roller.duckdns[.]orgDomain

Reported by 1 independent source · first reported 30 Jan 2023 by Elastic Security Labs · last reported 30 Jan 2023

Last reported 3 years ago

What the reports say

1 report, newest first · the exact sentence from each

“| roller.duckdns[.]org | domain-name | NETWIRE RAT C2 |”

Elastic Security LabsVendor30 Jan 2023C2
NETWIRE Dynamic Configuration Extraction

Indicators reported together

named in the same reports

139.28.38[.]235in 1 report
149.102.132[.]253in 1 report
184.75.221[.]115in 1 report
185.136.165[.]182in 1 report
185.140.53[.]139in 1 report
185.140.53[.]144in 1 report
185.140.53[.]154in 1 report
185.140.53[.]61in 1 report
185.216.71[.]251in 1 report
194.36.111[.]59in 1 report
194.5.98[.]126in 1 report
194.5.98[.]178in 1 report
194.5.98[.]188in 1 report
194.5.98[.]65in 1 report
212.193.29[.]37in 1 report
212.193.30[.]230in 1 report
213.152.161[.]249in 1 report
217.151.98[.]163in 1 report
23.105.131[.]166in 1 report
37.0.14[.]199in 1 report

Copy these 20 indicators · defanged

20 indicators, defanged, one per line

139.28.38[.]235
149.102.132[.]253
184.75.221[.]115
185.136.165[.]182
185.140.53[.]139
185.140.53[.]144
185.140.53[.]154
185.140.53[.]61
185.216.71[.]251
194.36.111[.]59
194.5.98[.]126
194.5.98[.]178
194.5.98[.]188
194.5.98[.]65
212.193.29[.]37
212.193.30[.]230
213.152.161[.]249
217.151.98[.]163
23.105.131[.]166
37.0.14[.]199

Thanks — we review every report.

Report a wrong value