A few days ago, we posted a list of domains hosting webshells fortimthumb related attacks. We identified more than 420 different URLs hosting those backdoors.
What is interesting is that during the same period, we identified almost 1,000 ip addresses scanningsites for vulnerable thimthumb scripts on WordPress themes and plugins. Those are all the ips and the numberof hits we detected:
507 209.235.136.112
467 37.59.87.162
312 212.122.222.32
268 88.191.116.184
245 216.69.224.11
236 184.171.241.132
225 94.23.230.97
207 216.75.35.176
207 209.235.136.116
196 67.228.195.2
178 176.31.124.28
142 46.105.99.187
133 88.198.164.237
128 176.31.239.45
126 200.98.137.215
112 209.235.136.113
108 193.34.131.144
107 64.9.215.134
102 201.47.74.114
101 72.32.123.95
98 74.63.216.3
94 77.79.121.92
93 94.73.156.146
93 72.47.192.128
93 1.234.4.69
85 95.163.15.34
85 64.15.152.22
85 184.107.220.98
84 91.121.89.20
84 178.32.137.94
81 217.160.5.94
80 91.121.79.95
78 166.84.191.131
77 93.185.96.93
75 174.133.215.253
73 70.33.214.245
73 67.228.123.91
72 50.47.58.114
72 46.105.115.5
71 190.14.239.48
70 174.142.90.84
69 216.114.213.226
66 66.151.184.205
66 173.212.211.203
65 84.88.226.250
64 207.44.149.66
63 91.121.95.127
63 91.121.18.122
61 88.190.23.29
58 89.36.133.62
58 80.82.118.244
58 31.7.34.14
58 194.88.212.212
58 188.165.249.102
57 92.114.87.156
57 37.59.42.18
56 219.83.123.173
55 79.99.133.138
55 50.97.215.122
55 213.171.37.206
55 119.110.97.142
54 83.143.81.242
54 203.217.172.52
52 121.125.79.179
51 177.12.161.31
50 189.38.90.45
49 208.116.60.43
48 67.218.96.160
47 207.210.231.42
46 24.35.157.72
46 204.232.204.219
45 109.104.76.142
44 80.82.116.51
44 216.18.193.140
43 77.109.127.41
42 210.127.253.245
42 205.186.132.28
41 91.121.68.33
41 90.198.87.118
41 83.169.39.233
40 203.201.173.150
39 70.32.83.233
39 200.98.147.111
39 176.9.21.235
38 91.121.161.131
38 31.210.113.232
37 91.195.214.12
36 80.91.80.242
36 64.34.166.146
36 188.165.254.104
35 31.210.48.34
35 200.98.149.187
35 184.106.130.234
34 72.232.194.50
34 216.218.208.130
34 207.250.111.6
34 188.132.228.146
33 87.253.155.151
33 188.165.212.9
33 188.121.54.44
33 184.106.150.41
32 87.106.109.97
32 148.241.188.18
31 75.149.34.188
30 69.167.133.185
30 218.38.16.26
30 176.28.19.216
30 174.142.75.147
29 69.42.88.156
29 188.165.202.170
29 173.212.203.6
28 80.219.214.145
28 70.33.209.156
28 27.50.124.174
28 178.63.60.83
27 94.23.39.53
27 94.124.120.40
27 81.196.196.141
27 79.121.103.71
27 72.32.115.16
27 37.58.64.66
27 222.122.45.146
27 213.85.69.7
27 213.188.134.17
27 212.67.205.187
26 89.18.182.140
26 46.254.17.117
26 210.127.253.231
26 207.99.28.140
26 205.186.152.222
26 200.98.141.45
26 108.175.148.210
25 95.174.19.90
25 79.143.188.72
25 74.54.205.26
25 72.10.49.128
25 62.109.4.88
25 50.57.91.85
25 211.255.32.19
25 205.209.161.221
24 91.201.52.37
24 89.33.197.242
24 70.39.150.59
24 61.38.186.176
24 222.124.218.40
24 212.227.54.144
24 195.42.120.70
24 195.19.204.151
24 190.0.226.14
24 174.123.101.124
24 118.41.250.223
24 109.71.26.49
23 94.23.220.68
23 93.186.201.250
23 59.120.147.250
23 50.28.53.201
23 50.22.152.66
23 49.50.8.63
23 184.169.217.29
22 85.25.100.143
22 212.84.65.11
22 212.233.127.42
22 211.177.64.79
22 64.37.49.129
21 92.48.82.34
21 78.47.234.170
21 50.16.221.233
21 46.17.40.94
21 176.9.147.43
20 94.23.53.171
20 82.98.131.104
20 82.165.144.240
20 80.78.243.24
20 66.172.38.145
20 216.70.99.245
20 212.235.66.244
20 203.238.181.208
20 201.22.184.233
20 199.59.58.162
20 174.37.59.210
19 94.198.99.192
19 91.121.146.73
19 89.175.253.46
19 67.222.99.75
19 46.137.158.54
19 209.250.0.35
19 202.170.69.12
19 188.165.212.198
19 114.108.128.229
18 95.131.66.12
18 63.143.37.141
18 50.97.101.146
18 213.204.1.75
18 211.210.3.214
18 211.16.230.41
18 210.255.240.125
18 184.154.75.162
18 174.36.248.50
18 121.124.124.200
18 119.252.162.162
17 91.213.197.15
17 91.121.211.92
17 91.121.14.64
17 89.39.204.114
17 77.92.69.1
17 69.64.65.10
17 58.227.193.212
17 212.67.205.246
17 173.247.255.203
17 122.155.16.150
16 91.121.75.27
16 91.121.162.58
16 85.25.153.63
16 71.179.168.53
16 67.246.176.100
16 61.221.117.244
16 213.175.222.104
16 204.3.163.93
16 200.98.202.44
16 200.98.151.118
16 200.98.144.243
16 195.92.231.81
16 190.228.29.100
16 176.34.124.194
16 173.236.40.154
16 123.194.208.79
16 121.52.66.102
16 112.196.1.5
15 96.250.100.147
15 94.228.180.218
15 91.205.75.212
15 87.98.216.85
15 87.106.213.254
15 72.20.18.133
15 67.210.119.150
15 66.172.56.14
15 66.117.4.82
15 216.172.168.254
15 208.87.89.18
15 207.58.169.51
15 194.66.34.85
15 184.154.45.109
15 178.63.174.1
14 90.197.20.175
14 79.143.179.229
14 77.92.147.202
14 77.234.200.226
14 75.149.58.249
14 69.41.171.195
14 46.105.29.21
14 213.230.203.42
14 213.152.194.198
14 212.227.22.31
14 205.186.129.128
14 203.17.63.1
14 202.133.244.204
14 200.6.119.218
14 184.82.253.134
14 184.173.6.208
14 184.173.21.132
14 175.117.145.166
14 151.1.182.6
14 122.201.82.173
14 111.90.129.180
13 94.23.98.100
13 93.95.98.95
13 91.215.216.52
13 90.184.137.44
13 85.238.107.233
13 79.143.179.218
13 76.74.186.52
13 46.45.138.202
13 210.165.43.202
13 202.60.89.183
13 196.46.192.42
13 184.172.132.170
13 174.120.38.112
13 109.104.87.199
12 94.23.13.73
12 91.193.43.11
12 89.161.184.151
12 87.238.162.84
12 85.236.51.26
12 85.119.8.141
12 78.136.30.118
12 77.92.147.168
12 74.81.91.178
12 74.52.191.34
12 66.241.104.41
12 50.97.102.82
12 46.32.226.166
12 46.182.216.31
12 218.234.77.241
12 216.70.71.78
12 216.18.206.157
12 216.18.196.2
12 201.12.108.220
12 200.201.231.34
12 193.107.36.100
12 188.138.91.145
12 108.59.251.202
11 96.9.189.146
11 91.121.22.37
11 87.118.92.109
11 87.106.56.169
11 80.82.114.137
11 78.46.204.241
11 78.46.199.202
11 70.32.113.82
11 50.28.21.138
11 222.96.156.81
11 217.118.24.103
11 216.37.12.180
11 212.110.185.48
11 210.107.239.150
11 209.151.224.247
11 194.177.99.143
11 184.172.252.159
11 178.18.84.73
11 176.9.45.123
11 115.68.4.14
11 107.20.248.165
10 96.47.227.15
10 95.110.224.89
10 93.186.177.58
10 88.191.75.23
10 87.229.77.25
10 83.169.45.9
10 81.29.193.233
10 77.66.30.209
10 76.74.175.220
10 75.127.85.70
10 75.127.85.45
10 69.175.8.34
10 67.128.149.182
10 62.193.224.4
10 46.28.108.199
10 218.38.16.103
10 216.151.168.19
10 212.74.43.156
10 203.99.57.180
10 202.57.0.19
10 195.210.29.1
10 193.107.36.80
10 190.123.192.57
10 178.79.158.43
10 178.76.200.42
10 178.63.2.135
10 178.63.100.9
10 173.247.245.86
10 134.117.57.74
10 128.121.201.169
10 122.201.82.218
9 97.79.237.178
9 96.127.175.138
9 94.23.195.160
9 88.198.88.54
9 85.114.137.44
9 82.98.160.51
9 81.222.215.85
9 77.79.12.3
9 74.204.185.59
9 67.215.2.194
9 58.120.227.170
9 31.192.211.170
9 216.172.165.104
9 202.47.77.130
9 200.132.39.115
9 173.251.115.2
9 173.192.12.243
9 140.135.91.52
8 94.32.109.210
8 94.23.239.71
8 92.60.124.128
8 91.214.72.40
8 87.106.182.81
8 82.165.194.222
8 77.223.154.28
8 74.63.214.169
8 74.50.87.99
8 70.86.135.242
8 69.195.198.111
8 67.222.10.132
8 66.147.232.85
8 64.34.161.242
8 64.31.42.237
8 64.13.250.18
8 62.141.39.198
8 50.28.2.163
8 50.23.81.82
8 50.23.47.244
8 46.105.99.58
8 31.192.211.35
8 222.231.1.50
8 218.234.19.72
8 217.64.195.236
8 217.160.224.21
8 209.135.140.128
8 206.71.60.233
8 202.167.218.201
8 200.98.163.225
8 200.98.160.236
8 200.98.138.13
8 193.178.250.53
8 187.61.61.165
8 186.202.141.37
8 180.168.35.130
8 178.236.154.100
8 173.248.187.187
8 141.255.181.15
8 109.123.120.107
7 99.24.46.254
7 94.23.240.148
7 91.221.37.37
7 91.185.199.145
7 91.149.157.176
7 91.121.3.201
7 88.249.177.176
7 88.190.18.29
7 85.214.235.70
7 77.92.150.187
7 77.66.37.2
7 77.245.91.38
7 70.32.114.47
7 66.241.104.42
7 65.39.118.11
7 64.62.206.194
7 63.142.200.173
7 37.34.52.52
7 216.144.244.210
7 213.229.86.190
7 209.217.209.251
7 208.84.155.26
7 208.101.5.28
7 206.214.219.50
7 204.19.248.22
7 202.28.78.240
7 201.20.9.145
7 195.56.65.88
7 184.172.24.106
7 178.211.58.58
7 173.208.251.114
7 173.203.144.195
7 123.140.193.150
7 108.178.61.218
6 94.247.176.182
6 94.124.120.29
6 93.95.221.73
6 91.185.194.68
6 89.253.247.144
6 89.184.78.149
6 89.17.210.90
6 85.17.23.18
6 83.170.77.67
6 82.165.150.156
6 81.171.33.81
6 80.28.131.92
6 79.169.184.113
6 78.189.90.214
6 69.20.124.157
6 68.171.215.82
6 67.96.174.158
6 66.11.236.32
6 64.64.214.222
6 64.40.112.178
6 64.131.79.194
6 62.231.92.34
6 62.213.77.162
6 62.109.24.153
6 59.106.171.33
6 50.63.26.231
6 46.45.181.2
6 31.14.22.211
6 210.152.132.24
6 208.79.154.35
6 208.116.53.9
6 205.186.141.23
6 204.11.234.164
6 203.19.59.200
6 202.60.75.184
6 200.98.146.144
6 200.98.128.65
6 199.119.202.194
6 196.41.139.42
6 195.88.4.18
6 188.165.236.129
6 188.165.203.19
6 187.108.193.245
6 184.22.247.104
6 178.250.175.78
6 178.162.236.74
6 176.31.110.52
6 151.12.52.96
6 151.1.159.92
6 146.255.25.31
6 123.49.59.150
6 119.82.28.244
6 118.174.151.170
6 112.78.112.187
5 96.127.172.220
5 95.84.128.20
5 95.211.60.10
5 95.141.35.196
5 95.110.202.14
5 94.199.181.209
5 94.126.67.3
5 93.114.42.128
5 91.218.121.16
5 91.149.157.139
5 91.121.18.20
5 88.208.252.196
5 87.118.102.37
5 85.95.237.9
5 82.165.135.247
5 81.222.215.166
5 77.66.30.211
5 70.38.37.164
5 69.197.162.35
5 69.194.196.117
5 66.197.209.53
5 66.172.56.7
5 65.117.2.34
5 50.6.77.3
5 50.56.114.163
5 46.22.145.52
5 46.137.104.252
5 46.105.99.98
5 222.122.140.26
5 220.134.95.246
5 217.199.168.222
5 217.194.5.66
5 216.172.168.194
5 213.189.27.126
5 209.200.245.67
5 209.15.212.10
5 207.44.148.10
5 202.154.42.226
5 200.98.144.231
5 200.122.160.93
5 193.105.210.250
5 190.9.35.97
5 188.132.206.75
5 184.73.242.92
5 184.154.61.178
5 180.210.33.5
5 178.77.103.141
5 178.18.138.41
5 176.9.219.108
5 173.236.61.162
5 122.201.78.130
5 122.201.100.137
4 97.79.237.62
4 96.48.90.206
4 96.127.180.234
4 96.127.146.10
4 89.190.99.201
4 89.161.198.83
4 89.161.180.9
4 87.238.162.122
4 85.93.165.132
4 85.17.162.14
4 83.169.36.174
4 80.93.62.63
4 74.84.218.130
4 72.47.194.40
4 69.73.168.145
4 67.91.254.242
4 67.205.29.53
4 66.23.235.245
4 64.69.83.162
4 62.76.184.66
4 62.152.59.202
4 61.186.90.103
4 46.45.143.50
4 46.235.10.145
4 46.166.160.139
4 31.210.100.3
4 31.192.210.136
4 23.24.145.110
4 222.122.142.233
4 216.70.89.143
4 211.39.253.100
4 210.212.165.236
4 208.68.104.61
4 208.117.41.22
4 206.217.138.162
4 202.78.227.252
4 200.98.205.31
4 200.98.150.192
4 200.98.148.176
4 200.98.147.53
4 200.98.147.38
4 200.98.146.61
4 200.98.140.175
4 200.199.231.195
4 199.59.58.152
4 199.192.203.146
4 199.168.189.158
4 199.119.102.95
4 195.209.65.5
4 190.228.137.90
4 189.38.90.25
4 184.173.11.121
4 184.154.20.219
4 178.20.152.120
4 176.9.40.119
4 176.31.236.123
4 173.203.242.89
4 164.177.155.35
4 141.138.202.6
4 129.121.186.178
4 119.252.162.101
4 118.175.4.10
4 109.99.143.95
3 98.172.7.178
3 96.30.32.26
3 95.174.29.227
3 95.128.204.36
3 94.23.254.103
3 94.23.229.64
3 91.196.124.11
3 91.142.219.65
3 91.121.207.55
3 91.121.136.188
3 89.96.167.108
3 89.234.0.29
3 89.221.250.18
3 89.161.221.20
3 89.161.189.21
3 89.107.187.158
3 88.84.142.219
3 87.205.0.169
3 85.17.242.200
3 85.17.169.202
3 84.247.224.39
3 81.4.88.81
3 79.96.74.147
3 74.208.243.129
3 74.200.85.161
3 74.122.196.153
3 72.20.18.134
3 70.32.73.89
3 70.32.104.45
3 69.194.225.92
3 69.163.167.225
3 67.205.96.197
3 67.205.25.85
3 67.18.255.66
3 66.40.8.163
3 66.109.29.218
3 64.238.169.150
3 63.247.82.138
3 50.63.141.15
3 50.56.98.166
3 50.115.43.14
3 46.249.56.222
3 46.235.9.60
3 46.166.135.177
3 41.204.161.16
3 216.67.225.113
3 213.138.244.4
3 213.115.179.254
3 212.110.187.242
3 209.25.221.5
3 209.200.242.241
3 203.88.117.113
3 203.130.234.194
3 202.58.39.138
3 202.150.216.211
3 202.149.72.24
3 201.20.20.83
3 200.98.150.112
3 200.98.147.28
3 200.54.84.45
3 195.8.80.50
3 195.12.48.60
3 194.116.202.17
3 190.98.199.161
3 190.54.32.156
3 188.95.250.131
3 184.171.248.210
3 184.164.142.60
3 184.105.224.66
3 178.77.98.20
3 178.162.248.205
3 176.9.118.22
3 174.143.11.196
3 174.122.7.210
3 173.254.28.55
3 173.236.6.177
3 173.199.150.128
3 168.70.123.218
3 149.156.75.214
3 121.2.68.215
3 113.196.52.220
3 109.247.69.200
3 108.219.207.190
3 108.163.247.74
2 96.8.127.244
2 96.39.79.99
2 95.173.185.22
2 95.173.183.28
2 95.0.11.100
2 94.75.225.91
2 94.75.198.207
2 94.23.247.62
2 93.99.179.147
2 93.95.217.61
2 93.95.217.215
2 91.238.160.3
2 91.218.228.13
2 91.184.52.2
2 89.47.229.116
2 89.255.132.150
2 89.111.177.21
2 89.111.176.22
2 89.107.186.197
2 87.118.82.185
2 87.106.207.15
2 86.105.156.125
2 85.92.87.60
2 85.217.203.169
2 85.214.19.236
2 85.214.143.124
2 83.222.230.44
2 83.222.113.67
2 82.98.148.178
2 79.172.193.89
2 79.170.94.192
2 77.81.183.35
2 77.66.30.206
2 77.235.51.249
2 76.72.167.3
2 76.10.197.36
2 74.82.196.223
2 74.208.64.248
2 72.55.188.79
2 72.32.209.74
2 72.32.198.216
2 70.84.15.82
2 69.73.143.120
2 67.225.176.23
2 67.222.99.72
2 66.172.57.16
2 66.0.235.61
2 65.74.177.180
2 65.111.165.192
2 64.64.9.79
2 64.64.15.6
2 64.191.127.238
2 64.118.87.60
2 63.236.49.164
2 59.106.27.199
2 50.23.185.194
2 46.235.44.93
2 46.20.2.162
2 31.3.245.42
2 31.222.169.151
2 23.23.222.231
2 222.124.29.228
2 222.122.43.202
2 217.168.153.134
2 212.223.152.35
2 208.43.9.82
2 208.122.55.1
2 208.116.36.232
2 207.115.103.72
2 205.204.66.228
2 202.182.163.214
2 201.67.155.235
2 201.34.140.92
2 200.98.160.20
2 200.98.151.161
2 200.98.149.68
2 200.98.148.148
2 199.189.227.125
2 199.115.97.251
2 194.247.28.141
2 193.33.128.178
2 192.217.104.190
2 190.98.219.163
2 190.54.62.76
2 188.127.231.234
2 186.28.232.13
2 184.82.133.26
2 184.173.79.99
2 184.173.20.48
2 184.154.217.37
2 184.107.164.122
2 180.64.197.162
2 178.63.81.198
2 178.33.112.175
2 178.254.2.43
2 178.239.61.179
2 178.239.61.165
2 177.71.177.56
2 176.53.62.186
2 176.31.224.95
2 174.136.0.8
2 173.254.28.60
2 173.254.28.23
2 173.254.216.67
2 173.236.96.162
2 173.236.25.131
2 173.236.13.74
2 171.25.193.21
2 125.141.230.79
2 121.78.246.32
2 119.82.227.76
2 118.127.4.90
2 112.78.8.133
2 109.109.237.74
2 108.166.185.150
2 108.163.170.226
2 108.163.161.218
2 107.20.214.184
1 99.146.16.254
1 98.196.115.31
1 97.79.239.69
1 97.69.167.51
1 95.211.132.102
1 95.174.24.26
1 94.23.104.140
1 93.182.169.192
1 93.125.99.15
1 92.114.82.181
1 91.237.52.231
1 91.197.137.29
1 91.196.124.211
1 91.194.77.83
1 91.121.136.177
1 91.121.1.179
1 91.121.116.54
1 89.221.250.23
1 89.221.250.20
1 88.247.213.44
1 87.246.185.40
1 87.225.253.173
1 87.126.142.242
1 87.118.101.175
1 86.103.173.196
1 85.92.131.103
1 84.246.212.114
1 84.120.233.111
1 81.170.186.175
1 80.187.201.121
1 79.170.44.87
1 77.74.196.226
1 77.247.181.165
1 77.247.181.163
1 77.222.42.97
1 76.99.24.77
1 76.73.100.90
1 75.150.255.27
1 74.208.73.32
1 74.200.83.241
1 74.120.13.132
1 74.119.234.7
1 72.55.186.41
1 72.52.141.238
1 72.47.253.195
1 72.232.245.146
1 72.10.39.148
1 70.99.166.212
1 69.164.196.253
1 69.158.145.34
1 68.233.4.73
1 67.55.106.196
1 67.222.147.98
1 67.210.125.175
1 67.205.67.167
1 67.159.56.162
1 66.241.104.40
1 66.178.176.35
1 66.172.58.7
1 66.167.230.12
1 64.13.253.73
1 63.238.52.119
1 62.220.135.129
1 62.168.109.151
1 62.129.233.56
1 62.103.173.34
1 61.63.24.77
1 61.135.248.175
1 50.56.209.170
1 50.28.48.163
1 50.28.35.216
1 50.23.201.243
1 49.212.108.249
1 49.203.53.111
1 46.73.131.184
1 46.37.6.42
1 46.20.238.208
1 37.59.82.50
1 31.7.59.216
1 27.254.33.198
1 218.145.71.235
1 217.64.195.223
1 216.9.81.189
1 216.75.6.249
1 216.116.135.2
1 213.239.215.115
1 213.171.218.142
1 212.94.79.66
1 212.7.210.106
1 212.68.63.80
1 212.4.153.126
1 212.227.29.181
1 209.140.25.200
1 208.91.198.102
1 206.72.199.46
1 205.134.251.183
1 204.236.226.210
1 204.13.152.150
1 202.65.135.26
1 202.58.181.133
1 201.90.101.100
1 201.72.244.130
1 201.16.208.177
1 200.98.167.23
1 200.98.148.30
1 200.98.131.47
1 200.98.131.29
1 200.69.116.134
1 200.63.97.10
1 200.55.136.101
1 199.48.147.36
1 199.48.147.35
1 199.19.109.163
1 198.66.233.139
1 195.234.4.60
1 193.193.194.194
1 189.10.113.61
1 188.241.4.7
1 188.215.55.94
1 187.53.29.211
1 187.17.113.227
1 184.22.118.62
1 184.173.17.168
1 184.172.243.27
1 184.107.172.18
1 184.107.134.98
1 184.107.133.218
1 184.106.113.224
1 182.48.49.91
1 180.76.6.21
1 180.75.14.193
1 178.9.169.214
1 176.9.34.15
1 176.53.117.121
1 176.10.235.230
1 174.141.165.58
1 174.136.57.6
1 174.121.77.230
1 174.121.213.238
1 173.254.28.61
1 173.248.187.173
1 173.224.211.135
1 173.192.191.96
1 150.70.94.97
1 150.101.122.154
1 146.255.24.115
1 141.8.192.176
1 121.78.88.228
1 119.235.31.112
1 116.127.121.116
1 115.84.177.50
1 111.13.8.126
1 110.45.138.2
1 110.4.45.239
1 109.74.3.161
1 109.163.233.201
1 108.28.126.21
1 107.22.221.23
1 107.22.183.52And we will keep monitoring them.