165.22.193.111

🚨 𝗔𝗟𝗘𝗥𝗧 🚨
Active DDoS botnet C2 server detected!

IP address: 165.22.193.111 (🇳🇱)
Hosting provider: DigitalOcean (AS14061)

C2 ports:
9375/tcp
39284/tcp

Target: CVE-2017-17215
Payload: z3hir.mips
(https://virustotal.com/gui/file/7c17d41fcbb278ef6c7352007ca0966e47b60103a9865f7a415cf4b924b47a97/details)
ftp://165.22.193.111/
https://twitter.com/bad_packets/status/1210050652283359232