37.221.163.175 (Andromeda http botnet hosted by Romania Voxility S.r.l.)

The laziest skids don’t even bother getting a domain at all.
Why hello Nicolas Moses. What do you have for us today?
It’s andromeda again, this time hosted on a windows vps.

Server:  37.221.163.175
Gate file:  /andro/image.php

EDIT: Oh hey, bitcoin mining. Glad to see you’re still keeping the same old password.

daily500:nigger123456@pool.bitclockers.com:8332

Also a barracuda http panel on the webroot. Even Tropical has figured out that’s a bad idea by now

Hosting infos: http://whois.domaintools.com/37.221.163.175