ScumBots
ScumBots@infosec.exchange
<p>I drop dox on scumbag bots and RATs</p>
Posts
-
View post
#StagedC2 config observed at Mon Sep 28 20:26:02 2026 UTC, located at hXXps://pastebin[.]com/raw/csg2M3Cc C2: 63[.]176[.]174[.]154:4449
-
View post
#StagedC2 config observed at Mon Sep 28 20:17:02 2026 UTC, located at hXXps://pastebin[.]com/raw/PnyYmtFb C2: 63[.]176[.]174[.]154:4999
-
View post
#StagedC2 config observed at Mon Sep 28 14:46:02 2026 UTC, located at hXXps://pastebin[.]com/raw/CGXeMaJN C2: 217[.]118[.]188[.]122:1080
-
View post
#StagedC2 config observed at Sun Sep 27 10:43:03 2026 UTC, located at hXXps://pastebin[.]com/raw/0H4Nqqei C2: wjgn0lgjkt[.]localto[.]net:4149 (IP: 89.163.135.20)
-
View post
#StagedC2 config observed at Fri Sep 25 16:45:02 2026 UTC, located at hXXps://pastebin[.]com/raw/1SmT7XN0 C2: 1yinbwtog[.]localto[.]net:6901 (IP: 89.163.135.20)
-
View post
#StagedC2 config observed at Fri Sep 25 09:37:05 2026 UTC, located at hXXps://pastebin[.]com/raw/q9DNLswT C2: fxtun[.]ru:10901 (IP: 45.12.74.91)
-
View post
#StagedC2 config observed at Thu Sep 24 14:58:03 2026 UTC, located at hXXps://pastebin[.]com/raw/PifRxZf1 C2: 147[.]185[.]221[.]217:44557
-
View post
#StagedC2 config observed at Thu Sep 24 06:57:02 2026 UTC, located at hXXps://pastebin[.]com/raw/pR48ZBLb C2: 147[.]185[.]221[.]215:43824
-
View post
#StagedC2 config observed at Wed Sep 23 02:31:03 2026 UTC, located at hXXps://pastebin[.]com/raw/GzqrPqhL C2: taldoking7-57965[.]portmap[.]host:57965 (IP: 193.161.193.99)
-
View post
#StagedC2 config observed at Sun Sep 20 02:18:02 2026 UTC, located at hXXps://pastebin[.]com/raw/jV766MrX C2: Secret12ddse-37683[.]portmap[.]host:37683 (IP: 193.161.193.99)
-
View post
#StagedC2 config observed at Sat Sep 19 19:05:04 2026 UTC, located at hXXps://pastebin[.]com/raw/ueuzuB82 C2: sud[.]tcptunnel[.]su:1570 (IP: 91.92.47.130)
-
View post
#StagedC2 config observed at Fri Sep 18 11:44:02 2026 UTC, located at hXXps://pastebin[.]com/raw/jmqSqmPZ C2: 45[.]130[.]84[.]137:4784
-
View post
#StagedC2 config observed at Fri Sep 18 09:28:03 2026 UTC, located at hXXps://pastebin[.]com/raw/yKRfJE5z C2: 196[.]251[.]121[.]59:5173
-
View post
#MiniReverseShell SHA256: 2f9775654b229a58eda7df7840ad5d05aac2ed05a38ca115d3f4e16d15498c8e C2: 213[.]35[.]99[.]31:4443
-
View post
#StagedC2 config observed at Wed Sep 16 21:20:07 2026 UTC, located at hXXps://pastebin[.]com/raw/gu07Sv28 C2: inmarkfo-41284[.]portmap[.]host:41284 (IP: 193.161.193.99)
-
View post
#StagedC2 config observed at Wed Sep 9 23:41:02 2026 UTC, located at hXXps://pastebin[.]com/raw/g02CRH6E C2: lsnr-48994[.]portmap[.]host:48994 (IP: 193.161.193.99)
-
View post
#StagedC2 config observed at Sun Sep 6 01:35:04 2026 UTC, located at hXXps://pastebin[.]com/raw/DJcXN4MS C2: tico-62688[.]portmap[.]host:62688 (IP: 193.161.193.99)
-
View post
#StagedC2 config observed at Sat Sep 5 22:52:04 2026 UTC, located at hXXps://pastebin[.]com/raw/6pqZXwCs C2: s420mkmn[.]free[.]pwrp[.]cc:19022 (IP: 212.86.105.165)
-
View post
#StagedC2 config observed at Sat Sep 5 15:41:04 2026 UTC, located at hXXps://pastebin[.]com/raw/SqnHbeHF C2: X86-62103[.]portmap[.]host:62103 (IP: 193.161.193.99)
-
View post
#StagedC2 config observed at Sat Sep 5 15:33:03 2026 UTC, located at hXXps://pastebin[.]com/raw/ucGb9aLe C2: X86-62103[.]portmap[.]host:62103 (IP: 193.161.193.99)
-
View post
#StagedC2 config observed at Sat Sep 5 15:10:05 2026 UTC, located at hXXps://pastebin[.]com/raw/0Tzrt7Gv C2: X86-62103[.]portmap[.]host:62103 (IP: 193.161.193.99)
-
View post
#StagedC2 config observed at Thu Sep 3 09:35:06 2026 UTC, located at hXXps://pastebin[.]com/raw/L8xFyMEG C2: dddawdd1234-49556[.]portmap[.]host:49556 (IP: 193.161.193.99)
-
View post
#StagedC2 config observed at Tue Aug 11 08:56:02 2026 UTC, located at hXXps://pastebin[.]com/raw/EwZFxxGM C2: 32[.]tcp[.]cpolar[.]top:14430 (IP: 8.148.27.183)
-
View post
#StagedC2 config observed at Mon Aug 10 11:30:03 2026 UTC, located at hXXps://pastebin[.]com/raw/nGTNp3CF C2: g5p0c6jelb[.]localto[.]net:2697 (IP: 94.156.250.190)
-
View post
#StagedC2 config observed at Mon Aug 10 11:11:01 2026 UTC, located at hXXps://pastebin[.]com/raw/KHr86RKP C2: sj6hbvqowa[.]localto[.]net:8390 (IP: 147.93.153.126)
-
View post
#StagedC2 config observed at Mon Aug 10 05:40:03 2026 UTC, located at hXXps://pastebin[.]com/raw/0a5f9kTh C2: fxtun[.]dev:10016 (IP: 95.181.173.114)
-
View post
#StagedC2 config observed at Sun Aug 9 01:43:02 2026 UTC, located at hXXps://pastebin[.]com/raw/Mr45axwY C2: mypopy4[.]ddns[.]net:6666 (IP: 105.100.7.103)
-
View post
#StagedC2 config observed at Sat Aug 8 10:02:02 2026 UTC, located at hXXps://pastebin[.]com/raw/6htgCTuX C2: Boom01001000-42245[.]portmap[.]host:42245 (IP: 193.161.193.99)
-
View post
#StagedC2 config observed at Sat Aug 8 09:43:04 2026 UTC, located at hXXps://pastebin[.]com/raw/SvCsvbKs C2: 0[.]tcp[.]in[.]ngrok[.]io:22574 (IP: 13.200.54.243)
-
View post
#StagedC2 config observed at Wed Aug 5 20:32:04 2026 UTC, located at hXXps://pastebin[.]com/raw/fXupBPi5 C2: paowiiopr-62836[.]portmap[.]host:62836 (IP: 193.161.193.99)