🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.


1'927

IOCs shared (past 24 hours)

Unknown Loader

Most seen malware family (past 24 hours)

1'784'990

IOCs in corpus


Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database

Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

  • ioc:ms-debug-services.com ( run)
  • malware:CobaltStrike ( run)
  • tag:TA505 ( run)
  • threat_type:cc_skimming ( run)
  • uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)IOCMalwareTagsReporter
2026-03-17 06:151e3eb765015fd335cfdcb0ddd020565690b5a2f15a2a62406d750bcb21b6d77b KaijiDDoS elf Kaiji Skynet11
2026-03-17 06:15http://195.177.94.68:34656/b/amd64 Kaijielf Kaiji Skynet11
2026-03-17 06:15http://195.177.94.68:34656/s/amd64 Kaijielf Kaiji Skynet11
2026-03-08 12:01132.145.111.234:808 KaijiAS31898 c2 censys ORACLE-BMC-31898 DonPasci
2026-01-26 04:055.181.180.61:8081 KaijiAS212477 c2 censys ROYALE-AS DonPasci
2026-01-25 11:00143.92.62.69:808 KaijiAS152194 c2 censys dyingbreeds_
2026-01-21 20:04130.12.182.211:808 KaijiAS36680 c2 censys NETIFACELLC DonPasci
2026-01-18 08:0445.158.230.43:808 KaijiAS932 c2 censys XNNET DonPasci
2026-01-10 11:0043.251.226.153:808 KaijiAS401696 c2 censys COGNETCLOUD dyingbreeds_
2026-01-01 11:40www.ldbot.top KaijiKaiji Anonymous
2026-01-01 11:40192.238.204.149:808 KaijiKaiji Anonymous
2025-12-31 23:01160.202.230.193:808 KaijiAS146817 c2 censys dyingbreeds_
2025-12-15 08:02143.20.185.91:808 KaijiAS214209 c2 censys INTERNET-MAGNATE DonPasci
2025-12-08 08:0245.152.161.176:10001 KaijiAS44486 c2 censys SYNLINQ DonPasci
2025-12-08 07:53http://202.61.139.18:808/download.sh KaijiAS152194 CTG Server Limited Kaiji antiphishorg
2025-12-07 23:0138.175.194.35:24 KaijiAS979 c2 censys NETLAB-SDN dyingbreeds_
2025-12-07 20:03154.37.219.249:24 KaijiAS979 c2 censys NETLAB-SDN DonPasci
2025-12-06 20:03154.37.219.142:24 KaijiAS979 c2 censys NETLAB-SDN DonPasci
2025-11-30 08:0187.121.84.42:10001 KaijiAS215925 c2 censys VPSVAULTHOST DonPasci
2025-11-24 11:0059.153.164.135:808 KaijiAS146817 c2 censys dyingbreeds_
2025-11-23 20:02102.165.26.154:8080 KaijiAS210870 c2 censys NETJETT DonPasci
2025-11-10 08:02198.37.100.25:8080 KaijiAS397373 c2 censys H4Y-TECHNOLOGIES DonPasci
2025-11-05 23:00154.37.219.249:60001 KaijiAS979 c2 censys NETLAB-SDN dyingbreeds_
2025-11-05 23:0038.175.194.35:60001 KaijiAS979 c2 censys NETLAB-SDN dyingbreeds_
2025-11-05 08:01154.37.219.142:60001 KaijiAS979 c2 censys NETLAB-SDN DonPasci
2025-11-02 04:01103.236.72.41:88 KaijiAS134768 c2 censys CHINANET-SHAANXI-CLOUD-BASE DonPasci
2025-10-27 06:39202.181.24.117:808 KaijiAS55933 c2 censys dyingbreeds_
2025-10-25 16:015.231.70.68:808 KaijiAS58212 c2 censys DATAFOREST DonPasci
2025-10-23 05:3561.147.247.41:44442 KaijiKaiji abuse_ch
2025-10-22 04:03154.40.41.147:808 KaijiAS979 c2 censys NETLAB-SDN DonPasci
2025-10-11 20:02142.91.98.182:10003 KaijiAS59253 c2 censys LEASEWEB-APAC-SIN-11 DonPasci
2025-10-02 00:01202.61.139.34:808 KaijiAS152194 c2 censys CTGSERVERLIMITED-AS-AP DonPasci
2025-10-02 00:0138.150.2.34:808 KaijiAS979 c2 censys NETLAB-SDN DonPasci
2025-10-01 20:02202.61.139.18:808 KaijiAS152194 c2 censys CTGSERVERLIMITED-AS-AP DonPasci
2025-09-18 16:03154.36.164.87:808 KaijiAS979 c2 censys NETLAB-SDN DonPasci
2025-09-10 00:022.56.246.166:8520 KaijiAS203446 c2 censys DonPasci
2025-09-09 20:0246.151.33.222:80 KaijiAS212238 c2 CDNEXT censys DonPasci
2025-09-07 12:0245.204.211.17:808 KaijiAS62468 c2 censys HKCLOUDX DonPasci
2025-09-05 04:0038.175.194.35:60000 KaijiAS979 c2 censys NETLAB-SDN dyingbreeds_
2025-08-24 00:01114.66.46.206:808 KaijiAS136188 c2 censys DonPasci
2025-08-22 00:0135.215.191.55:9527 KaijiAS19527 c2 censys GOOGLE-2 DonPasci
2025-08-02 12:0145.192.209.81:8888 KaijiANTBOX1-AS-AP AS138995 c2 censys DonPasci
2025-08-01 20:0145.192.209.86:8888 KaijiANTBOX1-AS-AP AS138995 c2 censys DonPasci
2025-08-01 06:13122.10.116.19:808 KaijiAS55933 c2 censys dyingbreeds_
2025-07-29 08:01192.238.128.209:8888 KaijiANTBOX1-AS-AP AS138995 c2 censys DonPasci
2025-07-28 20:0261.184.139.17:808 KaijiAS4134 c2 censys CHINANET-BACKBONE DonPasci
2025-07-24 04:0245.192.209.54:8888 KaijiANTBOX1-AS-AP AS138995 c2 censys DonPasci
2025-07-24 04:0145.192.209.47:8888 KaijiANTBOX1-AS-AP AS138995 c2 censys DonPasci
2025-07-20 07:13192.238.128.194:8888 KaijiAS138995 c2 censys dyingbreeds_
2025-07-14 20:4587.121.84.125:808 KaijiAS215925 c2 censys VPSVAULTHOST DonPasci
2025-07-13 12:0145.207.199.11:808 KaijiAS137899 c2 censys ILAYERLIMITED-AS-AP DonPasci
2025-07-08 20:01192.140.188.34:808 KaijiAS146817 c2 censys FXNET DonPasci
2025-07-05 08:01176.100.37.158:4031 KaijiAS58087 c2 censys FLORIANKOLB DonPasci
2025-07-01 00:01110.40.80.89:88 KaijiAS38283 c2 censys CHINANET-SCIDC-AS-AP DonPasci
2025-06-25 08:01111.180.147.145:808 KaijiAS148981 c2 censys CHINANET-HUBEI-SHIYAN-IDC DonPasci
2025-06-19 20:0245.142.115.211:808 KaijiAS44486 c2 censys SYNLINQ DonPasci
2025-06-11 00:0245.207.207.97:808 KaijiAS8796 c2 censys FD-298-8796 DonPasci
2025-06-10 16:0245.207.207.195:808 KaijiAS8796 c2 censys FD-298-8796 DonPasci
2025-06-10 04:5845.207.207.222:808 KaijiAS8796 c2 censys FD-298-8796 dyingbreeds_
2025-06-04 04:01114.80.124.67:808 KaijiAS4812 c2 censys CHINANET-SH-AP DonPasci
2025-05-18 20:0169.165.70.241:808 KaijiAS62468 c2 censys HKCLOUDX DonPasci
2025-05-10 12:0123.146.40.48:8087 Kaiji1GSERVERS AS14315 c2 censys DonPasci
2025-05-05 00:02192.140.166.53:808 KaijiAS146817 c2 censys FXNET DonPasci
2025-04-24 16:01111.67.206.166:808 KaijiAS4808 c2 censys CHINA169-BJ DonPasci
2025-04-19 08:0151.79.160.146:808 KaijiAS16276 c2 censys OVH DonPasci
2025-04-19 08:01154.201.91.52:808 KaijiAS8796 c2 censys FD-298-8796 DonPasci
2025-04-17 14:34154.40.47.248:888 KaijiKaiji abuse_ch
2025-04-13 08:0262.216.93.113:80 KaijiAS212238 c2 CDNEXT censys DonPasci
2025-04-12 16:02154.44.30.160:808 KaijiAS979 c2 censys NETLAB-SDN DonPasci
2025-04-11 05:35103.45.68.160:808 KaijiAS152194 c2 censys dyingbreeds_
2025-04-11 00:0223.146.40.48:2095 Kaiji1GSERVERS AS14315 c2 censys DonPasci
2025-04-08 12:0245.192.215.195:808 KaijiANTBOX1-AS-AP AS138995 c2 censys DonPasci
2025-04-05 00:0145.196.239.74:808 KaijiACCK-LTD AS401615 c2 censys DonPasci
2025-04-03 20:0145.131.65.11:808 KaijiAS203446 c2 censys DonPasci
2025-04-02 08:01192.238.206.9:808 KaijiANTBOX1-AS-AP AS138995 c2 censys DonPasci
2025-03-17 04:01154.204.177.59:808 KaijiAROSS-AS AS400619 c2 censys DonPasci
2025-03-11 16:0165.75.211.232:10081 KaijiAS50131 c2 censys SPARTANHOST DonPasci
2025-03-09 16:0165.75.211.237:10081 KaijiAS50131 c2 censys SPARTANHOST DonPasci
2025-03-02 04:01192.140.163.10:60000 KaijiAS146817 c2 censys FXNET DonPasci
2025-03-02 00:01154.37.219.142:60000 KaijiAS979 c2 censys NETLAB-SDN DonPasci
2025-02-26 00:02160.202.251.191:808 KaijiAS146817 c2 censys FXNET DonPasci
2025-02-19 16:01129.150.32.120:8888 KaijiAS31898 c2 censys ORACLE-BMC-31898 DonPasci
2025-02-18 12:0176.223.125.223:10081 KaijiAMAZON-02 AS16509 c2 censys DonPasci
2025-02-17 05:23199.195.252.200:808 Kaijic2 Kaiji redrabytes
2025-02-16 04:0115.197.85.250:10081 KaijiAMAZON-02 AS16509 c2 censys DonPasci
2025-02-13 20:00194.147.98.238:10081 KaijiAS201106 c2 censys SPARTANHOST DonPasci
2025-02-08 20:0123.94.247.46:8080 KaijiAS-COLOCROSSING AS36352 c2 censys DonPasci
2025-02-07 08:01172.247.194.226:26352 KaijiAS40065 c2 censys CNSERVERS DonPasci
2025-02-07 08:01172.247.194.230:26352 KaijiAS40065 c2 censys CNSERVERS DonPasci
2025-02-07 04:02172.247.194.228:26352 KaijiAS40065 c2 censys CNSERVERS DonPasci
2025-02-07 04:02172.247.194.229:26352 KaijiAS40065 c2 censys CNSERVERS DonPasci
2025-02-05 20:01172.247.194.227:26352 KaijiAS40065 c2 censys CNSERVERS DonPasci
2025-02-04 00:0145.192.102.5:808 KaijiAS137899 c2 censys ILAYERLIMITED-AS-AP DonPasci
2025-01-30 12:0151.79.160.209:808 KaijiAS16276 c2 censys OVH DonPasci
2025-01-28 11:02138.2.110.186:8888 KaijiAS31898 c2 censys ORACLE-BMC-31898 dyingbreeds_
2025-01-24 12:0477.90.7.86:8080 KaijiAS58212 c2 censys DATAFOREST DonPasci
2025-01-22 16:04156.238.253.27:808 KaijiAS8796 c2 censys FD-298-8796 DonPasci
2025-01-21 20:04154.37.219.249:60000 KaijiAS979 c2 censys NETLAB-SDN DonPasci
2025-01-21 00:04158.178.235.53:8088 KaijiAS31898 c2 censys ORACLE-BMC-31898 DonPasci
2025-01-17 08:03154.201.90.76:8520 KaijiAS8796 c2 censys FD-298-8796 DonPasci
2025-01-14 10:2345.60.28.19:80 KaijiAS19551 c2 Imperva shodan skocherhan
2025-01-11 12:03156.238.224.205:808 KaijiAS8796 c2 censys FD-298-8796 DonPasci
2025-01-10 04:05129.158.232.239:808 KaijiAS31898 c2 censys ORACLE-BMC-31898 DonPasci
2025-01-10 04:05158.178.235.53:808 KaijiAS31898 c2 censys ORACLE-BMC-31898 DonPasci
2025-01-09 16:03120.48.34.233:808 KaijiAS38365 BAIDU c2 censys DonPasci
2025-01-09 12:03198.98.53.199:808 KaijiAS53667 c2 censys PONYNET DonPasci
2025-01-07 12:04213.35.108.193:808 KaijiAS31898 c2 censys ORACLE-BMC-31898 DonPasci
2024-12-25 08:02144.48.8.243:808 KaijiAS55933 c2 censys CLOUDIE-AS-AP DonPasci
2024-12-25 00:021.94.234.116:808 KaijiAS55990 c2 censys HWCSNET DonPasci
2024-12-23 20:0289.117.94.224:8080 KaijiAS46475 c2 censys LIMESTONENETWORKS DonPasci
2024-12-19 20:01154.213.187.27:808 KaijiAS51396 c2 censys PFCLOUD DonPasci
2024-12-15 12:01209.141.54.49:8080 KaijiAS53667 c2 censys PONYNET DonPasci
2024-12-11 06:21115.120.241.43:80 KaijiAS55990 c2 censys dyingbreeds_
2024-12-11 06:21154.44.26.214:8080 KaijiAS979 c2 censys NETLAB-SDN dyingbreeds_
2024-12-11 06:21156.238.253.44:808 KaijiAS8796 c2 censys FD-298-8796 dyingbreeds_
2024-12-10 05:20115.120.241.43:808 KaijiAS55990 c2 censys dyingbreeds_
2024-12-10 05:20182.106.149.84:808 KaijiAS139201 c2 censys dyingbreeds_
2024-12-05 05:4145.61.187.202:808 KaijiAS53667 c2 censys PONYNET dyingbreeds_
2024-12-02 21:22103.119.15.163:808 KaijiAS140869 c2 censys dyingbreeds_
2024-11-30 17:03185.92.182.246:808 KaijiKaiji panel NDA0E
2024-11-30 17:03154.64.249.169:8085 KaijiKaiji panel NDA0E
2024-11-30 17:03198.98.61.69:1234 KaijiKaiji panel NDA0E
2024-11-30 17:03198.98.59.117:8080 KaijiKaiji panel NDA0E
2024-11-30 17:03156.238.224.101:808 KaijiKaiji panel NDA0E
2024-10-28 20:02103.178.57.159:808 KaijiAS141159 c2 censys INCOMPARABLEHKNET-AS-AP DonPasci
2024-10-14 20:04103.135.101.188:8087 KaijiAS150452 c2 censys LANDUPS-AS-AP DonPasci
2024-10-07 12:03154.12.95.219:606 KaijiAS8796 c2 censys FD-298-8796 DonPasci
2024-09-26 08:02209.141.58.104:808 KaijiAS53667 c2 censys PONYNET DonPasci
2024-09-25 04:01172.247.194.227:23812 KaijiAS40065 c2 censys CNSERVERS DonPasci
2024-09-24 16:02172.247.194.229:23812 KaijiAS40065 c2 censys CNSERVERS DonPasci
2024-09-24 16:02172.247.194.226:23812 KaijiAS40065 c2 censys CNSERVERS DonPasci
2024-09-24 08:01172.247.194.230:23812 KaijiAS40065 c2 censys CNSERVERS DonPasci
2024-09-22 12:01172.247.194.228:23812 KaijiAS40065 c2 censys CNSERVERS DonPasci
2024-09-21 19:20ava9527.cc KaijiKaiji NDA0E
2024-09-21 19:20cc.ava9527.cc KaijiKaiji NDA0E
2024-09-21 19:1823.224.121.29:60888 KaijiKaiji NDA0E
2024-09-21 00:0120.2.144.116:8081 KaijiAS8075 c2 censys MICROSOFT-CORP-MSN-AS-BLOCK DonPasci
2024-09-14 04:01199.119.138.85:8087 KaijiAS216382 c2 censys LAYER DonPasci
2024-09-03 04:01207.211.144.153:8088 KaijiAS31898 c2 censys ORACLE-BMC-31898 DonPasci
2024-08-31 00:01154.213.192.24:808 KaijiAS51396 c2 censys PFCLOUD DonPasci
2024-08-26 16:01108.181.228.101:808 KaijiAS46844 c2 censys Sharktech DonPasci
2024-08-26 16:01154.82.95.210:808 KaijiAS399077 c2 censys TERAEXCH DonPasci
2024-08-26 08:01123.249.104.74:808 KaijiAS55990 c2 censys HWCSNET DonPasci
2024-08-26 00:0183.229.120.164:808 KaijiAS139659 c2 censys LUCID-AS-AP DonPasci
2024-08-25 06:04182.106.149.83:808 KaijiAS139201 c2 censys CHINANET-JIANGXI-JIUJIANG-IDC DonPasci
2024-08-23 06:0442.194.196.162:8080 KaijiAS45090 c2 censys TENCENT-NET-AP DonPasci
2024-08-22 10:04198.98.60.49:8080 KaijiAS53667 c2 censys PONYNET DonPasci
2024-08-21 15:4838.150.13.6:808 KaijiKaiji ViriBack abuse_ch
2024-08-21 15:48172.247.44.218:808 KaijiKaiji ViriBack abuse_ch
2024-08-12 08:53103.124.105.246:808 KaijiAS142036 c2 censys HOSTEONS-AS-AP DonPasci
2024-08-12 08:5313.228.173.120:808 KaijiAMAZON-02 AS16509 c2 censys DonPasci
2024-03-04 14:2036.152.201.67:65535 KaijiAS56046 c2 censys thehappydinoa
2024-03-04 14:20183.249.20.106:8090 KaijiAS56041 c2 censys thehappydinoa
2024-02-22 17:13209.141.35.151:888 KaijiAS53667 c2 censys PONYNET thehappydinoa
2024-02-19 15:3739.134.69.79:17080 KaijiAS56046 c2 censys thehappydinoa
2024-02-03 19:39123.99.201.37:808 KaijiAS58461 c2 censys thehappydinoa
2024-01-31 14:06123.249.86.77:8089 KaijiAS55990 c2 censys thehappydinoa
2024-01-19 15:06175.24.197.196:808 KaijiAS45090 c2 censys thehappydinoa
2024-01-16 14:04119.6.239.18:888 Kaijic2 censys thehappydinoa
2024-01-16 14:0423.224.85.39:8888 Kaijic2 censys CNSERVERS thehappydinoa
2024-01-09 05:31173.249.198.97:8888 Kaijic2 censys TZULO thehappydinoa
2024-01-02 14:32192.227.146.253:8080 KaijiAS-COLOCROSSING c2 censys thehappydinoa
2023-12-31 20:5798.159.100.118:8080 Kaijic2 censys MAJESTIC-HOSTING-01 thehappydinoa
2023-12-31 20:57119.6.239.82:888 Kaijic2 censys thehappydinoa
2023-12-19 16:32154.55.139.35:8081 Kaijic2 censys thehappydinoa
2023-12-19 16:32119.6.239.81:888 Kaijic2 censys thehappydinoa
2023-12-19 16:32119.6.239.68:888 Kaijic2 censys thehappydinoa
2023-12-15 19:04154.55.139.35:8080 Kaijic2 censys thehappydinoa
2023-12-15 19:04223.87.225.90:8080 Kaijic2 censys thehappydinoa
2023-12-15 19:04119.6.239.83:888 Kaijic2 censys thehappydinoa
2023-12-15 19:04154.37.152.123:998 Kaijic2 censys NETLAB-SDN thehappydinoa
2023-12-11 17:42119.6.239.80:888 Kaijic2 censys thehappydinoa
2023-12-11 13:41149.115.234.54:9999 KaijiADG-76-32558 c2 censys thehappydinoa
2023-12-11 13:41117.158.206.150:9876 Kaijic2 censys thehappydinoa
2023-12-11 13:41149.115.234.35:9999 KaijiADG-76-32558 c2 censys thehappydinoa
2023-12-11 13:41149.115.234.80:9999 KaijiADG-76-32558 c2 censys thehappydinoa
2023-12-11 13:41158.101.74.227:8080 Kaijic2 censys ORACLE-BMC-31898 thehappydinoa
2023-12-11 13:41219.128.25.2:8088 Kaijic2 censys thehappydinoa
2023-10-18 06:3738.242.220.166:9012 Kaiji 500mk500
2023-10-18 06:37rockwellroyalhomes.com Kaiji 500mk500
2023-10-09 05:49179527.com KaijiKaiji abuse_ch
2023-03-17 18:565.255.111.128:54741 KaijiKaiji abuse_ch
2023-03-15 11:21154.7.10.30:888 KaijiKaiji abuse_ch
2023-03-15 07:05107.189.13.89:80 KaijiAres Group botnet Kaiji 0xrb
2023-03-15 07:0520.239.156.147:8080 KaijiAres Group botnet Kaiji 0xrb
2023-03-15 07:0545.32.166.73:8080 KaijiAres Group botnet Kaiji 0xrb
2023-03-15 07:05137.175.17.80:81 KaijiAres Group botnet Kaiji 0xrb
2023-03-15 07:05137.175.17.80:8080 KaijiAres Group botnet Kaiji 0xrb
2023-03-15 07:0552.140.208.75:9527 KaijiAres Group botnet Kaiji 0xrb
2023-03-15 07:0545.113.1.126:808 KaijiAres Group botnet Kaiji 0xrb
2023-03-15 07:05154.7.10.30:808 KaijiAres Group botnet Kaiji 0xrb
2023-03-15 07:0523.94.57.167:808 KaijiAres Group botnet Kaiji 0xrb
2023-03-15 07:0523.224.143.170:888 KaijiAres Group botnet Kaiji 0xrb
2023-03-15 07:0545.125.238.68:80 KaijiAres Group botnet Kaiji 0xrb
2023-03-15 07:05182.43.6.129:6565 KaijiAres Group botnet Kaiji 0xrb
2023-03-15 07:05154.19.243.107:808 KaijiAres Group botnet Kaiji 0xrb
2023-03-06 19:2923.94.57.167:2023 KaijiKaiji abuse_ch
2022-10-23 17:40104.207.149.94:10099 KaijiKaiji abuse_ch
2022-09-29 08:35103.254.72.193:10099 KaijiKaiji abuse_ch
2022-09-18 23:49c2cf97eed12228cc78cabf39f8d48bb8 Kaiji Virus_Deck
2022-05-12 08:2020.187.86.47:8080 KaijiKaiji abuse_ch
2021-08-05 12:25e666735eb6c10a27617aac9ffbf1bf29435fa0d1e3d099787d6ce28e079c8768 Kaiji Virus_Deck
2021-03-12 07:3443db5e57f657c0a9568b4dd73586bf8d Kaiji Virus_Deck