A Floating Battleground: Navigating the Landscape of Cloud-Based Cryptocurrency Mining Outlaw Domain/IP Addresses 45.9.148[.]125 45.9.148[.]129 45.9.148[.]99 45.9.148[.]117 45.9.148[.]58 45.9.148[.]57 debian-package[.]center --------------------------------------------- TeamTNT Domain/IP Addresses gulf[.]moneroocean[.]stream --------------------------------------------- Kinsing Domain/IP Addresses 194.145.227[.]21 194.38.20[.]199 185.154.53[.]140 45.129.2[.]107 185.87.48[.]183 212.22.77[.]79 185.221.154[.]208 45.156.23[.]210 185.156.179[.]225 193.164.150[.]99 95.181.179[.]88 195.3.146[.]118 93.189.46[.]81 194.38.20[.]242 194.38.20[.]166 --------------------------------------------- 8220 Domain/IP Addresses 209.141.40[.]190 212.114.52[.]24 194.5.249[.]24 104.168.71[.]132 89.41.182[.]160 Bash[.]givemexyz[.]in Xmr[.]givemexyz[.]in Pwn[.]givemexyz[.]in C4k-rx0[.]pwndns[.]pw C4k-irc[.]pwndns[.]pw a[.]oracleservice[.]top b[.]oracleservice[.]top 80.71.158[.]96 192.210.200[.]66 91.198.77[.]78 --------------------------------------------- Kek Security SHA-256 2096B4DDD4CC39B479A4CA994830F236826C10B0 5253B35502C8CFC5E75B9D9518B501C2962B8E39 04fb450435fbdce7c0d90674a8c6128dd59352a3 88e00be46296dca7ec4c2b1dd7e96ac0eced99f6 34647873e425b55733f55b91f36d2fb904e70275 c43ab19cc3f2b29ce54f609d8165cb8a7706e838 d93399eb89a0c7b58eb3cc3fb958bb83042acd71 011ab6b293f44c885f97245198e1e19b2d3d3723 aa472929005f68d7584e6d331293708f3da1360d 1f6966c072111c3b2adcb26c28802f060f073613 0a606391df9938e5d6e37d024f6ac2c34b25a4a4 dccfa33cf4a2ccf688ada823ad6c065adb80379b 338cc29cbaae2506d4881b5e4526897a8082f6db 5253b35502c8cfc5e75b9d9518b501c2962b8e39 a84ee65c2a98bb96e638b72b182ef200839a0a8b 88e00be46296dca7ec4c2b1dd7e96ac0eced99f6 34647873e425b55733f55b91f36d2fb904e70275 958392eeb94bc1e586d42c90b2ce975742b383e2 ead7ff35232b75735dec9e1688d7e2852a314fba 76cac6ac2eb49dbc1e2471ed58c38c1a26db67e4 fbe01fbdaba68d91f6680148f419dc69523ab504 d9178e488863da92cca8cb6f78fea51e66e177c2 85fe3a3b388a5fdb0e8ff3731409c4a1e6705eb8 --------------------------------------------- Domain/IP Addresses 104.237.202[.]4 136.144.41[.]164 195.133.40[.]24 192.210.163[.]201 cocknet[.]xyz ntxkg0la99w[.]zapto[.]org 6timxnxeadz[.]servepics[.]com ikhopklltxtabx[.]3utilities[.]com uw9paqd2qkbbmnpj[.]servecounterstrike[.]com dorsobiwdc[.]myvnc[.]com joooddooaw4anznvt[.]serveirc[.]com yhq6jnkjxa[.]zapto[.]org 729owgmuig[.]serveftp[.]com shcsagfvlcc[.]myftp[.]org yd3ohodv089[.]servequake[.]com le48dpg3xedkf6[.]serveblog[.]net gf8wewtkpmobz5fb[.]servebeer[.]com n3ijwcg6opdv[.]viewdns[.]net hqxbcialyc[.]servequake[.]com vks7b3hndio8[.]viewdns[.]net ksgfnahj4os1o[.]myvnc[.]com idbjlzb4fqlgyjq[.]redirectme[.]net 3zhkxlldm4hqi[.]3utilities[.]com 8vb8c5hkynvn[.]servegame[.]com eajdwdfu5yaea[.]freedynamicdns[.]org 5qpaxixymgivxx2f7w[.]servehttp[.]com kaswpfbommo44z[.]servehalflife[.]com 2qbuoniiqaoh[.]servecounterstrike[.]com o4igeero6azo6wkaz0[.]servehttp[.]com ecd8fxwcqaam[.]redirectme[.]net gxngdomsvca[.]servegame[.]com cvngvtdgsw[.]myddns[.]me dfcaod2lgavd[.]servecounterstrike[.]com jf8cbokcdpnumdcblh[.]servequake[.]com epe4mpqyvcqjqlwom[.]serveblog[.]net ca4qwjdxrqzhuz[.]redirectme[.]net hyotfyj8x00k5s[.]freedynamicdns[.]org memjaeznerzsa[.]viewdns[.]net wio1lb0k4ipomlfsu[.]zapto[.]org 8hjowigjx4i41[.]hopto[.]org 5ximdigx6oo5lhgo3[.]myvnc[.]com ml13fyq5dchdm[.]zapto[.]org urklmycn58o1kvza7[.]serveblog[.]net agkhazmozj5[.]ddns[.]net ft8n29aahpcmeoh[.]myvnc[.]com 5yezwbmuwr2vaann7b[.]serveirc[.]com npaft0uxyo[.]freedynamicdns[.]net kkxdf6ytowu[.]servebeer[.]com opsczqt6zikg6wn[.]myvnc[.]com fsaahjfjacna9d[.]servebeer[.]com vcbpkzoahpycmz[.]hopto[.]org dnis1poovx[.]3utilities[.]com lkqc9icpodzgyo6b[.]ddnsking[.]com as64dwhn4coody[.]myftp[.]biz hag7qhatl0dhbz[.]ddns[.]net dgmciglcgo7[.]myftp[.]biz voz8pdtqzy[.]serveirc[.]com wod5qqtavahipp[.]servebeer[.]com vlmx1xctilwpx1nl[.]sytes[.]net npllv8oiounmpouo[.]myddns[.]me dacepm9aakcbc57gau[.]myvnc[.]com 3dc1bgcpp19clnrvn[.]serveblog[.]net ny3x1xewuuvw17[.]servehttp[.]com xxdqj6xbjpkzhk7k[.]servemp3[.]com odwjoiamhmxqhu[.]gotdns[.]ch f09lwp8iski[.]servepics[.]com 6qnwijvml5mq8[.]myddns[.]me 8z3oic70mvodmawzc[.]myftp[.]org vsikobfzeypluaiq6[.]serveminecraft[.]net 6omaaqoulwif4g1[.]myddns[.]me jrgavs2zhlzj[.]servequake[.]com l8q1l5fxn8key[.]sytes[.]net vlxo3c7n6hjyjdri30[.]ddns[.]net tuc92asg6kf[.]freedynamicdns[.]net wbormxauq0i[.]ddns[.]net vooup25s3kilow[.]servegame[.]com yjop2jiavcolc9xil[.]zapto[.]org 5ljdlfxnhdc3yd[.]freedynamicdns[.]org fkgqkgifjunqmyck[.]bounceme[.]net rrzmkvhfdeppjy[.]freedynamicdns[.]net qb7opowcawiagia[.]viewdns[.]net zscqhclfxfsci7o4l6[.]onthewifi[.]com e7kmdd8inix[.]servebeer[.]com wf8ik4bg46d23oo4[.]freedynamicdns[.]net hpq33mcw9u[.]hopto[.]org bwi1diglnhakajxx[.]sytes[.]net 4chgh6wwcywxivb[.]servehalflife[.]com ewo1wvq0dceouxv[.]serveminecraft[.]net 1soah9qlad2nd[.]zapto[.]org b1egzbiem5u[.]bounceme[.]net nfikaegafzlbb[.]serveirc[.]com 0ooq2mzeveyln5[.]servehttp[.]com emhlecfeosl[.]servegame[.]com mmthka7tdtdu[.]freedynamicdns[.]org hjjsnyi6jes8nj[.]serveirc[.]com o0ohkedkotjidp6ib4[.]3utilities[.]com joaisl3apiga[.]servegame[.]com kcyoyfrsthy[.]onthewifi[.]com ocdcijkpnnri8jh[.]ddnsking[.]com at1v2nohr8hi[.]myftp[.]biz v5jke3mv89fjvxgd[.]serveftp[.]com nwpzhm8ziyhdzm[.]redirectme[.]net zmfkcsjaiyo[.]myftp[.]biz bq9tjyebqvl5qma[.]zapto[.]org 3ypyavbcfhvvn[.]servehalflife[.]com 6o0kauqyoafakk[.]serveblog[.]net aulhhojaxxgl6o[.]ddns[.]net f4xbhybzaok[.]hopto[.]org aanlndhara[.]myddns[.]me m1afommgsdowkmegc[.]redirectme[.]net q0zq5objzit[.]servehttp[.]com zds9njdf6lgsna2[.]myftp[.]biz gmw8ymxao45loyj[.]hopto[.]org qoxl8coc8ijodjs[.]webhop[.]me ewmhkvdcoj3[.]servemp3[.]com pavnnfcqhs[.]zapto[.]org yyx99x7dnnjt5xgef[.]myvnc[.]com plyeywddbktceaiex[.]freedynamicdns[.]net iipiafj8ol7[.]serveirc[.]com dvj4slleogemc5h[.]servecounterstrike[.]com 2074l3oo2ao7[.]serveminecraft[.]net ij9va2d5bylbe3ue0d[.]serveftp[.]com w5id2sawav[.]ddnsking[.]com nipd4k9db6mfklkz6[.]servehttp[.]com zvsdnbxwenerua[.]servecounterstrike[.]com dsuutgicgposgb0wuw[.]serveblog[.]net afantx3dptuudji7o[.]servehalflife[.]com berdkgp6kq6cqwos[.]servebeer[.]com vflpxobdotqf[.]servecounterstrike[.]com 8noqakvfqovsgund[.]serveftp[.]com xko4c4awl6fnc[.]myvnc[.]com x7ozolqliva[.]redirectme[.]net 1zxbhbfkxvc[.]freedynamicdns[.]net 3iwgdwca0ocqdkp[.]ddnsking[.]com qs1t1fdgda5an[.]zapto[.]org 3dhbeel2b9aeqlc[.]servepics[.]com 8hubxfpno5k3[.]myftp[.]org ngdldusdn2misyjm[.]myvnc[.]com aa8zhvpjhfap8isan5[.]servehalflife[.]com kgacvbqboq[.]serveminecraft[.]net v6nwsvmkahaeiaqd6a[.]hopto[.]org 00ohn3s9r8cvclhq[.]myddns[.]me tfcxvcg0lkc9vpx[.]myftp[.]org dkhhig3gwd8tfaywzo[.]freedynamicdns[.]org sfoqqy3tth7ho[.]bounceme[.]net vxgy1i8ovd[.]gotdns[.]ch tq6oc69awg[.]servehalflife[.]com h56wbp0ukxaeqt[.]serveminecraft[.]net bdcauhuzk0d[.]viewdns[.]net hsadjy30bjtnd[.]servecounterstrike[.]com ics0llxiqs0dyh[.]bounceme[.]net eperaownias[.]freedynamicdns[.]org kadievyjbsw7yv[.]onthewifi[.]com loi3h0uhxuvmzunda[.]serveminecraft[.]net 7thsk6fmoylo[.]serveirc[.]com an4x5nsiqwd[.]myvnc[.]com w1eql47oicciyekuqo[.]servecounterstrike[.]com koqzrkb7sy3[.]serveftp[.]com ujtwdz9cimvjsd5p[.]3utilities[.]com dddiwnoxixvgikz[.]serveftp[.]com vnr9okv0bulopadtai[.]servegame[.]com xx4odzkiwbxgks[.]viewdns[.]net shlkbhusangpapj[.]bounceme[.]net 4d09fqv2otvhi[.]webhop[.]me izi9lmzkcjnxlauqbo[.]3utilities[.]com 1z36foeytesdzb[.]servepics[.]com cwwwbyacna7[.]servepics[.]com wuzjobouof[.]serveminecraft[.]net hwxbb1yo9yd3xe[.]serveblog[.]net ejhowx7axazddqnfi[.]servemp3[.]com jzdcjdviiexlms[.]myvnc[.]com fq1nmopagtirdrq[.]myftp[.]biz odsshzbx7hf7m[.]myftp[.]org hhfofpyfcgmpa[.]hopto[.]org aaa0udcwhas5g5[.]servecounterstrike[.]com jglcmri0olljh[.]webhop[.]me xgl3nucwapoxiolkhd[.]servehttp[.]com vak7zjg3sd[.]servehalflife[.]com vitromvznf[.]redirectme[.]net aobyzqedyirxaii[.]ddnsking[.]com rihii2sd86k[.]ddnsking[.]com ebo7dnhoakju[.]zapto[.]org lcfmgiq4uu7ba[.]servemp3[.]com ygoi1zhyvpk[.]servehttp[.]com uap6afeydhyuimhca[.]freedynamicdns[.]net r1ssk1mjed3io[.]serveftp[.]com hunakzev85axob[.]serveftp[.]com hha2du5cxay[.]serveirc[.]com klwudvhdj6q[.]servehalflife[.]com zanhap0kpcllia4dwy[.]servepics[.]com 1vcovadbz6imj[.]serveblog[.]net aob0klff5giaeddmn2[.]serveirc[.]com qn3isckex32[.]viewdns[.]net iyaax6qjskgc8w[.]freedynamicdns[.]net ppi3njz4ur8hl5[.]servebeer[.]com ixicu4gmc0ggdxa[.]myvnc[.]com cvwaqg75eh2knvn[.]myvnc[.]com odaqmymfj5kodqsmcg[.]onthewifi[.]com cn6ly2hbmon3ep[.]myddns[.]me boplsroaqlbcy[.]serveblog[.]net oxoqkvpa64yuwu[.]hopto[.]org v4zomjqwvayjbvs[.]viewdns[.]net 7o0maxgpsddnjkq[.]myftp[.]biz d8u2hwjbppo[.]myftp[.]org a2psnavsou[.]freedynamicdns[.]org tm2whi2dl8g9xhhem8[.]myvnc[.]com eisiizh9bln[.]sytes[.]net basf6zbyvhu2p1[.]serveblog[.]net ctjxh2jdhwmmfenhyh[.]servemp3[.]com faw623ska5evipvarobhpzu4ntoru5v6ia5444krr6deerdnvpa3p7ad[.]onion o4hlcckwlbcy7qhhohqswpqla6wx7c5xmsvk3k4rohknng4nofvgz5id[.]onion p2l44qilgm433bad5gbszb4mluxuejwkjaaon767m5dzuuc7mjqhcead[.]onion 3og7wipgh3ruavi7gd6y3uzhcurazasln55hb6hboiavyk6pugkcdpqd[.]onion bp65pce2vsk7wpvy2fyehel25ovw4v7nve3lknwzta7gtiuy6jm7l4yd[.]onion.ws o4hlcckwlbcy7qhhohqswpqla6wx7c5xmsvk3k4rohknng4nofvgz5id[.]onion p2l44qilgm433bad5gbszb4mluxuejwkjaaon767m5dzuuc7mjqhcead[.]onion 3og7wipgh3ruavi7gd6y3uzhcurazasln55hb6hboiavyk6pugkcdpqd[.]onion bp65pce2vsk7wpvy2fyehel25ovw4v7nve3lknwzta7gtiuy6jm7l4yd[.]onion.ws o4hlcckwlbcy7qhhohqswpqla6wx7c5xmsvk3k4rohknng4nofvgz5id[.]onion vysysuwyjt3txm4zwqrti4nb2mwmcnbv4duqf2btuat3kbu36jwpmhid[.]onion 3og7wipgh3ruavi7gd6y3uzhcurazasln55hb6hboiavyk6pugkcdpqd[.]onion bp65pce2vsk7wpvy2fyehel25ovw4v7nve3lknwzta7gtiuy6jm7l4yd[.]onion.ws o4hlcckwlbcy7qhhohqswpqla6wx7c5xmsvk3k4rohknng4nofvgz5id[.]onion oyya6n4b3aggqqximv6cufx6kbjhmuyv4l6vjdbc4s5zxzjjgadk2vqd[.]onion 3og7wipgh3ruavi7gd6y3uzhcurazasln55hb6hboiavyk6pugkcdpqd[.]onion bp65pce2vsk7wpvy2fyehel25ovw4v7nve3lknwzta7gtiuy6jm7l4yd[.]onion.ws o4hlcckwlbcy7qhhohqswpqla6wx7c5xmsvk3k4rohknng4nofvgz5id[.]onion q2p4b6pprex5mvzxm2xdqgo4q3hy2p4if2ljq7fcoavxvab7mpk232id[.]onion 3og7wipgh3ruavi7gd6y3uzhcurazasln55hb6hboiavyk6pugkcdpqd[.]onion bp65pce2vsk7wpvy2fyehel25ovw4v7nve3lknwzta7gtiuy6jm7l4yd[.]onion.ws ---------------------------------------------