Hostnames can be a useful fingerprint for detecting attacker infrastructure on the public internet, however some hostnames are commonly observed on the internet and are low confidence indicators.
- WIN-0OQJ6NITOBN - Shinjiru VPS default hostname https://www.shinjiru.com.my/
- WIN-CLJ1B0GQ6JP - Previously been observed as a low-confidence indicator for abuse in https://community.riskiq.com/article/ade260c6