Malware Tracker — 2nd Edn May 21

5 min readMay 19, 2021

G’day Cyber Warrior,
Here are the latest IOC lists.

Please note:
You can use this information to create block-lists.
All C2i published here is active at the time of publishing but some of these C2s can go offline at any time after that.
All information provided here is free to use.
C2i published on this site or shared via email could cause some FPs as these IPs/URIs get recycled frequently, you agree to that before using any C2i from this site.
Lists are NOT de-duped. 
You agree that any false positives or outages caused by use of this list will be your responsibility. To get this list emailed to you (free service), please subscribe here:
https://www.malienist.com/p/subscribe-to-free-ioc-list.htmlThanks,
_malienist_

Emotet

hxxp://50.116.7.57:443
hxxp://194.150.118.6:443
hxxp://216.70.88.199:443
hxxp://45.79.89.242:8080
hxxp://45.55.152.252:8080
hxxp://91.142.223.164:8080
hxxp://216.70.88.199:443
hxxp://45.55.152.252:8080
hxxp://194.150.118.6:443
hxxp://91.142.223.164:8080
hxxp://203.150.19.63:443
hxxp://46.249.199.233:8080
hxxp://190.3.183.18:443
hxxp://69.43.168.232:443
hxxp://188.166.50.131:8080
hxxp://103.216.216.95:443
hxxp://50.116.7.57:443
hxxp://194.150.118.6:443
hxxp://216.70.88.199:443
hxxp://45.79.89.242:8080
hxxp://45.55.152.252:8080
hxxp://91.142.223.164:8080
hxxp://59.160.59.152:15272
hxxp://49.4.48.254:12586
hxxp://49.26.49.21:12598
hxxp://60.116.60.109:15502
hxxp://52.69.52.39:13388
hxxp://58.173.58.142:15521
hxxp://57.160.57.152:14760
hxxp://60.0.59.248:15368
hxxp://0.2.160.0:68
hxxp://53.130.53.124:13724
hxxp://190.3.183.18:443
hxxp://54.196.54.188:14028
hxxp://0.0.0.24:13464
hxxp://56.183.56.168:14574
hxxp://50.132.50.124:12940
hxxp://51.188.51.163:13251
hxxp://62.28.61.17:36864
hxxp://57.213.57.201:14820
hxxp://0.0.0.108:12290
hxxp://57.227.57.183:14846
hxxp://63.152.63.148:16284
hxxp://50.68.50.60:12876
hxxp://60.48.59.127:15417
hxxp://55.100.55.92:14188
hxxp://62.243.62.236:16134
hxxp://61.248.61.216:15876
hxxp://50.190.50.163:13082
hxxp://50.175.50.168:12989
hxxp://54.247.54.197:14110
hxxp://55.69.54.43:14268
hxxp://49.132.49.124:12684
hxxp://62.9.61.239:15887
hxxp://0.0.0.12:16054
hxxp://52.177.52.150:13516
hxxp://61.187.61.23:16184
hxxp://62.135.62.30:16018
hxxp://53.26.52.160:13717
hxxp://59.124.59.108:15240
hxxp://63.65.63.21:16248
hxxp://48.128.48.111:12436
hxxp://53.158.53.102:13819
hxxp://52.104.52.100:13490
hxxp://52.35.52.29:13362
hxxp://53.59.52.235:13752
hxxp://58.19.58.14:14882
hxxp://60.24.59.231:15406
hxxp://61.193.61.164:15838
hxxp://62.64.62.60:15968
hxxp://54.147.54.126:13981
hxxp://61.32.61.24:15656
hxxp://61.183.61.126:16108
hxxp://52.235.52.214:13602
hxxp://52.202.52.155:13564
hxxp://55.196.55.188:14284
hxxp://0.1.16.0:208
hxxp://62.158.62.151:16044
hxxp://52.202.52.182:13521
hxxp://53.39.52.215:13635
hxxp://60.8.60.4:15372
hxxp://51.68.51.41:13187
hxxp://50.65.50.3:12877
hxxp://55.102.55.57:14204
hxxp://56.38.56.29:14384
hxxp://55.1.54.196:14143
hxxp://63.60.63.56:16192
hxxp://53.100.53.96:13701
hxxp://61.168.61.164:15788
hxxp://59.129.58.168:15239
hxxp://54.203.54.172:14055
hxxp://62.13.61.30:16032
hxxp://53.223.53.153:13874
hxxp://51.51.51.44:13148
hxxp://52.192.52.188:13508
hxxp://63.191.63.186:16325
hxxp://50.18.49.235:12867
hxxp://63.127.63.120:16262
hxxp://63.10.62.254:16164
hxxp://59.232.59.228:15340
hxxp://51.164.51.156:13228
hxxp://63.64.63.56:16200
hxxp://0.0.0.44:12590
hxxp://59.200.59.168:15336
hxxp://50.76.50.72:12880
hxxp://51.4.50.252:13068
hxxp://60.144.60.121:15517
hxxp://50.91.50.87:12923
hxxp://48.10.48.4:12345
hxxp://52.84.52.77:13418
hxxp://0.0.63.185:32768
hxxp://49.68.49.60:12620
hxxp://58.2.57.236:14872
hxxp://0.1.32.0:128
hxxp://48.67.48.61:12366
hxxp://51.97.51.62:13159
hxxp://48.103.48.63:12429
hxxp://52.187.52.119:13582
hxxp://52.228.52.220:13548
hxxp://58.76.58.72:14928
hxxp://0.2.240.0:76
hxxp://62.160.62.152:16040
hxxp://46.249.199.233:8080
hxxp://190.3.183.18:443
hxxp://69.43.168.232:443
hxxp://188.166.50.131:8080
hxxp://103.216.216.95:443
hxxp://188.166.50.131:8080
hxxp://190.3.183.18:443
hxxp://69.43.168.232:443
hxxp://194.1.151.205:443
hxxp://103.216.216.95:443
hxxp://194.150.118.6:443
hxxp://50.31.146.102:8080
hxxp://203.150.19.63:443

Azorult

hxxp://duddos.biz/gate.php
hxxp://hsms.pk/a/gate.php
hxxp://ouae.info/gate.php
hxxp://aza-blog.p-host.in/wp-content/azo/gate.php
hxxp://scat.cf/gate.php
hxxp://jio399.com/gate.php
hxxp://somrec.net/gate.php
hxxp://hoster.com/gate.php
hxxp://qa3w.top/x/gate.php
hxxp://mdi-pk.com/gate.php

REvil (Ransomware)

hxxp://autodemontagenijmegen.nl
hxxp://winrace.no
hxxp://personalenhancementcenter.com
hxxp://rebeccarisher.com
hxxp://saka.gr
hxxp://hvccfloorcare.com
hxxp://hrabritelefon.hr
hxxp://pomodori-pizzeria.de
hxxp://psc.de
hxxp://love30-chanko.com
hxxp://modestmanagement.com
hxxp://homesdollar.com
hxxp://brawnmediany.com
hxxp://stoeberstuuv.de
hxxp://jolly-events.com
hxxp://newyou.at
hxxp://onlybacklink.com
hxxp://vesinhnha.com.vn
hxxp://justinvieira.com
hxxp://charlottepoudroux-photographie.fr
hxxp://karacaoglu.nl
hxxp://trulynolen.co.uk
hxxp://321play.com.hk
hxxp://boisehosting.net
hxxp://hebkft.hu
hxxp://verifort-capital.de
hxxp://adoptioperheet.fi
hxxp://cortec-neuro.com
hxxp://zzyjtsgls.com
hxxp://corendonhotels.com
hxxp://you-bysia.com.au
hxxp://ctrler.cn
hxxp://biapi-coaching.fr
hxxp://ftlc.es
hxxp://jameskibbie.com
hxxp://reddysbakery.com
hxxp://extensionmaison.info
hxxp://charlesreger.com
hxxp://klusbeter.nl
hxxp://pointos.com
hxxp://1team.es
hxxp://slupetzky.at
hxxp://d2marketing.co.uk
hxxp://smejump.co.th
hxxp://tips.technology
hxxp://daklesa.de
hxxp://daniel-akermann-architektur-und-planung.ch
hxxp://parks-nuernberg.de
hxxp://cuppacap.com
hxxp://krlosdavid.com
hxxp://adultgamezone.com
hxxp://ra-staudte.de
hxxp://fannmedias.com
hxxp://sinal.org
hxxp://baumkuchenexpo.jp
hxxp://esope-formation.fr
hxxp://xn — thucmctc-13a1357egba.com
hxxp://yousay.site
hxxp://xltyu.com
hxxp://corona-handles.com
hxxp://vloeren-nu.nl
hxxp://abuelos.com
hxxp://truenyc.co
hxxp://narcert.com
hxxp://birnam-wood.com
hxxp://resortmtn.com
hxxp://heliomotion.com
hxxp://theletter.company
hxxp://manifestinglab.com
hxxp://advizewealth.com
hxxp://groupe-frayssinet.fr
hxxp://ruralarcoiris.com
hxxp://joyeriaorindia.com
hxxp://mooglee.com
hxxp://mmgdouai.fr
hxxp://centuryrs.com
hxxp://rollingrockcolumbia.com
hxxp://classycurtainsltd.co.uk
hxxp://allamatberedare.se
hxxp://tomaso.gr
hxxp://abogadosaccidentetraficosevilla.es
hxxp://kenhnoithatgo.com
hxxp://chrissieperry.com
hxxp://foretprivee.ca
hxxp://aminaboutique247.com
hxxp://anthonystreetrimming.com
hxxp://tuuliautio.fi
hxxp://crowd-patch.co.uk
hxxp://cuspdental.com
hxxp://comparatif-lave-linge.fr
hxxp://lykkeliv.net
hxxp://intecwi.com
hxxp://buroludo.nl
hxxp://admos-gleitlager.de
hxxp://outcomeisincome.com
hxxp://bradynursery.com
hxxp://evangelische-pfarrgemeinde-tuniberg.de
hxxp://licor43.de
hxxp://colorofhorses.com
hxxp://vancouver-print.ca
hxxp://iyahayki.nl
hxxp://kuntokeskusrok.fi
hxxp://financescorecard.com
hxxp://dutchcoder.nl
hxxp://hatech.io
hxxp://drfoyle.com
hxxp://mytechnoway.com
hxxp://baustb.de
hxxp://philippedebroca.com
hxxp://layrshift.eu
hxxp://antonmack.de
hxxp://solinegraphic.com
hxxp://sexandfessenjoon.wordpress.com
hxxp://enovos.de
hxxp://myteamgenius.com
hxxp://milltimber.aberdeen.sch.uk
hxxp://ziegler-praezisionsteile.de
hxxp://shadebarandgrillorlando.com
hxxp://mirjamholleman.nl
hxxp://bingonearme.org
hxxp://lenreactiv-shop.ru
hxxp://merzi.info
hxxp://meusharklinithome.wordpress.com
hxxp://osterberg.fi
hxxp://testzandbakmetmening.online
hxxp://nokesvilledentistry.com
hxxp://stampagrafica.es
hxxp://lukeshepley.wordpress.com
hxxp://baronloan.org
hxxp://ventti.com.ar
hxxp://lescomtesdemean.be
hxxp://rocketccw.com
hxxp://mbxvii.com
hxxp://ateliergamila.com
hxxp://gadgetedges.com
hxxp://delawarecorporatelaw.com
hxxp://zimmerei-deboer.de
hxxp://bristolaeroclub.co.uk
hxxp://farhaani.com
hxxp://rimborsobancario.net
hxxp://35–40konkatsu.net
hxxp://prochain-voyage.net
hxxp://notsilentmd.org
hxxp://pasivect.co.uk
hxxp://veybachcenter.de
hxxp://greenfieldoptimaldentalcare.com
hxxp://aurum-juweliere.de
hxxp://luxurytv.jp
hxxp://spectrmash.ru
hxxp://expandet.dk
hxxp://wurmpower.at
hxxp://visiativ-industry.fr
hxxp://sportverein-tambach.de
hxxp://muamuadolls.com
hxxp://bouldercafe-wuppertal.de
hxxp://dnepr-beskid.com.ua
hxxp://theshungiteexperience.com.au
hxxp://itelagen.com
hxxp://cimanchesterescorts.co.uk
hxxp://vihannesporssi.fi
hxxp://corona-handles.com
hxxp://dublikator.com
hxxp://seagatesthreecharters.com
hxxp://klimt2012.info
hxxp://alfa-stroy72.com
hxxp://oncarrot.com
hxxp://readberserk.com
hxxp://noskierrenteria.com
hxxp://grupocarvalhoerodrigues.com.br
hxxp://samnewbyjax.com
hxxp://craftleathermnl.com
hxxp://kindersitze-vergleich.de
hxxp://vetapharma.fr
hxxp://punchbaby.com
hxxp://c2e-poitiers.com
hxxp://blog.solutionsarchitect.guru
hxxp://retroearthstudio.com
hxxp://gymnasedumanagement.com
hxxp://platformier.com
hxxp://houseofplus.com
hxxp://i-arslan.de
hxxp://richard-felix.co.uk
hxxp://supportsumba.nl
hxxp://boosthybrid.com.au
hxxp://rieed.de
hxxp://twohourswithlena.wordpress.com
hxxp://humanityplus.org
hxxp://labobit.it
hxxp://igfap.com
hxxp://body-guards.it
hxxp://besttechie.com
hxxp://kissit.ca
hxxp://bastutunnan.se
hxxp://iviaggisonciliegie.it
hxxp://funjose.org.gt
hxxp://caribdoctor.org
hxxp://international-sound-awards.com
hxxp://rafaut.com
hxxp://amylendscrestview.com
hxxp://educar.org

Malware Tracker — 2nd Edn May 21

Emotet

Azorult

REvil (Ransomware)

Written by Vishal Thakur