###pace6.net
de###dsbron.nl
de########ehuisvrouw.blogspot.com
de###ash.com
di###ain.com
do##jn.nl
ka######raden.blogspot.com
ka####ldehaar.nl
dr####openonline.nl
ka#####afebalthazar.nl
dr###pilots.nl
ke#####astenfabriek.nl
dt##ecom.ru
ke####concurrent.nl
ki###wolle.nl
du##a.nl
ki###vonline.nl
dv###tlet.nl
ki###ebsites.nl
ki####one.com.ua
la####a-rondreis.nl
e-##be.nl
li######elserfotoclub.de
ve##tio.hr
sa###dat.qc.ca
eo##eb.de
es#####rofessors.com
au##ot.ru
ev##es.nl
ep#######t-kzal-tv.appspot.com
re####ytitbit.com
ex###nging.ir
ex####estiging.nl
bo####nter.rocks
sh###nong.com
bi####stoday.com
bu#####abysitters.com
as#####rnmembers.com
fe###nline.nl
ca###jouer.com
fl##r.nl
bl#######iscover.wordpress.com
co####tteacher.com
fo##uk.nl
fo##oney.pl
dy####csignal.com
fr####elinkz.space
dh#####.blogspot.com
fa###mpost.com
fr###funds.nl
ex#####pronvideos.com
el#########osrecuerdos4.blogspot.com
fo###alldj.com
fu###flife.nl
fr###burg.edu
he###ets.com
ga##.org
h-##n.co
ge##zu.cn
ho####hoolon.com
he####inomics.com
ho###esio.com
ge##loop.nl
ge##zu.org
la####andwolf.com
ho######tel.blogspot.com
ge####ytravel.nl
ma####tender.com
mo#####chenhandbook.com
ke######ie.over-blog.com
ni####afrontier.com
go######vloerbedekking.com
mo##hub.com
oh####thritis.com
pe####orsels.com
of###emate.blog
gy###eflexx.nl
gr####aftehalen.nl
pa###yamail.com
pe###ever.net
pr#####eddingpaper.com
ro###ool.com
he#########naardeardeche.blogspot.com
sc####kguide.net
si####n-master.me
th#####dstarterkit.com
th###aysex.com
he######statenvertaling.nl
to####acefuck.com
hh###aphorst.nl
tu###maza.app
ho#######htech.myshopify.com
ay###hschool.ir
bk#7.ir
d0#.ir
di##grp.ca
eg####advabazar.ir
gn##eb.ir
co#######lspanking.blogspot.com
cr###orlabs.org
cr####eurenlijst.nl
da####ellness.nl
de####erkijker.com
di#####rdeblijdorp.nl
ke##s.org
el#####schverwarmen.eu
no#####ebscraping.com
fa####amnv.com.ua
cm###tro.com
hu####goptics.net
gh##ys.net
ha##ids.org
he#####-filmseiten.de
he####ndhordur.com
th####.k12.ga.us
vo######sims.blogspot.com
in###ears.com
xt##ag.com
my###ghn.com
ho#####fietsgigant.nl
un###akable.co
ho##cava.nl
ka##oo.com
ho#######steenimpregneren.nl
vi######rand.myshopify.com
ia#######t-kzal-tv.appspot.com
bo####intage.com
ic#####einsurance.com
it###ok.com.ua
ig###elist.com
vi##ube.com
in####ek-sptk.com
ho###find.com
in###bank.nl
it#o.nl
3a##3.ir
ak###.com.tw
iz###ool.com
aj##ol.com
ja####baartmans.com
al##rzcd.ir
jo##ein.com
al#####atitavakol.ir
cr####uclear.com
ar##aser.de
di####rvisparto.com
ar###ejari.com
ka######elinrichtingshop.nl
ar#####nherbaltea.com
ho###tampa.info
ar###gers.rest
kh###ryaab.com
he###gamer.tk
yo###rabi.com
ha####npayam.com
sw##lix.pro
hg#.ir
tw####rangers.com
hi##ry.ir
sf##r.com
ho####bartartv.ir
cl###win.com
in#p.ir
ja####sequeen.com
ir##lcd.com
re##iv.ru
is####ccourse.net
eh#####ewyear2019.com
is#w.ir
wi##.com.ua
is##ope.com
ar###et5.com
ke###shahr.ir
si###ntral.ru
kh###jfx.com
ar##fex.ru
le###ngiran.ir
le##ofun.ru
li##a.ir
zi##en.com
lo##nak.ir
my###ic.com.ng
ma##k.info
do###rslon.ru
ma##njob.ir
au###arts.ee
ma###etab.ir
dt##tz.ru
me####rzanqazvin.ir
pr#####forcanada.com
mi##est.com
30##book.ir
mo#####oilservice.ir
ab###khan.com
mo###ridpc.ir
2t##.com
na###abad.info
3f##a90.com
ni##s.ir
al####zafari.com
al###ala.com
am###news.ir
am###eghoo.com
an###idkt.com
ar#d.co
ar###olding.com
ar###dbargh.ir
ar###ala.com
ar###steel.ir
gr###milad.ir
ar###demo.ir
go#.kr.ir
gs##zi.net
gu####safirapp.com
ha##noor.ir
ha###film.ir
ha##aran.ir
he##ex.ir
ha###seo.com
hi###home.com
hi####yasiatic.com
et###dnuts.ir
da###harma.ir
hu####y-study.com
id##lity.ir
lo###lust.nl
ia###arg.ac.ir
io###ademy.ir
ir###office.com
ir##aus.com
ir###oco.com
ir###arcel.com
ir##cs.ir
ir###amak.com
ir##rsi.com
is###nauto.com
ja###ehonar.ir
j7#.ir
ka###oti.com
ka###hesab.ir
ka###heme.com
ka##on.net
ke####arzpayam.ir
kh###defile.ir
kh##egia.ir
kj###rijahad.ir
ko####emodern.com
la##pis.ir
le#####nguageonline.ir
li##path.ir
ma###vie.info
li###et90x.info
ma####ghtesad.com
ma###iranian.ir
ma###ast.com
ma####kharid.com
ma###ack.com
ma###olv.info
ma####hospital.ir
me##et.ir
ma####mgroup.com
mi###.com.ua
mo####ahashemi.ir
mp###cademy.at
mr####oreading.ir
mr##lo.com
ms#.co.ir
mu##cdls.ir
my#y.ir
my###ani.com
na##nf.ir
nd##onf.ir
ja##.app
k-###jesh.ir
ma###attvto.ir
na###ram.com
ka###rwereld.nl
ka##elt.net
do####adcentrum.com
ki###roof.nl
la#######stellengroningen.nl
la###world.nl
le###zbtec.com
li##der.nl
la####abeliowsky.nl
un##.edu.ba
vi##lab.com
se####ies24x7.com
co####tdocpdf.com
10####ources.com
at###-games.com
am####anweigh.com
bo######teachertraining.com
cr##at.com
cr#####ridgestats.com
er####mictrends.com
ge##is.org
ju####-scs.co.jp
me######c.sharepoint.com
me####gasphalt.com
na##q.org
no#####edplanner.com
ou###gger.com
sh###lity.net
st###yball.net
st####nvestor.com
un#####emoticons.com
wa####ut4snakes.com
lu##w24.pl
lu###tapas.nl
ma#####storrents.com
ma###chool.nl
hi#.ir
ic##ri.ir
mb###olding.nl
me##man.nl
me#####tradingpost.org
mi###eigen.nl
mi##etz.nl
mi#####touderburo.nl
mi####kelaarmink.nl
mi#####smellinghe.nl
mo###action.nl
mu######kerskinderkamer.nl
mv#####santnik.org.ua
my#####esegreentea.com
my####boarding.com
my####elboektje.com
na###tors.eu
na#####le-apotheek.nl
ni###arrell.it
ww#.###teeldehaar.nl
ww#.##ckwool.com
ww#.#ing.com.ua
ni#a.nl
ni##i.net
no##no.nl
ww#.#ilitja.com
ol##net.com
of###e-u67.net
of###e-deals.nl
nu##ele.nl
oo##o.com
ww#.###bartender.com
on####mliving.nl
ww#.###lansafirapp.com
on###kdezorg.nl
ov######jachtbemiddeling.nl
or##na.nl
ot####mories.com
ww#.###diteurenlijst.nl
ww#.##damiano.nl
pa##-p.nl
pa###asc.com
pa###mdreams.nl
ww#.##napack.com
pa##hip.nl
pa##m.net
pe#####praktijken.nl
pe####r.partners
pe##e.net
ww#.##distro.com
ww#.##kingsbrand.co
ph###-war.com
pi##t.no
pl####ecognizer.com
pl###ebol.nl
pr###ster.nl
pr##atal.nl
pr####t.amsterdam
pr##otis.nl
ww#.#ahanjob.ir
pe##rp.com
ww#.##5group.com
ww#.#rimcs.ir
ww#.###movies24x7.com
ww#.##wacash.com
pu####dreams.com
pu###anjou.nl
re##ult.nl
re########lluminati.wordpress.com
rf##om.com
rh####-academie.nl
ri####t68.ucoz.ru
ww#.##tinworld.nl
rm#.nl
sa##a.nl
sa##dome.nl
ww#.#esis.org
sc###p2p.com
se####ndsofas.nl
sh###aloo.nl
sh#####rgezondheid.nl
si###ost.com
si##ek.com
si####date.social
tu###maza.world
ww#.##yarebaran.ir
ww#.#odefish.nl
ww#.###yarthritis.com
sm####dent.kiev.ua
so#######enstdrechtsteden.nl
ww#.##terbank.nl
so###ted.com
sp######ool-venendaal.nl
st##kado.nl
st######halen.wordpress.com
st###nt-bike.nl
ww#.#sd.co.ir
st######chpeoplelike.com
ww#.#omijn.nl
su##ued.com
ww#.#and-p.nl
sv#t.nl
sw###tools.org
t3##dad.com
ww#.##ndompost.com
te###ovela.us
ww#.#-cube.nl
ww#.#acha.nl
te##l.nl
ti####awwetiden.nl
ti###itan.be
to#####enaanvragen.net
to####holding.nl
to###design.com
tr###vids.com
tr##q.nl
tr###nmuseum.nl
vl#######sereddingsbrigade.nl
va###n-sport.nl
ve###fdagen.nl
ve##s.km.ua
ve####ijkdirect.com
vi###gbib.dk
vi####utrecht.com
vi##nic.com
vo####lgokken.nu
vo###ybal.nl
we#####ijkruidvat.nl
wi###lfee.nl
vr#####ademieleiden.nl
we###ummers.nl
wf#####zeugtechnik.de
in######lajar.blogspot.com
ho##eco.ca
we#####digestnaija.com
dw######ate.blogspot.com
pi##.gov.jm
gi####oniya.guru
fo####ll-inform.ru
ro##eplo.ru
3y###ews.com
ch####oday.com.cn
de###int.pro
ge###log1.com
in####te-loop.tk
jd##l.net
mb##g.ae
je####semail.com
me####sumer.info
to###nshare.com
ag####forums.net
be####logger.com
bu####ss-loan.biz
co#####tevisions.com
ge##oxi.com
mu####llyguide.xyz
ul###ash.com
al####ron.com.ar
in###actio.io
fr###energy.com
in##ver.com
mc###ervice.ru
so###soft.no
te##les.ru
64##x.ru
al###khodko.com
ro##rud.ru
ru###in.info
su###mmorpg.su
ga###ysfilm.com
wo#####f-wonders.net
ya##uz.cn
yu###orks.nl
li##mov.com
ze###onik.ru
cr####znatok.com.ua
fa####kuhnya.com
a8####22e110e3.com
ko##pix.ir
am###polis.com
ga###ine.org.ru
tz########web-acc.azurewebsites.net
vr###dagen.nl
gt####rmativy.ru
av##sta.ru
se####locators.com
ty####.k12.pa.us
bl###mag.com
aq###iumfan.ru
ac####textbook.com
an###yporn.com
wi###arles.com
hd##w.cc
bp#.co.uk
gl####-economy.tk
fi###rls.com
pr#####tuff.tumblr.com
tr##inc.com
cr##l.org
co###pro.com
bd###airs.com
bd###ults24.com
ed###reerbd.com
hh#####oncleaner.com
tk##rog.com
gr####hackers.com
bi##py.com
an###.com.bd
mi###ornikov.ru
do###sstoday.ru
ch####ariants.com
sv##tor.com
ru###ert.org
ra####etali.com.ua
jo##o.com
mo###npoint.com
fi##gag.com
ap###k-k24.com
de###pers.or.id
ka###global.id
ti####igital.net
ae###eng.com
be#####sweightloss.com
da###crip.id
fi###pik.live
no##on21.id
ni##vita.ir
nk##p.ir
no##32.ir
no###ozgar.ir
on##azar.ir
os##turk.ir
os###negar.com
ou#o.ir
p2#.#ervices
pa###room.ir
pa##ndpc.ir
ww#.##hosted.com
pa###kade.com
ww#.#aahq.org
pa###mpars.com
pa###etiles.com
pa####electronic.ir
pa##vps.com
pa##aks.ir
pa###zbama.com
pa##ncrm.ir
pa####htmelk.com
pe#####badminton.com
pe##han.com
ph####rm-themes.com
pi####sahand.com
pi###azteb.com
pl###nstore.ir
ww#.##s-holding.nl
ps##rint.ir
ra##rgps.ir
ra###pars.com
ra###bco.com
ra##x.ir
ra##aval.ir
ra###aze.com
ra###oyan.com
ra###moon.com
ra###nhost.com
ra###safar.net
re###ations.ir
ri##o.ir
ri##oun.com
ro##pic.ir
ro##web.com
ro#t.ir
ro###city.ir
sa###iran.ir
sa###homa.ir
sa##s.ir
sa####aghashian.com
sa###ontrol.com
sa####gfixers.com
sa####ehhesab.ir
ra###rangcpn.ir
ra###ics.com
re####lection.com
rs###signing.ir
sa###nshop.ir
se##atis.ir
sb#g.ir
sa#o.ir
sc###bank.com
ww#.#eesman.nl
se####studios.com
sc###l-expo.com
se###heme.com
se###anmqt.com
se###celand.ir
sg#.ir
sh##tot.ir
ww#.#####school-venendaal.nl
se###zar.gold
sh####rshoes.com
sd##-f.com
ww#.##lleybal.nl
se##ama.com
to#####spotsfinder.com
sh####rizstore.ir
ww#.#isonic.com
ww#.###smellinghe.nl
te##toy.in
su###isehost.in
so##hub.com
ww#.####tipsweightloss.com
50##efs.org
ak##gon.com
ww#.###roomliving.nl
ww#.##rdvornikov.ru
ww#.#romotis.nl
si###lmag.ir
gl###search.com
bi####astrology.com
ww#.###-memories.com
si##xeg.com
si###rcolt.info
si####-tractor.com
sk#t.ir
ww#.##borgbib.dk
so###luse.ir
so###yung.ac.kr
ww#.#risq.nl
ww#.##taldesign.com
sm###nell.ir
ww#.#otino.nl
so###land.com
so###s24.com
an#####acastrolive.com
ev###ingdoor.ca
ww#.##expert.org
st####trophytum.com
ce###sfacts.com
da####otnettips.com
st###abzar.com
ca###wishes.com
ba#######esignbd.blogspot.com
ta###almas.com
de###nrshub.com
ek#.hk
ta####etehran.ir
io###eator.com
ta###texte.tk
ta###sanat.ir
ve###themes.com
tr##2.com
ta###mito.com
sh###iptv.ir
sh###zbox.ir
ta###man.com
na####rayadav.com
ch###ea-news.co
ta#####at-tabriz.com
rc####rcyland.org
jo###jordan.com
ta###gas.com
my###bits.com
sh###anshop.ir
te###nbid.com
sh##hex.com
sh###kbux.com
te##nic.com
si##s.ir
tr###glify.io
th#z.ir
tu##js.com
wi##ate.com
ti###rvice.com
ni###ining.ltd
su###tar.com
to####lastic.com
sm####erviceco.ir
bl####ronbeast.com
to#######adcenter.mihanblog.com
to##ng.info
tr####n-stars1.ir
un###evisa.net
up##oder.ir
vi##site.ir
vi###lay.com
wi#####d-cable-sale.com
ya####hebrj.ac.ir
ya###bavi.com
yi#.org
za###che.com
zi###visha.in
zn#w.ir
zo###obile.ir
by##o24.ru
gr####slutphoto.com
zk##tky.cz
um##hka.net
su#####publications.com
up##.edu.py
co###list.io
em#.ee
dd#######movies.blogspot.com
ia#.af
pa####etwork.club
pr###gixme.com
qu###ouncil.com
ra###ico.com
sw#.af
pp####dfonline.com
ua###side.com
ic##k.com
di##ama.ch
to##op.ru
qu####-gratuit.com
be####ucetsites.com
ut###rvices.com
es####darural.pt
gr####ecret.online
sp###synth.ru
yo#####inerevenue.com
li#####lectorales.ma
cd##tv.net
ca###noto.com
di##at.com
mp####ircep.site
ad###o.co.nz
st###school.ru
i-###ions.ru
su##fm.com
ab##home.ru
ge###yslab.com
bd##op.com
ka####r-style.ru
me###rtal.net
sv##ba.sk
go##l.com
de##hop.ru
si###cher.ru
fu##all.pk
mo###eogram.com
ot##vnoj.ru
ki#####society.co.uk
st###line.com
ph######pvideotutorial.com
sa###orumu.com
on####-update.ir
kp#.co.ke
au####vriki-eva.ru
me##ne2.ru
be####lencuba.com
ba###decor.ru
bo###on.com.ph
de######or2018.weebly.com
ga###.com.ph
ho###ining.biz
so####oundry.com
th######one.blogspot.com

Sends data to the following servers:

10#.##0.8.173:443
18#.##8.78.121:443
13.##.146.221:443
89.##.248.41:443
34.###.138.199:443
50.##.77.49:443
11#.##2.24.208:443
10#.##.153.135:443
85.##.73.235:443
17#.##4.221.197:443
17#.##.158.105:443
52.###.51.60:443
13.###.136.9:443
10#.##.154.230:443
37.##.216.59:443
82.##.87.188:443
14#.##0.200.171:443
10#.##6.238.109:443
18#.##9.109.153:443
13#.##7.220.179:443
35.###.131.171:443
84.###.227.175:443
5.###.50.59:443
10#.##.1.189:443
10#.##.63.177:443
19#.##1.172.7:443
91.###.176.246:443
10#.##.40.193:443
5.##.249.44:443
87.###.189.172:443
17#.##.169.175:443
13.##.43.100:443
21#.##4.120.196:443
18#.##3.235.5:443
18#.#.13.102:443

Receives data from the following servers:

18#.##8.78.121:443
10#.##0.8.173:443
13.##.146.221:443
89.##.248.41:443
34.###.138.199:443
50.##.77.49:443
11#.##2.24.208:443
10#.##.153.135:443
85.##.73.235:443
17#.##4.221.197:443
17#.##.158.105:443
52.###.51.60:443
13.###.136.9:443
10#.##.154.230:443
37.##.216.59:443
82.##.87.188:443
14#.##0.200.171:443
10#.##6.238.109:443
18#.##9.109.153:443
13#.##7.220.179:443
35.###.131.171:443
84.###.227.175:443
5.###.50.59:443
10#.##.1.189:443
19#.##1.172.7:443
91.###.176.246:443
10#.##.63.177:443
5.##.249.44:443
10#.##.40.193:443
87.###.189.172:443
17#.##.169.175:443
13.##.43.100:443
21#.##4.120.196:443
18#.##3.235.5:443
18#.#.13.102:443

Other:

Collects OS information

Collects CPU information

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations