| 2026-01-07 00:04 | 3.132.51.96:80 | Unknown malware | AMAZON-02 AS16509 c2 censys ClickFix first-stage |  DonPasci |
| 2026-01-07 00:04 | 199.101.111.174:3790 | Meterpreter | AS58580 c2 censys FASTRACK hacktool MetaSploit Meterpreter | DonPasci |
| 2026-01-07 00:04 | 3.95.166.250:4443 | Meterpreter | AMAZON-AES AS14618 c2 censys hacktool MetaSploit Meterpreter | DonPasci |
| 2026-01-07 00:04 | 199.101.111.33:3790 | Meterpreter | AS58580 c2 censys FASTRACK hacktool MetaSploit Meterpreter | DonPasci |
| 2026-01-07 00:03 | 154.219.123.95:4321 | AdaptixC2 | AdaptixC2 AS8796 c2 censys FD-298-8796 | DonPasci |
| 2026-01-07 00:03 | 137.220.227.82:8080 | MimiKatz | AS152194 c2 censys CTGSERVERLIMITED-AS-AP hacktool Mimikatz open-dir | DonPasci |
| 2026-01-07 00:03 | 185.208.159.121:8080 | Venom RAT | AS42624 c2 censys RAT SWISSNETWORK02 Venom | DonPasci |
| 2026-01-07 00:03 | 124.198.132.87:4000 | Remcos | AS210558 c2 censys RAT remcos SERVICES-1337-GMBH | DonPasci |
| 2026-01-07 00:03 | 192.159.99.232:1994 | Remcos | AS210558 c2 censys RAT remcos SERVICES-1337-GMBH | DonPasci |
| 2026-01-07 00:03 | 191.107.87.178:2404 | Remcos | AS3816 c2 censys COLOMBIA RAT remcos | DonPasci |
| 2026-01-07 00:02 | 172.81.133.92:80 | Cobalt Strike | AS27176 c2 censys CobaltStrike cs-watermark-987654321 DATAWAGON | DonPasci |
| 2026-01-06 23:30 | http://a1122027.xsph.ru/bde277b7.php | DCRat | dcrat RAT |  abuse_ch |
| 2026-01-06 23:01 | 3.85.11.144:3333 | Unknown malware | AMAZON-AES AS14618 censys GoPhish phishing |  dyingbreeds_ |
| 2026-01-06 23:01 | 51.159.66.201:443 | Unknown malware | AS12876 censys GoPhish phishing | dyingbreeds_ |
| 2026-01-06 23:01 | 95.164.53.246:60000 | Unknown malware | AS213702 censys Viper | dyingbreeds_ |
| 2026-01-06 23:01 | 43.139.158.30:60000 | Unknown malware | AS45090 censys Viper | dyingbreeds_ |
| 2026-01-06 23:01 | 195.24.237.166:8443 | Havoc | AS60223 c2 censys | dyingbreeds_ |
| 2026-01-06 23:01 | 185.146.233.229:443 | Havoc | AS200651 c2 censys FLOKINET | dyingbreeds_ |
| 2026-01-06 23:01 | 185.112.147.172:7443 | Unknown malware | AS44925 c2 censys Mythic THE-1984-AS | dyingbreeds_ |
| 2026-01-06 23:00 | 47.104.73.191:8081 | Cobalt Strike | AS37963 c2 censys | dyingbreeds_ |
| 2026-01-06 23:00 | 8.145.34.111:443 | Cobalt Strike | AS37963 c2 censys | dyingbreeds_ |
| 2026-01-06 20:24 | rang.uk.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 20:15 | techsanjay.in.net | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 20:14 | pqs.uk.net | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 20:13 | karvacolud.in.net | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 20:04 | 217.154.114.85:443 | MimiKatz | AS8560 c2 censys hacktool IONOS-AS Mimikatz open-dir | DonPasci |
| 2026-01-06 20:03 | 94.228.115.109:8888 | DCRat | AS9123 c2 censys dcrat RAT TIMEWEB-AS | DonPasci |
| 2026-01-06 20:03 | 94.228.115.109:7777 | DCRat | AS9123 c2 censys dcrat RAT TIMEWEB-AS | DonPasci |
| 2026-01-06 20:03 | 58.187.17.156:443 | Quasar RAT | AS18403 c2 censys FPT-AS-AP quasar RAT | DonPasci |
| 2026-01-06 20:03 | 192.253.234.63:8082 | Hook | AS152194 c2 censys CTGSERVERLIMITED-AS-AP HookBot | DonPasci |
| 2026-01-06 20:03 | 95.9.236.229:1000 | AsyncRAT | AS9121 asyncrat c2 censys RAT TTNET | DonPasci |
| 2026-01-06 20:02 | 111.230.26.251:8000 | Sliver | AS45090 c2 censys open-dir payload sliver TENCENT-NET-AP | DonPasci |
| 2026-01-06 20:02 | 51.83.254.62:443 | Sliver | AS16276 c2 censys OVH sliver | DonPasci |
| 2026-01-06 20:02 | 130.162.44.203:8443 | Sliver | AS31898 c2 censys ORACLE-BMC-31898 sliver | DonPasci |
| 2026-01-06 20:02 | 124.198.132.87:7777 | Remcos | AS210558 c2 censys RAT remcos SERVICES-1337-GMBH | DonPasci |
| 2026-01-06 20:02 | 13.61.10.87:443 | Cobalt Strike | AMAZON-02 AS16509 c2 censys CobaltStrike cs-watermark-987654321 | DonPasci |
| 2026-01-06 20:02 | 144.91.107.138:80 | Cobalt Strike | AS51167 c2 censys CobaltStrike CONTABO cs-watermark-987654321 | DonPasci |
| 2026-01-06 20:02 | 38.165.47.18:9000 | Cobalt Strike | AROSS-AS AS400619 c2 censys CobaltStrike cs-watermark-987654321 | DonPasci |
| 2026-01-06 19:05 | pradeepprabhu7.duckdns.org | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 19:04 | 46.51.181.113:443 | DeimosC2 | Deimos drb-ra | abuse_ch |
| 2026-01-06 19:02 | 35.233.67.192:443 | Unknown malware | drb-ra Mythic | abuse_ch |
| 2026-01-06 19:01 | 3.223.172.240:443 | DeimosC2 | Deimos drb-ra | abuse_ch |
| 2026-01-06 19:01 | 3.220.193.101:443 | DeimosC2 | Deimos drb-ra | abuse_ch |
| 2026-01-06 19:00 | 222.216.230.48:10250 | DeimosC2 | Deimos drb-ra | abuse_ch |
| 2026-01-06 18:59 | 207.56.215.67:443 | DeimosC2 | Deimos drb-ra | abuse_ch |
| 2026-01-06 18:58 | 104.37.174.84:5723 | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 18:58 | vxe.uk.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 18:58 | todayepisode.ru.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 18:57 | runafrica.us.org | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 18:57 | n188.co.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 18:56 | gate.motfim.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 18:56 | gate.735bet12.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 18:55 | exuberant.uk.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 18:55 | eihbgb.sa.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 18:54 | buybitcoin.us.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 18:53 | 8xx.de.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 18:52 | 777x.us.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 18:50 | 1710.cn.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 18:49 | 148.178.88.51:443 | DeimosC2 | Deimos drb-ra | abuse_ch |
| 2026-01-06 18:49 | 148.178.78.4:443 | DeimosC2 | Deimos drb-ra | abuse_ch |
| 2026-01-06 18:49 | 148.178.86.99:443 | DeimosC2 | Deimos drb-ra | abuse_ch |
| 2026-01-06 18:49 | 148.178.75.103:443 | DeimosC2 | Deimos drb-ra | abuse_ch |
| 2026-01-06 18:48 | 139.59.248.200:55443 | Havoc | drb-ra Havoc | abuse_ch |
| 2026-01-06 18:46 | 111.22.248.46:10250 | DeimosC2 | Deimos drb-ra | abuse_ch |
| 2026-01-06 18:45 | 106.14.250.82:443 | DeimosC2 | Deimos drb-ra | abuse_ch |
| 2026-01-06 18:44 | 104.168.38.238:51337 | Sliver | drb-ra sliver | abuse_ch |
| 2026-01-06 18:43 | 100.31.161.153:443 | DanaBot | DanBot drb-ra | abuse_ch |
| 2026-01-06 18:31 | https://insightme.im/e/electric.php | Unknown RAT | GoToResolve | abuse_ch |
| 2026-01-06 18:31 | https://pub-e306adc6127c4521869ba034f1b34502.r2.dev/EnterpriseElectricalReview.exe | Unknown RAT | GoToResolve | abuse_ch |
| 2026-01-06 18:23 | https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-10-s80-ap-k56/eut11 | ClearFake | ClearFake |  threatcat_ch |
| 2026-01-06 18:20 | 45.150.34.183:4444 | SpyNote | Android AS215826 c2 Spynote triage | DonPasci |
| 2026-01-06 18:19 | aaasx123.com | ValleyRAT | c2 domain RAT triage ValleyRAT | DonPasci |
| 2026-01-06 18:19 | 156.247.41.49:1746 | ValleyRAT | AS401739 c2 RAT triage ValleyRAT | DonPasci |
| 2026-01-06 18:19 | http://91.92.243.58 | Stealc | c2 Stealc stealer triage | DonPasci |
| 2026-01-06 18:17 | 178.16.52.97:4782 | Quasar RAT | AS209800 c2 quasar RAT triage | DonPasci |
| 2026-01-06 18:15 | http://co700017.tw1.ru/1703c858.php | DCRat | dcrat RAT | abuse_ch |
| 2026-01-06 18:14 | https://adwestmailcenter.com/ | Unknown RAT | GoToResolve | abuse_ch |
| 2026-01-06 18:13 | cls-services.uk.com | AsyncRAT | asyncrat c2 domain RAT triage | DonPasci |
| 2026-01-06 18:13 | https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-300-s01-k17/eno80 | ClearFake | ClearFake | threatcat_ch |
| 2026-01-06 18:03 | without-gibraltar.gl.at.ply.gg | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-01-06 18:03 | support-prospect.gl.at.ply.gg | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-01-06 18:03 | seller-editions.gl.at.ply.gg | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-01-06 18:03 | 23.26.108.156:6000 | XWorm | AS23470 c2 triage XWorm | DonPasci |
| 2026-01-06 18:03 | vibeproject776-44233.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-01-06 18:03 | 109.243.148.237:6000 | XWorm | AS39603 c2 triage XWorm | DonPasci |
| 2026-01-06 18:03 | usb-norm.gl.at.ply.gg | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-01-06 17:59 | https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-210-so-ap20-s01/bep10 | ClearFake | ClearFake | threatcat_ch |
| 2026-01-06 17:58 | 89.125.255.131:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:58 | 45.149.154.179:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:58 | 89.125.255.188:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:58 | 89.125.209.242:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:58 | 89.125.255.210:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:25 | 104.236.108.105:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:25 | 178.128.180.137:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:25 | 206.189.5.96:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:25 | 138.68.63.4:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:25 | 161.35.11.190:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:25 | 208.68.37.248:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:24 | 68.183.157.144:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:24 | 159.223.4.152:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:24 | 157.245.224.173:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:24 | 178.62.196.171:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:24 | 139.59.169.182:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:24 | 142.93.77.3:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:24 | 138.68.185.68:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:24 | 159.223.212.74:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 17:22 | meiweibo.cn.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 17:22 | franchise.uk.net | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 17:21 | doggrooming.uk.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 16:55 | peal.us.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 16:55 | kge.uk.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 16:55 | huanle.cn.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 16:55 | gdmp.cn.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 16:55 | dtk.uk.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 16:49 | 116.196.75.68:65531 | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-01-06 16:41 | zun.uk.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 16:41 | sunwin11.us.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 16:40 | ipv6.eu.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 16:40 | iez.uk.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 16:40 | firstcall.eu.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 16:40 | http://bobrecurwarmumsworms.com:8080/updater?for=76AB501390D0C329C365C14CDD1C4CAA | Unknown malware | GoProxy | abuse_ch |
| 2026-01-06 16:30 | http://45.93.20.198/82878e5702cc452c.php | Stealc | Steal | abuse_ch |
| 2026-01-06 16:17 | 109.199.97.78:60003 | VShell | AS51167 c2 CONTABO VirusTotal Vshell | DonPasci |
| 2026-01-06 16:04 | 3.132.51.96:443 | Unknown malware | AMAZON-02 AS16509 c2 censys ClickFix first-stage | DonPasci |
| 2026-01-06 16:04 | 3.132.202.210:80 | Unknown malware | AMAZON-02 AS16509 c2 censys ClickFix first-stage | DonPasci |
| 2026-01-06 16:03 | lavender-wallaby-90664.zap.cloud | Bashlite | AS206996 c2 censys Gafgyt open-dir ZAP-HOSTING | DonPasci |
| 2026-01-06 16:03 | adfs.vdjhrr.de | Unknown malware | AS14061 censys DIGITALOCEAN-ASN EvilGinx panel phishing | DonPasci |
| 2026-01-06 16:03 | 23.95.96.180:443 | Cobalt Strike | AS-COLOCROSSING AS36352 c2 censys CobaltStrike cs-watermark-666666666 | DonPasci |
| 2026-01-06 16:02 | 47.243.238.194:54188 | Cobalt Strike | ALIBABA-CN-NET AS45102 c2 censys CobaltStrike cs-watermark-987654321 | DonPasci |
| 2026-01-06 16:02 | 147.45.210.43:8080 | Cobalt Strike | AS207416 c2 censys CobaltStrike cs-watermark-987654321 NEKO-ORG-AS | DonPasci |
| 2026-01-06 15:31 | grufuncinlhar.floresflorcravovermelho.cfd | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 15:09 | https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-200-fd-cloudi/gds10 | ClearFake | ClearFake | threatcat_ch |
| 2026-01-06 15:06 | https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-300-s46-k127/70op | ClearFake | ClearFake | threatcat_ch |
| 2026-01-06 14:55 | 45.9.148.181:7707 | PureLogs Stealer | PureLogsStealer | abuse_ch |
| 2026-01-06 14:45 | 9.qq8875.online | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 14:45 | 8.qq8875.online | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 14:45 | 7.qq8875.online | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 14:45 | 6.qq8875.online | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 14:45 | 5.qq8875.online | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 14:45 | 4.qq8875.online | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 14:45 | 3.qq8875.online | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 14:45 | 2.qq8875.online | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 14:45 | 10.qq8875.online | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 14:45 | 1.qq8875.online | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 14:39 | https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-300-s46-k127/pm45 | ClearFake | ClearFake | threatcat_ch |
| 2026-01-06 14:33 | https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-10-s15-ap-k/set29 | ClearFake | ClearFake | threatcat_ch |
| 2026-01-06 14:23 | https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-10-s15-ap-k/yo100 | ClearFake | ClearFake | threatcat_ch |
| 2026-01-06 13:55 | https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-10-s15-ap-k/nol45 | ClearFake | ClearFake | threatcat_ch |
| 2026-01-06 13:53 | 89.169.52.143:1334 | Quasar RAT | AEZA-AS AS210644 c2 quasar RAT | DonPasci |
| 2026-01-06 13:43 | gatemaden.space | Unknown Stealer | c2 MacSync stealer VirusTotal | DonPasci |
| 2026-01-06 13:10 | tpl.tfba.me | Vidar | Vidar |  crep1x |
| 2026-01-06 13:10 | tpl.kievteplo.kiev.ua | Vidar | Vidar | crep1x |
| 2026-01-06 13:09 | https://tpl.tfba.me/ | Vidar | Vidar | crep1x |
| 2026-01-06 13:09 | https://tpl.kievteplo.kiev.ua/ | Vidar | Vidar | crep1x |
| 2026-01-06 12:25 | invoice-statement.com | Unknown RAT | DattoRM | abuse_ch |
| 2026-01-06 12:25 | https://invoice-statement.com/invoice/ | Unknown RAT | DattoRM | abuse_ch |
| 2026-01-06 12:13 | eaupdateservice.ddns.net | CyberGate | c2 Cybergate domain RAT triage | DonPasci |
| 2026-01-06 12:12 | saliangel.ru | Unknown Stealer | censys domain stealer xillenkillers XillenStealer | DonPasci |
| 2026-01-06 12:12 | xillenkillers.ru | Unknown Stealer | censys domain stealer xillenkillers XillenStealer | DonPasci |
| 2026-01-06 12:11 | 174.127.99.217:1016 | Revenge RAT | c2 RAT RevengeRAT triage | DonPasci |
| 2026-01-06 12:11 | alien007.my-firewall.org | Revenge RAT | c2 domain RAT RevengeRAT triage | DonPasci |
| 2026-01-06 12:11 | KevinDavis-58161.portmap.host | Revenge RAT | c2 domain RAT RevengeRAT triage | DonPasci |
| 2026-01-06 12:11 | r3dc0d3r.duckdns.org | Revenge RAT | c2 domain RAT RevengeRAT triage | DonPasci |
| 2026-01-06 12:11 | 125.208.23.7:80 | ValleyRAT | AS146817 c2 FXNET RAT triage ValleyRAT | DonPasci |
| 2026-01-06 12:11 | fuu.tfuuuk.com | ValleyRAT | c2 domain RAT triage ValleyRAT | DonPasci |
| 2026-01-06 12:11 | 125.208.23.7:2883 | ValleyRAT | AS146817 c2 FXNET RAT triage ValleyRAT | DonPasci |
| 2026-01-06 12:11 | 125.208.23.7:6229 | ValleyRAT | AS146817 c2 FXNET RAT triage ValleyRAT | DonPasci |
| 2026-01-06 12:11 | whoami.cc.cd | ValleyRAT | c2 domain RAT triage ValleyRAT | DonPasci |
| 2026-01-06 12:11 | 154.23.127.134:1688 | ValleyRAT | AS54801 c2 RAT triage ValleyRAT ZILLION-NETWORK | DonPasci |
| 2026-01-06 12:11 | sadxssaw-41989.portmap.host | NjRAT | c2 domain njrat triage | DonPasci |
| 2026-01-06 12:11 | starnhgggf-58632.portmap.host | NjRAT | c2 domain njrat triage | DonPasci |
| 2026-01-06 12:11 | Owais5050-61656.portmap.io | NjRAT | c2 domain njrat triage | DonPasci |
| 2026-01-06 12:08 | 128.0.118.15:14999 | Quasar RAT | AS16276 c2 quasar RAT triage | DonPasci |
| 2026-01-06 12:08 | 128.0.118.15:16213 | Quasar RAT | AS16276 c2 quasar RAT triage | DonPasci |
| 2026-01-06 12:08 | 128.0.118.15:18006 | Quasar RAT | AS16276 c2 quasar RAT triage | DonPasci |
| 2026-01-06 12:08 | 128.0.118.15:10013 | Quasar RAT | AS16276 c2 quasar RAT triage | DonPasci |
| 2026-01-06 12:08 | 128.0.118.15:10808 | Quasar RAT | AS16276 c2 quasar RAT triage | DonPasci |
| 2026-01-06 12:08 | 128.0.118.15:11534 | Quasar RAT | AS16276 c2 quasar RAT triage | DonPasci |
| 2026-01-06 12:08 | 128.0.118.15:11880 | Quasar RAT | AS16276 c2 quasar RAT triage | DonPasci |
| 2026-01-06 12:04 | 199.101.111.94:3790 | Meterpreter | AS58580 c2 censys FASTRACK hacktool MetaSploit Meterpreter | DonPasci |
| 2026-01-06 12:04 | 54.92.204.109:2375 | Meterpreter | AMAZON-AES AS14618 c2 censys hacktool MetaSploit Meterpreter | DonPasci |
| 2026-01-06 12:04 | 199.101.111.97:3790 | Meterpreter | AS58580 c2 censys FASTRACK hacktool MetaSploit Meterpreter | DonPasci |
| 2026-01-06 12:04 | 199.101.111.22:3790 | Meterpreter | AS58580 c2 censys FASTRACK hacktool MetaSploit Meterpreter | DonPasci |
| 2026-01-06 12:04 | 159.75.189.212:8989 | AdaptixC2 | AdaptixC2 AS45090 c2 censys TENCENT-NET-AP | DonPasci |
| 2026-01-06 12:03 | 185.239.236.172:80 | Bashlite | AS206996 c2 censys Gafgyt open-dir ZAP-HOSTING | DonPasci |
| 2026-01-06 12:03 | 206.71.149.30:6969 | Venom RAT | AS399629 BLNWX c2 censys RAT Venom | DonPasci |
| 2026-01-06 12:03 | 156.252.60.29:444 | Unknown RAT | AS9294 c2 censys GNETINC-AS-AP RAT SetcodeRat | DonPasci |
| 2026-01-06 12:02 | 185.115.34.131:7000 | XWorm | c2 triage XWorm | DonPasci |
| 2026-01-06 11:41 | https://lwebcontrol.com/nfront.php | donut_injector | c2 Donut VirusTotal | DonPasci |
| 2026-01-06 11:40 | 95.164.53.76:80 | donut_injector | AS213702 c2 Donut QWINS-LTD VirusTotal | DonPasci |
| 2026-01-06 11:36 | spark.ilovegrooming.xyz | SparkRAT | c2 domain SparkRAT | DonPasci |
| 2026-01-06 11:25 | tester.attackzombie.com | donut_injector | c2 domain Donut | DonPasci |
| 2026-01-06 11:01 | 164.90.228.165:3333 | Unknown malware | AS14061 censys DIGITALOCEAN-ASN GoPhish phishing | dyingbreeds_ |
| 2026-01-06 11:01 | 103.165.194.103:3333 | Unknown malware | AS17995 censys GoPhish phishing | dyingbreeds_ |
| 2026-01-06 11:01 | 104.237.1.95:443 | Unknown malware | AS29802 censys GoPhish HVC-AS phishing | dyingbreeds_ |
| 2026-01-06 11:01 | 18.210.62.176:443 | Unknown malware | AMAZON-AES AS14618 censys GoPhish phishing | dyingbreeds_ |
| 2026-01-06 11:00 | 151.80.233.191:3333 | Unknown malware | AS16276 censys GoPhish OVH phishing | dyingbreeds_ |
| 2026-01-06 11:00 | 128.140.91.58:443 | Havoc | AS24940 c2 censys HETZNER-AS | dyingbreeds_ |
| 2026-01-06 11:00 | 34.38.240.174:7443 | Unknown malware | AS396982 c2 censys GOOGLE-CLOUD-PLATFORM Mythic | dyingbreeds_ |
| 2026-01-06 11:00 | 123.99.192.186:7777 | Ghost RAT | AS58461 c2 censys RAT | dyingbreeds_ |
| 2026-01-06 11:00 | 103.151.217.136:9999 | Cobalt Strike | AS138538 c2 censys | dyingbreeds_ |
| 2026-01-06 11:00 | 143.198.221.250:4433 | Cobalt Strike | AS14061 c2 censys DIGITALOCEAN-ASN | dyingbreeds_ |
| 2026-01-06 10:49 | gmail.myddns.me | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-01-06 10:49 | api.shenzhenschool.fun | Cobalt Strike | CobaltStrike drb-ra | abuse_ch |
| 2026-01-06 10:27 | dfgdfgeiurguer.live | Unknown malware | | abuse_ch |
| 2026-01-06 10:20 | prukinsandiz41.luxmailing.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | crolinpanrol.luxmailing.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | cropenval8.mail-lab.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | flipinlanjal.mail-cube.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | flisinfuntar.mail-lab.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | flononconsal.mail-genius.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | frepanlanral563.luxpost.shop | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | frukinvel.luxmailer.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | glaronhal.lxmail.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | glasal.luxmail.space | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | glefenbonder.luxomail.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | glejal.mail-craft.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | platum.luxxmail.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | pripingor.mail-boss.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | progongor822.mail-genius.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | prorol638.luxormail.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | prosil.mail-mentor.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | cretonriz.lxmail.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:20 | crical.mail-craft.store | Astaroth | astaroth guildma | abuse_ch |
| 2026-01-06 10:16 | sgna.sa.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 10:16 | riku.in.net | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 10:10 | win678.ru.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 10:10 | psyca.co.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 10:10 | automotive6.sa.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 09:55 | 103.121.93.78:2525 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-01-06 09:10 | 62.171.142.170:8888 | Cobalt Strike | CobaltStrike cs-watermark-987654321 | abuse_ch |
| 2026-01-06 08:53 | https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-70-cl0ud/sad | ClearFake | ClearFake | threatcat_ch |
| 2026-01-06 08:50 | subdomain.minhaempresa.tv | XWorm | c2 domain XWorm | DonPasci |
| 2026-01-06 08:48 | 23.94.252.101:7007 | XWorm | AS207043 c2 DEDIK-IO XWorm | DonPasci |
| 2026-01-06 08:44 | 149.109.127.122:443 | QakBot | drb-ra QakBot qbot Quakbot | abuse_ch |
| 2026-01-06 08:44 | 148.178.62.51:443 | DeimosC2 | Deimos drb-ra | abuse_ch |
| 2026-01-06 08:39 | 8.155.144.158:8077 | VShell | ALIBABA-CN-NET AS37963 c2 VirusTotal Vshell | DonPasci |
| 2026-01-06 08:35 | 23.95.243.123:6161 | Remcos | remcos | abuse_ch |
| 2026-01-06 08:35 | www.classicashionprobackup2.net | Remcos | remcos | abuse_ch |
| 2026-01-06 08:35 | www.classicashionprobackup1.net | Remcos | remcos | abuse_ch |
| 2026-01-06 08:35 | www.classicashionpro.net | Remcos | remcos | abuse_ch |
| 2026-01-06 08:35 | 192.227.153.57:8084 | VShell | AS-COLOCROSSING AS36352 c2 VirusTotal Vshell | DonPasci |
| 2026-01-06 08:31 | 154.89.152.200:9001 | xmrig | ABCCLOUDSDNBHD-AS-AP AS139923 c2 CoinMiner xmrig | DonPasci |
| 2026-01-06 08:22 | sagent.zabbixcloud.cloud | SparkRAT | c2 domain SparkRAT VirusTotal | DonPasci |
| 2026-01-06 08:13 | lacedomu.cyou | Lumma Stealer | c2 domain Lumma stealer | DonPasci |
| 2026-01-06 08:13 | coverxyzer.su | Lumma Stealer | c2 domain Lumma stealer | DonPasci |
| 2026-01-06 08:12 | spielbkr.cyou | Lumma Stealer | c2 domain Lumma stealer | DonPasci |
| 2026-01-06 08:10 | 103.83.86.27:3612 | XWorm | XWorm | abuse_ch |
| 2026-01-06 08:03 | 104.131.164.45:1337 | Empire Downloader | AS14061 c2 censys DIGITALOCEAN-ASN StarKillerC2 | DonPasci |
| 2026-01-06 08:03 | 103.177.47.183:3790 | Meterpreter | AS58580 c2 censys FASTRACK hacktool MetaSploit Meterpreter | DonPasci |
| 2026-01-06 08:03 | 199.101.111.76:3790 | Meterpreter | AS58580 c2 censys FASTRACK hacktool MetaSploit Meterpreter | DonPasci |
| 2026-01-06 08:03 | 89.125.255.29:4444 | AdaptixC2 | AdaptixC2 AS212477 c2 censys ROYALE-AS | DonPasci |
| 2026-01-06 08:03 | 192.229.116.170:4449 | Venom RAT | ANTBOX1-AS-AP AS138995 c2 censys RAT Venom | DonPasci |
| 2026-01-06 08:03 | 54.178.105.10:443 | Unknown malware | AMAZON-02 AS16509 c2 censys Mythic | DonPasci |
| 2026-01-06 08:03 | 102.117.173.15:7443 | Unknown malware | AS23889 c2 censys MauritiusTelecom Mythic | DonPasci |
| 2026-01-06 08:02 | 192.3.136.217:2404 | Remcos | AS-COLOCROSSING AS36352 c2 censys RAT remcos | DonPasci |
| 2026-01-06 08:02 | 213.136.81.204:2404 | Remcos | AS51167 c2 censys CONTABO RAT remcos | DonPasci |
| 2026-01-06 08:02 | 124.71.109.52:443 | Cobalt Strike | AS55990 c2 censys CobaltStrike cs-watermark-987654321 HWCSNET | DonPasci |
| 2026-01-06 08:02 | 115.190.233.79:443 | Cobalt Strike | AS137718 c2 censys CobaltStrike cs-watermark-987654321 VOLCANO-ENGINE | DonPasci |
| 2026-01-06 07:51 | app.modernbusinessevolution.com | Unknown RAT | ConnectWise ScreenConnect | abuse_ch |
| 2026-01-06 07:51 | administrator.modernbusinessevolution.com | Unknown RAT | ConnectWise ScreenConnect | abuse_ch |
| 2026-01-06 07:50 | securedock.ltd | Unknown RAT | ConnectWise ScreenConnect | abuse_ch |
| 2026-01-06 07:35 | https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-70-cl0ud/dash | ClearFake | ClearFake | threatcat_ch |
| 2026-01-06 07:27 | https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-70-api-1key/dash | ClearFake | ClearFake | threatcat_ch |
| 2026-01-06 07:25 | supphouse.minhacasa.tv | PureLogs Stealer | | abuse_ch |
| 2026-01-06 07:23 | memory-scanner.cc | Unknown Stealer | | abuse_ch |
| 2026-01-06 07:15 | 103.85.225.40:8000 | ValleyRAT | RAT ValleyRAT | abuse_ch |
| 2026-01-06 07:09 | springdogs.xyz | Unknown Loader | OffLoader | abuse_ch |
| 2026-01-06 07:09 | turnclass.xyz | Unknown Loader | OffLoader | abuse_ch |
| 2026-01-06 06:10 | qq88.za.com | AsyncRAT | asyncrat | abuse_ch |
| 2026-01-06 06:07 | agn121-64753.portmap.host | NjRAT | c2 domain njrat triage | DonPasci |
| 2026-01-06 06:03 | mnnenmvgfj.a.pinggy.link | Quasar RAT | c2 domain quasar RAT triage | DonPasci |
| 2026-01-06 06:02 | dal-business-20.duckdns.org | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-01-06 06:02 | ghostisrealll-39376.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-01-06 06:00 | https://topbilliondirectory.com/author/368betcv-89206/ | Unknown malware | ClickFix |  CarsonWilliams |
| 2026-01-06 06:00 | www.essistme.com | GootLoader | gootloader |  monitorsg |
| 2026-01-06 06:00 | 185.112.59.176:80 | Stealc | 3 c2 Loader Stealc stealer |  Bitsight |
| 2026-01-06 06:00 | www.identitetsmanual.se | GootLoader | gootloader | monitorsg |
| 2026-01-06 06:00 | http://62.60.226.159/geter/login.php | TinyLoader | AS214351 FEMO IT SOLUTIONS LIMITED tinyloader |  antiphishorg |
| 2026-01-06 06:00 | http://47.101.2.90:8888/supershell/login/ | Unknown malware | AS37963 Supershell | antiphishorg |
| 2026-01-06 06:00 | http://117.72.62.70:8888/supershell/login/ | Unknown malware | AS141679 Supershell | antiphishorg |
| 2026-01-06 06:00 | 213.176.72.194:80 | Stealc | build6 c2 Loader Stealc stealer | Bitsight |
| 2026-01-06 06:00 | 84.234.99.235:1312 | Mirai | Mirai | seckle |
| 2026-01-06 06:00 | 77cb60d5a0293b34dcc98da4887e4028 | Global | global Ransomware |  TheRavenFile |
| 2026-01-06 06:00 | 4abd2ecd7e3b12219b4644bcfe614561 | Global | global Ransomware | TheRavenFile |
| 2026-01-06 06:00 | ca979fad68362cd3d9ad24424d5ac3fd | Global | global Ransomware | TheRavenFile |
| 2026-01-06 06:00 | http://178.16.54.109/lfucky.exe | Global | global Ransomware | TheRavenFile |
| 2026-01-06 06:00 | https://3.130.42.49/ | Unknown malware | ClickFix | CarsonWilliams |
| 2026-01-06 05:52 | 167.71.116.96:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 05:52 | 192.241.128.41:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 05:52 | 167.99.83.147:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 05:52 | 64.227.78.61:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 05:52 | 104.248.181.152:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 05:52 | 209.38.46.113:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 05:52 | 167.172.128.152:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 05:52 | 138.197.123.169:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 05:52 | 206.189.12.206:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 05:52 | 159.65.29.33:8001 | Aisuru | AISURU | abuse_ch |
| 2026-01-06 04:33 | https://cdn.jsdelivr.net/gh/gstatic-kh5q6ekh/cdn-210-so-api-key/sash21 | ClearFake | ClearFake | threatcat_ch |
| 2026-01-06 04:32 | 6552cd85b1ee07d8aced15897ece90c8 | MimiKatz | |  Grim |
| 2026-01-06 04:32 | 2839de01a529fe7ad145f4a1025f1be1 | MimiKatz | | Grim |
| 2026-01-06 04:32 | 1e4391e226a261e76acdfffa04bdd75f2d65f679 | MimiKatz | | Grim |
| 2026-01-06 04:32 | 05fb76a09b71268dc5873c9f7160207e7c512d0f1dee822604c778838bf6c559 | MimiKatz | | Grim |
| 2026-01-06 04:32 | 8ec7101ec30f4c18b21af18360f691175adfa52a6474f88f0e15d064d0565a1d | Coinminer | | Grim |
| 2026-01-06 04:32 | bc853cbd116d10f15bfd073dc3447244 | Coinminer | | Grim |
| 2026-01-06 04:32 | e08016485310896a4534d870d70cdfce02e5c300 | MimiKatz | | Grim |
| 2026-01-06 04:32 | 505d1cd0b9caf7efa10ed2076c0042ae04645aa1299baacc5033a7daef0220b8 | MimiKatz | | Grim |
| 2026-01-06 04:32 | 6505d5f4aba8aebf0c442a5648aab5087bcc8a406bb4a764d416ab63378b2cc5 | MimiKatz | | Grim |
| 2026-01-06 04:32 | 07063a1804826b58b02f2826b792a44e | MimiKatz | | Grim |
| 2026-01-06 04:32 | cdd89ee49a8c726ca905dfe56742e6d48a93e163 | Coinminer | | Grim |
| 2026-01-06 04:32 | 55f3a2d89485bb40ea45e5fa1f24828f71a81ef4ccc541b6657fc7a861ef3add | Global | | Grim |
| 2026-01-06 04:32 | e07a31636d8b705054cfaf2ec1c05edb | Global | | Grim |
| 2026-01-06 04:32 | 49b9e54ac1cfdc9996b7613774a509bde2633af0 | MimiKatz | | Grim |
| 2026-01-06 04:32 | f6f7a37b49310287a253dbdf81e22f0593f44111215ca9308e46d2c68516196f | Global | | Grim |
| 2026-01-06 04:32 | 41368619f68009cbfa41da369602e1c98f712eb2 | Global | | Grim |
| 2026-01-06 04:32 | 70cc64fb4dc5e32b9a8973be10e7e2d4378479f3521b5ab9bb044f76d1e2379b | Phorpiex | | Grim |
| 2026-01-06 04:32 | 99c20da798b978ae4e6487b4acc772ab | Phorpiex | | Grim |
| 2026-01-06 04:32 | d82a76db31733b9bcb48287bd5449d10180870c8 | Global | | Grim |
| 2026-01-06 04:32 | 07b8e705a0017ab1df5ffabc1fc7fb0a4d0738e98235b5725e47bb9d5229c5c4 | Luca Stealer | | Grim |
| 2026-01-06 04:32 | 600e1b59222ec1bf5d83f62a7cc0b9cc | Luca Stealer | | Grim |
| 2026-01-06 04:32 | 422ab8e986e4124cf40c7c8ae3ca9d6095b45e90 | Phorpiex | | Grim |
| 2026-01-06 04:32 | d9bebfa5a87db80fac3a62e9ea5e410e | Phorpiex | | Grim |
| 2026-01-06 04:32 | 9497cb3a673c53c4c45db85818326e675e9d928f | Luca Stealer | | Grim |
| 2026-01-06 04:32 | 9d33f21b00fdeb209d9eba0ab4d7bbc56b51abc1 | Phorpiex | | Grim |
| 2026-01-06 04:32 | 5b5e85f9aaddc637b944a78fe390c93d21fa4ffadd953dc7a9412b658d9b15f0 | Phorpiex | | Grim |
| 2026-01-06 04:32 | 8ebb428ad35eceea596ffffc9bbf23b7ef3f09e4493eb894dade07eadb9f9652 | Global | | Grim |
| 2026-01-06 04:32 | 77799727eaf6513440c0a8796944965e | Global | | Grim |
| 2026-01-06 04:31 | 99c1f2031431124d50b26047bba6a8643df1b3bc | Global | | Grim |
| 2026-01-06 04:31 | f912afcbd388531a0d4f415114ad0f13b56089f0 | Global | | Grim |
| 2026-01-06 04:31 | 26c4a28e9bdd3f85433ced68c48d60ac89e44ff0bde47326d3d19bddc9399a83 | Global | | Grim |
| 2026-01-06 04:31 | d87ea45b6dc62c259d548dfce574f3a6 | Global | | Grim |
| 2026-01-06 04:31 | 034a838f2a4490d6e2ff2911d1389eab3246a518 | Global | | Grim |
| 2026-01-06 04:31 | 4fc29cee350f69681728c009449f12682d90db8541459c505a2830a278be809b | Global | | Grim |
| 2026-01-06 04:31 | d3a19b7bb618fddf99ecdc73a5e9cb07 | Global | | Grim |
| 2026-01-06 04:31 | 9438dcd3d776efd3aadff0e98ecd0f9a | Global | | Grim |
| 2026-01-06 04:31 | 43a000847d155da05e5c080587b4eb97cbeed61bf6b5d6a4062e5f459f387888 | Global | | Grim |
| 2026-01-06 04:31 | ab757abaee05db62d28757373f93a91a2ef8ded8 | Global | | Grim |
| 2026-01-06 04:31 | 17f619bf905173d95183a89b57480a66 | Global | | Grim |
| 2026-01-06 04:31 | a858bbbfe1332816b23c8d46443b63f318958e6748c54e4b4040fd908d175d62 | Global | | Grim |
| 2026-01-06 04:31 | 1a470dd4cbdc249d661fe44143b1846988c804ef | Global | | Grim |
| 2026-01-06 04:31 | bea42b51471e77582e00f892c95bd40c8198c78c | Global | | Grim |
| 2026-01-06 04:31 | 17c40dc8cfe53fc24d01df2ff4aad1d4914dd592b00d053762f12daec16c7035 | Global | | Grim |
| 2026-01-06 04:31 | b3ed6ab7b4fb322108895714d25acf85 | Global | | Grim |
| 2026-01-06 04:31 | 9c763527cf5cd0dc2bd1a47bd8aa1f57a0c99aa6 | Global | | Grim |
| 2026-01-06 04:31 | 5b0684dde84168b41eb1d7022f490f0036a90ea3d00a37e35d69323887826628 | Global | | Grim |
| 2026-01-06 04:31 | 90e84a0928435a8f4664a5d6e646db96 | Global | | Grim |
| 2026-01-06 04:31 | 1e8cf0c70db6ec1a96e5687fb8edfe930b338677 | Global | | Grim |
| 2026-01-06 04:31 | e7ba958cac186815f76fbc5809e479000a5a569034fd0425bf0fb512ac523639 | Global | | Grim |
| 2026-01-06 04:31 | f4ea89031ff750e457c309b849b2b278 | Global | | Grim |
| 2026-01-06 04:31 | 97bd7c3c773bf82dc990c895e3662ee39ce20074 | Global | | Grim |
| 2026-01-06 04:31 | 8baadd5caf6014222b98656e875382126e719f53342591a47c29c408e10fbd60 | Global | | Grim |
| 2026-01-06 04:31 | 7b8a826eff29fce133769e7418b88312 | Global | | Grim |
| 2026-01-06 04:31 | ded4107d571fed90d59aa8d999f8980dcf0f0927 | Global | | Grim |
| 2026-01-06 04:31 | 4013d5545b490d4bdea2fbfc31cad82cd73e9d617ef5946ae9b9df19d6eada48 | Global | | Grim |
| 2026-01-06 04:31 | adb56ea89f05cdd9acaeed4238ea355c | Global | | Grim |
| 2026-01-06 04:31 | e356257de68c79976e536c21609367d41da732c1 | Global | | Grim |
| 2026-01-06 04:31 | 23437efc7bf2f691678472e0080f4b22fa8e327d41781f95912ff6722a62f5fb | Global | | Grim |
| 2026-01-06 04:31 | 087065ddbd89c48b62f49230d6ef22b0 | Global | | Grim |
| 2026-01-06 04:31 | 9bddf7dbc3b3c1632f41e2cc7949007c51e16c9e | Global | | Grim |
| 2026-01-06 04:31 | 823da032a4b7f64d6f3706f207d0f2a0cd44cd45b602193c4580403c2d4e8342 | Global | | Grim |
| 2026-01-06 04:31 | cda6134efa7ee6d95a466190f84a25fe | Global | | Grim |
| 2026-01-06 04:31 | 8fccaf76aa9c6450da4ca9750c81d61a3318beed | Global | | Grim |
| 2026-01-06 04:31 | 38b9825abef45b2fb9e0efbfae7124499af85b9f328d4619ac8a37af274e7b4e | Global | | Grim |
| 2026-01-06 04:31 | 16594656cf923af32ccdd0a7ab70e9ff | Global | | Grim |
| 2026-01-06 04:31 | 3407cbcb6d54ec7f4a1693ffd962cf68 | Global | | Grim |
| 2026-01-06 04:31 | 9e38af4bcfa70b0940f4bdc37f494449b5caceae | Global | | Grim |
| 2026-01-06 04:31 | 770df171362179564bb433aa4c82502926c420482b7e6b8441a857c5934377ac | Global | | Grim |
| 2026-01-06 04:31 | 21325233f0f93d1a009c9a1e0f98b6e5 | Global | | Grim |
| 2026-01-06 04:31 | eaa689a39099a3130d977cf9ca5f9e5e | Ghost RAT | | Grim |
| 2026-01-06 04:31 | 8cfc6432b92df8a89743937281a744c2351eac2a | Global | | Grim |
| 2026-01-06 04:31 | b1a0fd0c9c72e68f74b654988423acb2a953427e83990c26c91e5e908ec66387 | Global | | Grim |
| 2026-01-06 04:31 | d7789d522fcb33668d1b7f3a819598c5 | Remcos | | Grim |
| 2026-01-06 04:31 | ac5975d9b687b6d43a17ff68b1a6095e0d99ec4f | Ghost RAT | | Grim |
| 2026-01-06 04:31 | 2e7230657e27ed7f47cb8a8018c7bac088bfa7ee20e168e3665385ec35734c01 | Ghost RAT | | Grim |
| 2026-01-06 04:31 | 213f41e55bb7f0d2f3336809f0653814 | Ghost RAT | | Grim |
| 2026-01-06 04:31 | 3ff6545c9b3d4dcfb80e23c161ec3000ea800cd7 | Remcos | | Grim |
| 2026-01-06 04:31 | 1af859ae8dab6d05433b1c60bd2d0e337fcd1a5e55abd7c90832e36d839f8a13 | Remcos | | Grim |
| 2026-01-06 04:31 | c2fb368770fe8db78111a61700e55895 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | f47bf155f58cbea6f85d6b5cf4bdcf972f8aee82 | Ghost RAT | | Grim |
| 2026-01-06 04:31 | 41b946332366eee08614c375b0fba08330f51ce17ef710735bc59183529e3dbc | Ghost RAT | | Grim |
| 2026-01-06 04:31 | 1ae8f04c1df741db5490b76fc30b6136bd518df14f30e179c5c0d50d70bacd0f | SalatStealer | | Grim |
| 2026-01-06 04:31 | 2566326c89ef340429a86ce36e02e160 | SalatStealer | | Grim |
| 2026-01-06 04:31 | 340066164fb78508209839b64af306c356c44484 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | 5b7ecbe3c3b8a204f9124ebfab81dce69c5153c0b0e19b75f79f06581d93b1b1 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | d1ad885ba252de7144126fd3722839f6cccf632140490dca6989cdc6d7076a9a | SalatStealer | | Grim |
| 2026-01-06 04:31 | ab951e2a04007b0f5dd4bb0575a0d0d2 | SalatStealer | | Grim |
| 2026-01-06 04:31 | aa1734ab6178e960bfba5f1a7d86ac8025e110f4 | SalatStealer | | Grim |
| 2026-01-06 04:31 | acc977bc3109e5e0c1b7118ca786dd30269387c1 | Attor | | Grim |
| 2026-01-06 04:31 | 1b1ae798262843bc8f19e030481c7aaac400020cd9152e26681286f628d145b9 | Attor | | Grim |
| 2026-01-06 04:31 | 0ae6f45ab2fc48d3ae5c073cdd8e4287 | Attor | | Grim |
| 2026-01-06 04:31 | fe6bab4c57ab9aaf117c4aa61105fdf8d193029b | SalatStealer | | Grim |
| 2026-01-06 04:31 | 9c9f2479fe63d85ead448c770978ca91ad07adaa | GoGoogle | | Grim |
| 2026-01-06 04:31 | 938c2ee8a07cbeafc655f1f57449271c1b254f969225e8ef72a1f055c765ef75 | GoGoogle | | Grim |
| 2026-01-06 04:31 | 4ecdc5826df51967689b5f55528e3b7d | GoGoogle | | Grim |
| 2026-01-06 04:31 | ffe15ada5a338c44cf4bdab4c38bb1dd98934d84 | GoGoogle | | Grim |
| 2026-01-06 04:31 | 7dc80f38cdef77c86e4a46bbcaa08b2fb9393d04bbcb1909e096cd81414fbebb | GoGoogle | | Grim |
| 2026-01-06 04:31 | 847ec81ea1d28829a187489e416c8f6b | GoGoogle | | Grim |
| 2026-01-06 04:31 | 2537291ea270a9e6341e32a75f2162dcc835ebe2 | GoGoogle | | Grim |
| 2026-01-06 04:31 | d799b7e6f8737997ba9c040a20cd729e83e6824c531f7b5eb52fcc339ef86437 | GoGoogle | | Grim |
| 2026-01-06 04:31 | 2b7729284851f69c70ee2ff99c18360a | GoGoogle | | Grim |
| 2026-01-06 04:31 | 26ebee68b678f47eca9ffbca355ee37969f9714a | Arkei Stealer | | Grim |
| 2026-01-06 04:31 | 31d1c07ba414edadd583878dd111cbf7dfe0cf6a39ecdcfee9d39975c9a31e39 | Arkei Stealer | | Grim |
| 2026-01-06 04:31 | 1bc8fadf53aebab4d08859e645fdafce | Arkei Stealer | | Grim |
| 2026-01-06 04:31 | b870172c260fd9b541a249073cc514dcee5051fa | Formbook | | Grim |
| 2026-01-06 04:31 | cd6ae5780f0ea51212da9c633cb6b9c6dcea80cf0ce61cca31f7644d2ef0462a | Formbook | | Grim |
| 2026-01-06 04:31 | e437754fac8a0d2b656bfe1634f506f9 | Formbook | | Grim |
| 2026-01-06 04:31 | eb2df1ba4f3b1a8681594ddcfe605c38749fd6e723bbe5c60dc885d03da0f578 | CoffeeLoader | | Grim |
| 2026-01-06 04:31 | ce5be389732f7a563bf36859d7aa8a8b | CoffeeLoader | | Grim |
| 2026-01-06 04:31 | b864bba28ef44433dcbb8799e1820c9ef807ff48 | CoffeeLoader | | Grim |
| 2026-01-06 04:31 | d24ad1d3a86e8f23a4d9306efd16fd2e8f942278 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | b18e1a32b6e0c83273c1b3d29162a65be03d189e1863718ef5a2697eea897aef | AsyncRAT | | Grim |
| 2026-01-06 04:31 | 38341db731a6775c00098302f871dd3c | AsyncRAT | | Grim |
| 2026-01-06 04:31 | 39e79ab96acda6b8f2d1c09d8658e290564b6682 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | 1eeae4bd8179fd33f1ec6aab09fed88e4db166e81383e5014bd92f3b12f92416 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | e1ac4f9c1361fdab8280fd7e0ff04540 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | 7ec78fc4c16441339cd2f31be926d4f41cba3f7d | AsyncRAT | | Grim |
| 2026-01-06 04:31 | a5cd237305bf63d71639f928930d22fc0b2b112a48c4a74b6b2271bd0124c6ba | AsyncRAT | | Grim |
| 2026-01-06 04:31 | 73053c356751f504379879723ee60ca2 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | bfd283ee68e5dcc291c2f5c15c65fd9682111151 | Quasar RAT | | Grim |
| 2026-01-06 04:31 | 112c066c16f726d0f3bcaf0217b9d76c64818e127832d3cf81abdc1d4c080b5a | Quasar RAT | | Grim |
| 2026-01-06 04:31 | d00b8dedd6cad796f21b5faebdd1b17c | Quasar RAT | | Grim |
| 2026-01-06 04:31 | 6b323a69ded30d05ac2aed3b1a47f6b9a631bdd8 | Luca Stealer | | Grim |
| 2026-01-06 04:31 | 9f26363ffe8538072b6088d99b05a76074735343ea8046f76af75fcab93c5626 | Luca Stealer | | Grim |
| 2026-01-06 04:31 | 1ae725a96dddfafe0f27a3040b6a80ec | Luca Stealer | | Grim |
| 2026-01-06 04:31 | 4a6f47d582ad7db9e945bd7deddadcac438a7e0f | DarkTortilla | | Grim |
| 2026-01-06 04:31 | 5ebd46d6931c37b436447575035b82e64d938e9a829838b78dfc935804d2e97b | DarkTortilla | | Grim |
| 2026-01-06 04:31 | 1cb916542911b00d0b1f78f1f5d66aea | DarkTortilla | | Grim |
| 2026-01-06 04:31 | 42e7f424c19b1cee1d93d21ad6f2c077 | NjRAT | | Grim |
| 2026-01-06 04:31 | 8ce7d5ea1b052c5d098daa816eb7a294ab9fb13f | Quasar RAT | | Grim |
| 2026-01-06 04:31 | aa74f693ca9240065a96cf3b372d3fc6cfbe6f1b74ffceebf0b5a897ff05cb46 | Quasar RAT | | Grim |
| 2026-01-06 04:31 | f9f6883b0c10ac81a6c2f657742abc59 | Quasar RAT | | Grim |
| 2026-01-06 04:31 | 3f2c30f491d0802aa57c932ce63267da | AsyncRAT | | Grim |
| 2026-01-06 04:31 | ac306b5e432c643d0ce91c5c0ee2c5408c1f67ae | NjRAT | | Grim |
| 2026-01-06 04:31 | e52d48d5bceab7e1a1a4bcf783690d83cfaa06ca8cb68ae73d285aa00affd8c1 | NjRAT | | Grim |
| 2026-01-06 04:31 | 41dbca92f8b95dc7ac0038959ab6c94f | AsyncRAT | | Grim |
| 2026-01-06 04:31 | 403c4993871e98794934ae7ec9f432bf3ecdb520 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | 732e34e74d37a7f24b098539a5a205b70baf5395bf13279c99be2bebd546c0c7 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | e7e63459891dea0d2ef03b656c38c9c3 | Brute Ratel C4 | | Grim |
| 2026-01-06 04:31 | ce054b3257d6e031cfd743f8cc516b0c28cf3c72 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | 1a9f0780df992170c2fb9f0fe2111fd0ac7d395bf41e1816e6f5a28b525914b6 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | c538706b0dad5c33ba709ba722c43ce3 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | 94baefd21da563e309032f4e072b07fe1a371a4f | Brute Ratel C4 | | Grim |
| 2026-01-06 04:31 | 7d30c01dcb8bb19069f96f84ee4b693f4540783f5ccae37eeb1cd3d3f71bc939 | Brute Ratel C4 | | Grim |
| 2026-01-06 04:31 | 3608a57b9557cfcd176127638417cac28e6a249f | AsyncRAT | | Grim |
| 2026-01-06 04:31 | aee493659ec6207cbbb1fb31b8e186b97702de4205fd49eaa585b835d7482ce6 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | d90054c8acff97bbb2f39c192cd4c268f0864e14 | Stealc | | Grim |
| 2026-01-06 04:31 | 8f9e7b559aa9c2aedc0453bde8ac2eb966d00e43fd9fbdbfe50fba5591020887 | Stealc | | Grim |
| 2026-01-06 04:31 | 929f97266d179df2f95626b9dc240c29 | Stealc | | Grim |
| 2026-01-06 04:31 | d4d2b1003ce35495bbf5c3ea4251d641a6b01e7b | Coinminer | | Grim |
| 2026-01-06 04:31 | 4701a5fedd90061a18ab4901f4fb8f78fb54332b0fe996318cf04b5e88a6a4b8 | Coinminer | | Grim |
| 2026-01-06 04:31 | 620508f698e933681e92dad0bd308566 | Coinminer | | Grim |
| 2026-01-06 04:31 | 732cd1bb1943daf0b0c2edcd8ad1abb3928c9f06 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | 196a2ff1ea16a4f2e63f41a833735477d84800e648ea6412b813b6775fa8334a | AsyncRAT | | Grim |
| 2026-01-06 04:31 | a042f1ee652115e63e5b389f7c4b2b38 | AsyncRAT | | Grim |
| 2026-01-06 04:31 | c6677d16c744f174b58a17fc35b740392626c4cb | AsyncRAT | | Grim |
| 2026-01-06 04:31 | 6173f089ad3738d51f8df09d9e59bb732b01925f9192ca5c0c68cee2a09a994c | AsyncRAT | | Grim |
| 2026-01-06 04:31 | e9a7943474633ec31267d959e22734ea | AsyncRAT | | Grim |
| 2026-01-06 04:31 | d62ef0a828a92ac117fe34edb2aacc21a4c5cf2cca0897d9e86d5898d4c485d1 | Vidar | | Grim |
| 2026-01-06 04:31 | 9c1e0aad3e5f84784aecdd96f47c9630 | Vidar | | Grim |
| 2026-01-06 04:31 | 9a004814db05b314fac7b1862a0d8ac117e0464f | Vidar | | Grim |
| 2026-01-06 04:04 | 75.103.85.88:80 | Unknown malware | AS14992 c2 censys ClickFix CRYSTALTECH first-stage | DonPasci |
| 2026-01-06 04:04 | 196.75.3.197:2222 | Meterpreter | AS36903 c2 censys hacktool MetaSploit Meterpreter MT-MPLS | DonPasci |
| 2026-01-06 04:04 | 54.163.169.73:789 | Meterpreter | AMAZON-AES AS14618 c2 censys hacktool MetaSploit Meterpreter | DonPasci |
| 2026-01-06 04:03 | 185.76.242.120:7777 | DCRat | AS207713 c2 censys dcrat GIR-AS RAT | DonPasci |
| 2026-01-06 04:02 | 34.213.239.56:443 | Unknown malware | AMAZON-02 AS16509 c2 censys Mythic | DonPasci |
| 2026-01-06 04:02 | 91.92.241.103:5000 | AsyncRAT | AS214943 asyncrat c2 censys RAILNET RAT | DonPasci |
| 2026-01-06 04:02 | 144.126.149.104:20700 | AsyncRAT | AS40021 asyncrat c2 censys CONTABO-40021 RAT | DonPasci |
| 2026-01-06 04:02 | 23.144.92.98:8080 | Sliver | AS979 c2 censys NETLAB-SDN payload sliver | DonPasci |
| 2026-01-06 04:02 | 5.101.85.77:6326 | Remcos | AS-GLOBALTELEHOST AS63023 c2 censys RAT remcos | DonPasci |
| 2026-01-06 04:02 | 172.233.26.43:443 | Cobalt Strike | AKAMAI-LINODE-AP AS63949 c2 censys CobaltStrike cs-watermark-987654321 | DonPasci |
| 2026-01-06 03:10 | https://spielbkr.cyou/api | Lumma Stealer | Lumma | abuse_ch |