Domain > stunserver.org

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to stunserver.org

MD5	A/V
cffb0ef5ffc303e4b489ea079adc661b
ee299b606ea2165a88a06c3347c0319b	[Downloader-FSH!EE299B606EA2] [Win32.Malware!Drop] [Downloader.Upatre] [TROJ_UPATRE.YYJS] [TR/Crypt.ZPACK.107729] [TrojanDownloader:Win32/Upatre.AF] [Troj.Spy.W32.Zbot] [Trojan.Win32.Waski.BA] [Win32/TrojanDownloader.Waski.A] [Trojan-Spy.Zbot] [W32/Kryptik.CMRK!tr] [Trojan-Downloader/W32.Upatre.22528] [TrojanDwnldr.Upatre.AA3] [Downloader.Upatre.Win32.56] [Trojan.Win32.Kryptik.dgjkkc] [W32/A-986f7f95!Eldorado] [Upatre.EP] [Win32/Upatre.dZMJXbD] [TROJ_UPATRE.YYJY] [Win.Trojan.Downloader-63737] [Trojan-Downloader.Win32.Upatre.btm] [Trojan.DL.Upatre!] [Trojan.Win32.S.Downloader.22528.S] [Trojan-Spy:W32/Zbot.BBMP] [Trojan.DownLoader11.36769] [Win32.Trojan-downloader.Upatre.Alin] [Trojan.W]
a8ac8fda6bffab1977b6d0993f20680f	[Upatre.FN] [HB_Arkam] [Possible_Arkam] [Virus.Win32.Heur.c] [Upatre-FAAJ!A8AC8FDA6BFF]
ac582e1a29ec6145611c9c99dbc6982f	[W32.HfsAutoA.26C4] [Trojan.Staser.r5] [Upatre-FAAJ!A45C07C0A9C6] [Trojan.Email.FakeDoc] [Trojan.Win32.Staser.djrwxn] [W32/Trojan3.MNX] [Downloader.Upatre] [Upatre.FN] [Win32/Upatre.JYaDNOC] [Trojan.Win32.Staser.armm] [TrojWare.Win32.Waski.~A] [Trojan-Downloader:W32/Upatre.J] [Trojan.DownLoader11.46947] [TROJ_UPATRE.JGA] [W32/Trojan.FBCF-1781] [TR/Spy.ZBot.paww] [Trojan/Win32.Staser] [TrojanDownloader:Win32/Upatre] [BScope.Malware-Cryptor.Mystig] [Win32/TrojanDownloader.Waski.F] [Win32.Trojan.Spy.Lnxw] [Trojan.Win32.Staser] [Trojan.Win32.Staser.aDYd]
f187cf5e3423b39426ccdfc0ee937ad9	[Win32/TrojanDownloader.Waski.A] [Artemis!0ECE44BD85D8] [Trojan.Upatre] [Trojan.Upatre.100] [Troj/Mdrop-GGO] [Trojan-Spy.Zbot] [Trojan.Win32.Waski.bA]
ded146214a283a5c58301f36553b751d	[HW32.Packed.7059] [TrojanPWS.Dyzap.r4] [Downloader-FSH!DED146214A28] [Trojan.Win32.DownLoader11.dgttvs] [Infostealer.Dyranges] [Upatre.FE] [Trojan.Win32.Staser.aoea] [Trojan.Staser!] [TrojWare.Win32.UMal.~A] [Trojan.DownLoader11.37169] [Trojan.Staser.Win32.2242] [BehavesLike.Win32.Kudj.fc] [W32/Trojan.KIUB-2534] [TR/Dropper.A.28172] [Trojan/Win32.Staser] [PWS:Win32/Dyzap.F] [Trojan/Win32.Zbot] [Virus.Win32.Heur.c] [Trojan.Staser] [Win32/Battdil.F] [Win32.Trojan.Staser.Wwnx] [Trojan.Win32.Staser] [W32/Staser.AOEA!tr] [SHeur4.CCZQ] [Trojan.Win32.Staser.aLp] [Artemis!DED146214A28] [Trojan.Win32.Battdil] [Trojan.Win32.Staser.aYfk]
9429badbe4e0edfd3873b68334cb5596	[Artemis!9429BADBE4E0] [Trojan.Email.FakeDoc] [Upatre.FN] [HB_Arkam] [Trojan.Win32.Staser.atbv] [Virus.Win32.Heur.c] [Trojan.DownLoader11.53284] [TR/Crypt.Xpack.117343] [Win32/TrojanDownloader.Waski.F] [Win32.Outbreak] [BehavesLike.Win32.MoonLight.nt]
184943a6c6c5aa81019f8e372acd91d8	[Suspicious.Cloud.5]
91c88a6e8e86f60006b4a0af31c41d09
c1beef54a4233b2397bccc9d4fd99aa5
a8f323869a5d9471bd2c7b33550d7f81	[HW32.CDB.9c8c] [Artemis!A8F323869A5D] [Backdoor.Win32.Androm.epii] [PE:Malware.XPACK-HIE/Heur!1.9C48]
3f7cac51877b478388f686b09f2906bf
db1a7f68e2265aaf62f4ed7fb72b8a54	[Upatre-FAAH!DB1A7F68E226] [Upatre.FH] [Trojan-Downloader:W32/Upatre.I] [Troj.Spy.W32.Zbot] [Trojan.Upatre] [Downloader.Upatre] [Win32/Rimecud.IZNMbYB] [Trojan-Downloader.Win32.Upatre.dpo] [UnclassifiedMalware] [Trojan.DownLoader11.40080] [TROJ_UPATRE.YYQP] [BehavesLike.Win32.BadFile.mm] [Troj/Upatre-GU] [TR/Samca.31017587] [TrojanDownloader:Win32/Upatre] [Trojan/Win32.ZBot] [Trojan-Downloader.Win32.Upatre] [Trojan.Win32.Kryptik.BCPNY]
3506debe9affe536b6609e2c5f7a382a	[Upatre.FN] [HB_Arkam] [Win32.Outbreak] [Artemis!474C0A33C91C]
c94255d2b4f68da6c0bbf669c87141b7	[Upatre.FH] [Trojan-Downloader.Win32.Upatre.dml] [Troj.Spy.W32.Zbot] [Win32/TrojanDownloader.Waski.A] [Trojan-Spy.Zbot]
c5ff4757c41c6dd0a3d2dd40730ed61e	[Upatre-FAAC!C5FF4757C41C] [HB_Conjz] [Virus.Win32.Heur.c] [Artemis] [Trojan.Downloader.JREU] [Trojan.Email.FakeDoc] [Win32.Malware!Drop] [W32/Downldr2.IZPN] [Downloader] [TROJ_UPATRE.YYQM] [Trojan.Win32.Yakes.gyft] [TrojWare.Win32.UMal.~A] [Trojan-Downloader:W32/Upatre.G] [Trojan.Upatre.112] [W32/Downloader.BIRZ-6556] [TR/Yarwi.A.48] [TrojanDownloader:Win32/Upatre] [Trojan/Win32.Downloader] [Win32/TrojanDownloader.Waski.F] [W32/Yakes.AJNW!tr] [Crypt3.BBLQ] [Trojan.Win32.Yakes.acM]
1b0639aaee950ab877bc3e57bca1592e	[Upatre.FH] [Mal/DrodZp-A] [Artemis!6AC3CA86E0AF] [Win32.Malware!Drop] [Downloader.Upatre] [Trojan-Downloader.Win32.Upatre.ehc] [Trojan.DownLoader11.52584] [TROJ_UPATRE.LMSA] [W32/Trojan.JDTU-4961] [TR/Yarwi.A.61] [TrojanDownloader:Win32/Upatre.AF] [Win32/TrojanDownloader.Waski.A] [Trojan-Downloader.Win32.Upatre]
d6a69189494ef2da444c8f21309dd8d9
45639cc15c3820ffd35f6be3688147ad	[Spyware.Zbot.ED] [Upatre.FH] [Trojan.Win32.Staser.aroo] [Trojan.DownLoader11.48739] [Troj/Bredo-AJR] [TR/Crypt.ZPACK.93672] [Downloader-FSH!46F7B4AAAC20] [Trojan.Win32.Waski.bA] [Win32/TrojanDownloader.Waski.A] [Trj/Crypter.C]
5c310da56c9674e742862ecdd07a51e0	[W32/Trojan.YDSE-4442] [Upatre.FH] [Trojan-Downloader.Win32.Upatre.dxr] [Troj/Invo-Zip] [Trojan.Win32.Kryptik.bCQFW] [Win32.Outbreak] [TrojanDownloader.Upatre.r4] [Trojan.Upatre] [Win32.Malware!Drop] [Downloader.Upatre] [Win32/Upatre.dKcDPSD] [Trojan.DL.Upatre!] [Win32.Trojan-downloader.Upatre.Swkv] [TrojWare.Win32.Kryptik.~A] [Trojan-Downloader:W32/Upatre.I] [W32/Trojan3.MDD] [TR/Samca.31714495] [Trojan[Downloader]/Win32.Upatre] [TrojanDownloader:Win32/Upatre] [Trojan-Downloader.Win32.Upatre] [W32/Upatre.BTC!tr] [W32/Trojan.XQYQ-2234] [TROJ_UPATRE.YYQR] [Trojan.DownLoader11.41783]

DNS Resolutions

Date	IP Address
2013-08-14	132.177.123.6 (ClassC)
2014-12-18	127.0.0.1 (ClassC)
2015-02-02	127.0.0.1 (ClassC)
2015-07-06	69.172.201.208 (ClassC)
2016-05-03	69.172.201.153 (ClassC)
2017-06-08	209.99.64.52 (ClassC)
2017-06-16	184.168.221.96 (ClassC)
2022-01-08	67.227.226.240 (ClassC)
2024-07-05	64.91.249.20 (ClassC)
2024-09-30	172.232.31.180 (ClassC)
2024-11-29	172.232.4.213 (ClassC)
2024-12-26	172.232.25.148 (ClassC)
2025-06-18	69.16.230.165 (ClassC)
2025-07-11	172.237.146.38 (ClassC)
2025-08-06	172.233.219.78 (ClassC)
2025-08-10	172.237.146.8 (ClassC)
2025-08-24	172.237.146.25 (ClassC)

Port 80

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]