SSHDoor

Name: SSHDoor indicators of compromise
Creator: isMalicious
Keywords: SSHDoor, malware, IOC, botnet_cc, payload, payload_delivery

Malware Family

21 indicators of compromise attributed to SSHDoor across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

Hashes

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Botnet C&CpayloadPayload Delivery

Indicator	Type
https://scanbot.me/scanbot.sh	url
http://174.71.237.86:1101/sshd	url
http://165.73.108.6:8025//sshd	url
http://123.143.141.75:10006/sshd	url
http://92.66.30.68:9014/sshd	url
http://81.45.183.125:10062/sshd	url
http://2.136.203.189:10042/sshd	url
http://62.197.62.195:60001/sshd	url
http://93.39.215.44:9111/sshd	url
http://102.23.89.5:8083/sshd	url
http://102.216.105.81//sshd	url
http://102.212.61.41:8022/sshd	url
http://118.69.157.212:9112//sshd	url
http://117.240.155.245:30250/sshd	url
http://102.212.61.41:8025/sshd	url
http://77.237.29.219:2027//sshd	url
http://118.69.157.212:9111/sshd	url
0957884a5864deb4389da3b68d3d2a139b565241da3bb7b9c4a51c9f83b0f838	hash
ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef	hash
de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf	hash
7ccd748e7cd3cc2cb747b87bdbdac4c23ad118837b496a19e7f69596dc256ed8	hash

Another file to check? Run a file hash reputation check.