ThreatFox IOC Database

You are browsing the Indicator Of Compromise (IOC) database of ThreatFox. If you would like to contribute IOCs to the corpuse, you can do so through either the web form or the API.

1'338

IOCs shared (past 24 hours)

IClickFix

Most seen malware family (past 24 hours)

1'764'422

IOCs in corpus

Using the form below, you can search for malware samples by a hash (MD5, SHA256, SHA1), imphash, tlsh hash, ClamAV signature, tag or malware family.

Browse Database

Search syntax is as follow: keyword:search_term

Following is a list of accepted keywords along with an example search_term

ioc:ms-debug-services.com ( run)
malware:CobaltStrike ( run)
tag:TA505 ( run)
threat_type:cc_skimming ( run)
uuid:87f310f3-540b-11eb-922c-42010aa4000a ( run)

Date (UTC)	IOC	Malware	Tags	Reporter
2026-09-11 06:32	9fd960978ea37f0c25951fd48f4e457b13d2594cc45249fae79fda9bcfe86547	XWorm		Grim
2026-09-11 06:32	7843d446531b71cd75f725abda1df21c	XWorm		Grim
2026-09-11 06:32	99201aa09d72162517eaef41b48eb7b2fbe5cd93	XWorm		Grim
2026-09-11 06:32	7c84081b3d55fd6c8497b5f980c65909	XWorm		Grim
2026-09-11 06:32	340aaef808241e106812eaa007ca5719310e467b	XWorm		Grim
2026-09-11 06:32	a283f8fa8b08688bac38396e9b59aacf89037577177611df9891c58a0739d4a9	XWorm		Grim
2026-09-11 06:31	ee673a56587c566cdc49d10c5a666348	XWorm		Grim
2026-09-11 06:31	04d23e4b49fdbf55a3242a2b230af75c4b781bf7	XWorm		Grim
2026-09-11 06:31	d00a97e1e2f4ba671f1377bfe7802cd76d04ddebf75a51c850c4711007b16418	XWorm		Grim
2026-09-10 17:15	13.140.42.128:7004	XWorm	XWorm	abuse_ch
2026-09-10 11:25	64.89.160.225:7001	XWorm	XWorm	abuse_ch
2026-09-10 11:25	45.154.98.168:9019	XWorm	XWorm	abuse_ch
2026-09-10 11:15	phanxwodm.duckdns.org	XWorm	XWorm	abuse_ch
2026-09-10 11:10	103.83.86.22:7500	XWorm	XWorm	abuse_ch
2026-09-10 11:10	194.116.236.9:7000	XWorm	XWorm	abuse_ch
2026-09-10 11:01	203.202.232.127:1515	XWorm	XWorm	abuse_ch
2026-09-10 10:55	103.83.86.96:4001	XWorm	XWorm	abuse_ch
2026-09-10 10:45	91.239.6.97:4449	XWorm	XWorm	abuse_ch
2026-09-10 10:40	windowsupgrade.3utilities.com	XWorm	XWorm	abuse_ch
2026-09-10 06:18	107.149.8.250:54321	XWorm	XWorm	abuse_ch
2026-09-10 06:10	185.29.10.23:1012	XWorm	XWorm	abuse_ch
2026-09-10 05:32	http://209.145.51.44/keepon.exe	XWorm	exe XWorm	whack_sh
2026-09-09 18:20	95.211.120.98:7004	XWorm	XWorm	abuse_ch
2026-09-09 18:15	104.168.7.212:7004	XWorm	XWorm	abuse_ch
2026-09-09 08:47	62.60.226.185:6001	XWorm		netresec
2026-09-08 22:45	btmobv4.duckdns.org	XWorm	XWorm	abuse_ch
2026-09-08 06:34	90c8155599407305a6bf1105a80232b89400a212	XWorm		Grim
2026-09-08 06:34	6f6cb5fd8c5696bb42cec451906324ce	XWorm		Grim
2026-09-08 06:34	3f980de6bd0581609105f594ba932e5e54a9eb1afac81d7543a3a4da8aac9a6e	XWorm		Grim
2026-09-07 08:31	43.228.157.124:7080	XWorm	XWorm	abuse_ch
2026-09-07 07:21	84.32.230.217:7004	XWorm	XWorm	abuse_ch
2026-09-07 07:16	102.220.160.217:7004	XWorm	XWorm	abuse_ch
2026-09-07 07:16	102.220.160.195:7008	XWorm	XWorm	abuse_ch
2026-09-06 08:01	43.228.157.141:7007	XWorm	XWorm	abuse_ch
2026-09-04 20:26	172.245.93.70:443	XWorm	XWorm	abuse_ch
2026-09-04 12:41	74.120.121.223:7004	XWorm	XWorm	abuse_ch
2026-09-04 12:20	techycarterpiller.kozow.com	XWorm	XWorm	abuse_ch
2026-09-02 09:22	b75ee9270008a9a46f28f0b41738b138bbb7d89cd964acb3570cffb42fc81a05	XWorm	Tcloudnet VShell-cluster	Anonymous
2026-09-02 09:14	2214907e696bad85bde1d90c943ef66e413d7a5c6d7596ced25b74441200439a	XWorm		threatcluster
2026-09-02 09:14	447e3a131e62bd33b1297739a7b959a92358a97f58554469044636a3c4f244e8	XWorm		threatcluster
2026-09-02 09:14	6d4012e0dd3b56a3e52857734fa0d582cdf3c56f0e5decc8005c882d1d1c6ceb	XWorm		threatcluster
2026-09-02 09:14	c0db6ddd6222d02ad7490399d33c61ded0076f0037409dc8498924458646d78a	XWorm		threatcluster
2026-09-02 09:14	f139b4ca15feffb7a6633ec1a431c5c604b397576b56b5c863ae8fe4fa14db4f	XWorm		threatcluster
2026-09-02 05:49	206.238.115.64:4444	XWorm	Tcloudnet VShell-cluster	Anonymous
2026-09-02 01:17	40390bff40cfeb3b8149a1d87cdb7659962c47b3	XWorm		Grim
2026-09-02 01:17	3ef284d34290f2f784e12e005c1698b5	XWorm		Grim
2026-09-02 01:17	eac9fafb8e19bb12618199b48c79fb94cab8e447b09973b1443464a3f13ea5ed	XWorm		Grim
2026-09-01 07:35	103.67.163.188:6161	XWorm	XWorm	abuse_ch
2026-09-01 06:25	151.241.154.50:7004	XWorm	XWorm	abuse_ch
2026-08-31 14:15	102.220.160.87:7009	XWorm	XWorm	abuse_ch
2026-08-31 08:40	92.118.206.129:7006	XWorm	XWorm	abuse_ch
2026-08-31 08:35	172.245.92.217:7004	XWorm	XWorm	abuse_ch
2026-08-31 08:35	209.54.103.151:6000	XWorm	XWorm	abuse_ch
2026-08-30 10:50	36.255.97.175:8787	XWorm	XWorm	abuse_ch
2026-08-28 14:12	45.74.3.160:443	XWorm	XWorm	abuse_ch
2026-08-28 13:50	185.215.151.63:8823	XWorm	XWorm	abuse_ch
2026-08-27 08:47	109.122.18.169:3693	XWorm	XWorm	abuse_ch
2026-08-27 08:43	178.173.234.123:7007	XWorm	XWorm	abuse_ch
2026-08-27 08:30	killkill1.myftp.biz	XWorm	XWorm	abuse_ch
2026-08-27 08:30	inter.myftp.biz	XWorm	XWorm	abuse_ch
2026-08-26 13:35	104.251.180.194:7007	XWorm	XWorm	abuse_ch
2026-08-26 08:03	31.40.204.71:777	XWorm	XWorm	abuse_ch
2026-08-26 08:00	88.99.165.153:8780	XWorm	XWorm	abuse_ch
2026-08-26 08:00	windowsfeeds.3utilities.com	XWorm	XWorm	abuse_ch
2026-08-26 07:55	191.101.46.43:2021	XWorm	XWorm	abuse_ch
2026-08-26 07:55	217.217.97.84:2021	XWorm	XWorm	abuse_ch
2026-08-25 06:10	80.96.109.204:2021	XWorm	XWorm	abuse_ch
2026-08-24 08:50	45.141.21.47:7004	XWorm	XWorm	abuse_ch
2026-08-21 08:45	194.116.236.49:2222	XWorm	XWorm	abuse_ch
2026-08-21 08:35	84.38.129.114:4545	XWorm	XWorm	abuse_ch
2026-08-20 14:40	84.38.133.144:9090	XWorm	XWorm	abuse_ch
2026-08-20 12:45	45.141.148.10:4001	XWorm	XWorm	abuse_ch
2026-08-20 08:06	194.59.31.98:2021	XWorm	XWorm	abuse_ch
2026-08-20 08:06	169.58.169.10:7004	XWorm	XWorm	abuse_ch
2026-08-20 08:06	15.204.115.143:7004	XWorm	XWorm	abuse_ch
2026-08-20 08:05	range2021.kozow.com	XWorm	XWorm	abuse_ch
2026-08-20 07:45	halakw.com	XWorm	XWorm	abuse_ch
2026-08-19 11:40	koyet88723-44608.portmap.host	XWorm	c2 XWorm	juroots
2026-08-19 10:35	195.177.94.85:7004	XWorm	XWorm	abuse_ch
2026-08-19 06:04	108.181.175.198:7000	XWorm	HTA mexico WhatsApp XWorm	isahjs6
2026-08-18 19:15	103.83.87.183:1717	XWorm	XWorm	abuse_ch
2026-08-18 10:45	45.62.170.51:7000	XWorm	XWorm	abuse_ch
2026-08-18 09:55	31.56.209.234:443	XWorm	XWorm	abuse_ch
2026-08-13 20:56	103.83.87.158:4040	XWorm	XWorm	abuse_ch
2026-08-13 15:18	victorymarksllc20.duckdns.org	XWorm		proxylife
2026-08-13 11:41	194.116.236.54:2467	XWorm	XWorm	abuse_ch
2026-08-13 11:35	107.175.101.136:8823	XWorm	XWorm	abuse_ch
2026-08-12 11:20	wmxdata.ddns.net	XWorm	XWorm	abuse_ch
2026-08-12 10:02	103.67.163.6:443	XWorm	XWorm	abuse_ch
2026-08-12 08:44	151.241.154.218:2021	XWorm	XWorm	abuse_ch
2026-08-12 08:41	104.249.10.187:7004	XWorm	XWorm	abuse_ch
2026-08-12 08:26	107.174.20.215:8824	XWorm	XWorm	abuse_ch
2026-08-12 08:12	217.60.195.74:443	XWorm	XWorm	abuse_ch
2026-08-12 06:20	xwsub.cincv.group	XWorm	XWorm	abuse_ch
2026-08-11 10:10	windowsupdate.webhop.me	XWorm	XWorm	abuse_ch
2026-08-11 10:05	31.56.209.60:443	XWorm	XWorm	abuse_ch
2026-08-11 09:44	barikadeuku.freedev.app	XWorm	XWorm	abuse_ch
2026-08-11 09:44	185.27.134.137:443	XWorm	XWorm	abuse_ch
2026-08-11 09:41	without.kesug.com	XWorm	XWorm	abuse_ch
2026-08-11 09:41	185.27.134.212:443	XWorm	XWorm	abuse_ch
2026-08-11 09:00	tagmentos.bingbaochow.cam	XWorm	XWorm	abuse_ch
2026-08-11 09:00	haghuer.bingbaochow.cam	XWorm	XWorm	abuse_ch
2026-08-11 07:03	104.249.10.95:7004	XWorm	XWorm	abuse_ch
2026-08-11 06:40	technocalfindersda.bounceme.net	XWorm	XWorm	abuse_ch
2026-08-10 15:25	31.59.118.77:7004	XWorm	XWorm	abuse_ch
2026-08-10 15:25	155.103.71.203:2233	XWorm	XWorm	abuse_ch
2026-08-10 15:05	155.254.98.57:7007	XWorm	XWorm	abuse_ch
2026-08-10 15:05	155.103.71.88:3456	XWorm	XWorm	abuse_ch
2026-08-10 14:25	107.172.134.28:6000	XWorm	XWorm	abuse_ch
2026-08-10 14:15	109.248.151.124:7575	XWorm	XWorm	abuse_ch
2026-08-10 13:50	104.249.130.248:5960	XWorm	XWorm	abuse_ch
2026-08-10 09:26	147.124.212.143:4333	XWorm		proxylife
2026-08-10 06:18	91.219.238.82:8541	XWorm		netresec
2026-08-07 12:20	46.151.182.225:7007	XWorm	XWorm	abuse_ch
2026-08-07 12:20	tmplsnd.cabvlliahermosa.com.mx	XWorm	XWorm	abuse_ch
2026-08-07 12:06	45.148.18.40:58798	XWorm	XWorm	abuse_ch
2026-08-07 12:06	45.148.18.40:58268	XWorm	XWorm	abuse_ch
2026-08-07 10:20	185.215.151.16:8823	XWorm	XWorm	abuse_ch
2026-08-07 10:20	Pb3089EP3WAwzicHHzF9zQ==	XWorm	XWorm	abuse_ch
2026-08-06 18:13	45.61.114.66:6000	XWorm	XWorm	abuse_ch
2026-08-06 11:00	45.88.91.117:7004	XWorm	XWorm	abuse_ch
2026-08-06 09:18	imobilityes.cabvlliahermosa.com.mx	XWorm	XWorm	abuse_ch
2026-08-06 09:18	46.151.182.234:7007	XWorm	XWorm	abuse_ch
2026-08-05 11:00	yayana.myftp.org	XWorm	XWorm	abuse_ch
2026-08-05 08:20	80.76.49.76:7004	XWorm	XWorm	abuse_ch
2026-08-05 08:20	155.103.69.171:1122	XWorm	XWorm	abuse_ch
2026-08-05 08:20	104.128.191.103:8823	XWorm	XWorm	abuse_ch
2026-08-05 08:15	31.56.209.61:443	XWorm	XWorm	abuse_ch
2026-08-05 08:15	130.12.182.59:2026	XWorm	XWorm	abuse_ch
2026-08-05 08:05	185.215.151.120:8823	XWorm	XWorm	abuse_ch
2026-08-04 16:47	3593882c47f2a944bfe51f03215c8bb3ff6b3fa8	XWorm		Grim
2026-08-04 16:47	002f8166ec9f671ba830b7cd2263b5e1	XWorm		Grim
2026-08-04 16:47	ea86029605e9288a9320c3ca83f30e1e63d06936939a3039880f45770ea83831	XWorm		Grim
2026-08-04 16:47	2bb1b024135ef7b0af3141d389530d82	XWorm		Grim
2026-08-04 16:47	96a837eee8332c0d27efcad1537000001e5aa86d	XWorm		Grim
2026-08-04 16:47	833b709b93b80919dc06d8b0619de8919df283060dd9fdb9da6bd4d9b778ca7a	XWorm		Grim
2026-08-04 12:55	217.60.195.193:443	XWorm	XWorm	abuse_ch
2026-08-04 09:20	102.220.160.146:5050	XWorm	XWorm	abuse_ch
2026-08-04 09:10	217.60.195.87:443	XWorm	XWorm	abuse_ch
2026-08-04 09:10	84.38.133.132:6000	XWorm	XWorm	abuse_ch
2026-08-04 09:10	109.248.150.234:1012	XWorm	XWorm	abuse_ch
2026-08-03 11:35	31.57.184.10:5050	XWorm	XWorm	abuse_ch
2026-08-02 15:40	204.10.160.254:443	XWorm	XWorm	abuse_ch
2026-07-28 23:27	4fef8581b198c27c37f06137df872d52	XWorm		Grim
2026-07-28 23:27	712ca31e2937bf843579e0e782ac8bc33ae84b4d580a3c69aabd531ff416b5b8	XWorm		Grim
2026-07-28 23:27	a4d3c3c8cfe0cf04e3de11277d27d211c8ad1b52	XWorm		Grim
2026-07-27 17:10	carrenzaalwarex.ddns.net	XWorm	XWorm	abuse_ch
2026-07-27 12:46	93dfe7280fc32b16336d6c981421049a	XWorm		Grim
2026-07-27 12:46	d70250eaf001392087652da5419220049921ca8f	XWorm		Grim
2026-07-27 12:46	aeee9e8262aea170816e1af225dbab94ff607cd32e78ab76d41b8ec2c5a6e6d6	XWorm		Grim
2026-07-27 12:35	bucakosb.org.tr	XWorm	XWorm	abuse_ch
2026-07-26 14:45	f1a75d5acaf8fa5a809bc814958cdd466d22aef012641f756e8bb16f04eb2556	XWorm		Grim
2026-07-26 14:45	3c4f9d2346850b1daf329b5bb9daa18d	XWorm		Grim
2026-07-26 14:45	efeb78efd4f559b344339da15c94aed6a8535682	XWorm		Grim
2026-07-24 12:25	range2021.myftp.biz	XWorm	XWorm	abuse_ch
2026-07-24 07:41	45.133.174.99:443	XWorm	XWorm	abuse_ch
2026-07-23 03:35	109.248.150.244:1070	XWorm	XWorm	abuse_ch
2026-07-22 08:50	45.88.91.35:7004	XWorm	XWorm	abuse_ch
2026-07-21 06:45	192.169.7.60:7000	XWorm	XWorm	abuse_ch
2026-07-20 12:05	166.88.132.80:2323	XWorm	XWorm	abuse_ch
2026-07-20 11:23	d1dc20911470ed43af8bce0355fd0cf7	XWorm		Grim
2026-07-20 11:22	80571d10fe416a63ceb0c3b582c547573c41c1b1108ebda0e5604edf4532ff97	XWorm		Grim
2026-07-20 11:22	cf7fa092c3cec9deb2bb4a008535f540a6d1ec46	XWorm		Grim
2026-07-16 07:31	102.220.160.143:5010	XWorm	XWorm	abuse_ch
2026-07-16 07:25	64.89.161.16:1470	XWorm	XWorm	abuse_ch
2026-07-16 07:11	217.60.195.17:7007	XWorm	XWorm	abuse_ch
2026-07-14 17:06	a36374b54d03e24d666466928d208624	XWorm		Grim
2026-07-14 17:06	19d6b52e50a865b56f34724d77af88b87e065c179d91ea6614d7e36ce1370216	XWorm		Grim
2026-07-14 17:06	15585c70f6dc9bfb5a73d8a70766c63355997dda	XWorm		Grim
2026-07-14 17:05	4faa4dc2ba332b3ea09ce2e4480e9663	XWorm		Grim
2026-07-14 17:05	0251d469d95ad1bde34b0ab228dfff4ee2bdff73f0612e6bc481667c757596cf	XWorm		Grim
2026-07-14 17:05	bc7d674aa2dbd5aab2e00b85f536681b766441a1	XWorm		Grim
2026-07-14 17:05	aecbad9bc246f34850ea7eb99a879985	XWorm		Grim
2026-07-14 17:05	59a4d0464a5bc0d3b588aee5192e40003841abd4	XWorm		Grim
2026-07-14 17:05	5df3d8d157cea2c1e957202eaea1c2dc27279e992828cfd8be931d48f9458d19	XWorm		Grim
2026-07-14 10:20	104.239.66.185:7004	XWorm	XWorm	abuse_ch
2026-07-11 07:15	217.60.195.237:443	XWorm	XWorm	abuse_ch
2026-07-11 07:15	217.60.195.213:443	XWorm	XWorm	abuse_ch
2026-07-11 07:15	ultraportal.4nmn.com	XWorm	XWorm	abuse_ch
2026-07-11 07:10	135.136.134.57:7007	XWorm	XWorm	abuse_ch
2026-07-11 07:10	217.60.195.12:7006	XWorm	XWorm	abuse_ch
2026-07-10 14:54	6e66f889923ccb7dc34641a4d7ddc234	XWorm		Grim
2026-07-10 14:54	c4785f0696cae4e8630d28e545bbee207544e7e3	XWorm		Grim
2026-07-10 14:54	7ee796a8fef94d38a6ef3d906fe3d37052b5b6c2435420dcc75e459fbc501a68	XWorm		Grim
2026-07-09 08:40	194.116.236.216:5005	XWorm	XWorm	abuse_ch
2026-07-09 08:35	133.18.165.80:7004	XWorm	XWorm	abuse_ch
2026-07-08 19:16	64.89.162.178:7007	XWorm	XWorm	abuse_ch
2026-07-08 10:31	194.116.236.94:4433	XWorm	XWorm	abuse_ch
2026-07-07 20:31	178.173.247.121:1982	XWorm	XWorm	abuse_ch
2026-07-07 17:26	81.90.31.12:9438	XWorm	XWorm	abuse_ch
2026-07-07 17:21	107.173.143.20:7004	XWorm	XWorm	abuse_ch
2026-07-07 14:46	172.245.244.91:443	XWorm	XWorm	abuse_ch
2026-07-07 14:20	currentpi021.duckdns.org	XWorm	XWorm	abuse_ch
2026-07-07 13:35	sourcingallproductsworldwide.duckdns.org	XWorm	XWorm	abuse_ch
2026-07-07 12:20	194.116.236.223:1717	XWorm	XWorm	abuse_ch
2026-07-07 12:20	31.40.204.237:3322	XWorm	XWorm	abuse_ch
2026-07-07 11:20	207.180.29.85:7004	XWorm	XWorm	abuse_ch
2026-07-07 11:20	207.180.29.217:7004	XWorm	XWorm	abuse_ch
2026-07-07 06:30	biesmanscars.biz	XWorm	XWorm	abuse_ch
2026-07-06 21:21	217.217.97.75:4445	XWorm	XWorm	abuse_ch
2026-07-06 12:10	185.254.96.128:1605	XWorm	XWorm	abuse_ch
2026-07-06 09:15	217.60.195.172:443	XWorm	XWorm	abuse_ch
2026-07-05 16:22	4b3c6ee4490da28af2ec40637384c400	XWorm		Grim
2026-07-05 16:22	d9d6fc3085dd822f258601164ecb21f318822a63ca0360aead9201bcee49ed04	XWorm		Grim
2026-07-05 16:22	96f4bf9096686fcb2cd171034b9ea22cd4da2280	XWorm		Grim
2026-07-04 14:41	82db12c13a8c6695c43ae207fa358ebf	XWorm		Grim
2026-07-04 14:41	8b686bac3a44ead6dee49ce4b5a1e5af4a2749d9	XWorm		Grim
2026-07-04 14:41	ffa6334625c7613e5a3b8817c742e43a2e9447fcaae7305e3eeaf0be5eb4ea70	XWorm		Grim
2026-07-02 23:05	198.37.105.48:2233	XWorm	XWorm	abuse_ch
2026-07-02 16:26	6a26cc31650fd8ca3d62532cd1106899	XWorm		Grim
2026-07-02 16:26	7776706d26fb2dfd7cb96910810bb4c3a02b343a228035a0ca4db3ccf8e4d26a	XWorm		Grim
2026-07-02 16:26	f04c0953e5169beb168fd9ebcba96ce5d2d38a92	XWorm		Grim
2026-07-02 08:20	laohen1.myvnc.com	XWorm	XWorm	abuse_ch
2026-07-02 02:55	198.23.177.200:4445	XWorm	XWorm	abuse_ch
2026-07-01 07:00	104.239.66.42:7004	XWorm	XWorm	abuse_ch
2026-06-26 18:20	185.194.175.132:4445	XWorm	XWorm	abuse_ch
2026-06-25 05:40	204.10.160.167:443	XWorm	XWorm	abuse_ch
2026-06-23 08:10	91.92.120.66:7004	XWorm	XWorm	abuse_ch
2026-06-23 08:10	94.154.32.52:7004	XWorm	XWorm	abuse_ch
2026-06-23 08:10	104.239.66.11:7004	XWorm	XWorm	abuse_ch
2026-06-23 08:01	155.103.69.160:2839	XWorm	XWorm	abuse_ch
2026-06-22 16:56	d9e0461524386292212444734e44619e	XWorm		Grim
2026-06-22 16:56	6a0bf1dba11b61b4b53e78ccb483a7aea4ec3cfa81d2e7f9de55376c9fdef7ec	XWorm		Grim
2026-06-22 16:56	8b0954a8e13c1086945b93e9e967786e86bd0f2a	XWorm		Grim
2026-06-22 15:35	38.240.51.74:7004	XWorm	XWorm	abuse_ch
2026-06-22 15:35	216.250.250.247:443	XWorm	XWorm	abuse_ch
2026-06-22 15:35	104.239.66.178:7004	XWorm	XWorm	abuse_ch
2026-06-22 15:35	watchthisyear.gotdns.ch	XWorm	XWorm	abuse_ch
2026-06-22 15:25	193.104.58.63:1122	XWorm	XWorm	abuse_ch
2026-06-21 18:25	aiBot.casacam.net	XWorm	XWorm	abuse_ch
2026-06-18 20:35	103.83.87.182:2222	XWorm	XWorm	abuse_ch
2026-06-18 06:06	109.248.150.234:443	XWorm	XWorm	abuse_ch
2026-06-17 09:26	194.116.236.4:2829	XWorm	XWorm	abuse_ch
2026-06-17 06:15	demagic009.duckdns.org	XWorm	XWorm	abuse_ch
2026-06-15 19:50	155.103.71.244:1234	XWorm	XWorm	abuse_ch
2026-06-15 14:10	eminley.ydns.eu	XWorm	XWorm	abuse_ch
2026-06-15 13:35	172.245.106.54:3333	XWorm	XWorm	abuse_ch
2026-06-12 22:05	195.177.94.56:7004	XWorm	XWorm	abuse_ch
2026-06-11 15:00	ogonna.ydns.eu	XWorm	XWorm	abuse_ch
2026-06-11 14:45	94.154.32.163:7004	XWorm	XWorm	abuse_ch
2026-06-11 14:45	45.88.91.5:7004	XWorm	XWorm	abuse_ch
2026-06-09 06:30	89.40.31.72:6000	XWorm	XWorm	abuse_ch
2026-06-08 13:05	104.239.66.136:2017	XWorm	XWorm	abuse_ch
2026-06-08 09:55	84.38.129.122:443	XWorm	XWorm	abuse_ch
2026-06-08 09:40	87.120.107.29:1194	XWorm	XWorm	abuse_ch
2026-06-08 09:20	31.56.209.126:1996	XWorm	XWorm	abuse_ch
2026-06-08 08:55	216.250.250.247:8086	XWorm	XWorm	abuse_ch
2026-06-08 08:50	151.244.232.26:443	XWorm	XWorm	abuse_ch
2026-06-08 08:45	107.172.13.245:7007	XWorm	XWorm	abuse_ch
2026-06-08 08:35	31.56.209.92:443	XWorm	XWorm	abuse_ch
2026-06-08 08:35	104.168.7.219:8823	XWorm	XWorm	abuse_ch
2026-06-08 08:35	frBvNnnFYR6XR622pBE0NQ==	XWorm	XWorm	abuse_ch
2026-06-06 18:50	194.116.236.7:3333	XWorm	XWorm	abuse_ch
2026-06-05 05:45	185.91.127.173:24959	XWorm	XWorm	abuse_ch
2026-06-04 14:40	67.207.166.167:4020	XWorm	XWorm	abuse_ch
2026-06-04 11:30	192.3.171.223:4445	XWorm	XWorm	abuse_ch
2026-06-04 09:25	103.83.86.174:2929	XWorm	XWorm	abuse_ch
2026-06-04 06:30	80.76.49.132:7004	XWorm	XWorm	abuse_ch
2026-06-04 06:30	BiMQuT238p64emYwAjhVaw==	XWorm	XWorm	abuse_ch
2026-06-04 06:25	45.133.116.16:8823	XWorm	XWorm	abuse_ch
2026-06-04 06:25	104.239.66.86:7004	XWorm	XWorm	abuse_ch
2026-06-04 05:50	155.103.71.146:777	XWorm	XWorm	abuse_ch
2026-06-03 14:40	81.180.93.249:80	XWorm	c2 shodan XWorm	juroots
2026-06-03 06:40	laohe4.myvnc.com	XWorm	XWorm	abuse_ch
2026-06-01 06:10	82.38.4.40:7004	XWorm	XWorm	abuse_ch
2026-05-27 18:53	http://94.159.113.64/a.jpg	XWorm	ClickFix iwr-iex ps-stager XWorm	Lenny_3BO
2026-05-27 18:53	http://94.159.113.64/b.jpg	XWorm	ClickFix iwr-iex ps-stager XWorm	Lenny_3BO
2026-05-27 18:53	37b0e82941af3a9c12e09991411d1b037b9dc516c99a447f1929039f6648d34f	XWorm	dotNET double-ext js-dropper ps-loader XWorm	Lenny_3BO
2026-05-27 18:53	eb185ca03b1309eb280e66a53545ef8e899c90ebdbd7897c05c11fa9ae3d7dd2	XWorm	dotNET double-ext js-dropper ps-loader XWorm	Lenny_3BO
2026-05-27 18:53	3142ab1bd28b53bb14e4b5edd918c734a2bcdceee81e76b44444d548a93abcb6	XWorm	dotNET double-ext js-dropper ps-loader XWorm	Lenny_3BO
2026-05-27 18:53	074e4567fbe1d97669b64d9fec23678ebbd27633812b37ae3b64271aa2546ba2	XWorm	dotNET double-ext js-dropper ps-loader XWorm	Lenny_3BO
2026-05-27 18:53	12a7502e951fa4922df01a8d69f6dd4a19bbcfa0c0b421ce92888ced54611e3f	XWorm	dotNET double-ext js-dropper ps-loader XWorm	Lenny_3BO
2026-05-26 16:10	130.12.181.11:7433	XWorm	XWorm	abuse_ch
2026-05-22 06:15	151.242.63.220:7004	XWorm	XWorm	abuse_ch
2026-05-21 13:40	192.3.243.155:7000	XWorm	XWorm	abuse_ch
2026-05-20 18:05	newx3910.duckdns.org	XWorm	XWorm	abuse_ch
2026-05-20 18:05	greekxwl3010.duckdns.org	XWorm	XWorm	abuse_ch
2026-05-20 18:05	greatxil3010.duckdns.org	XWorm	XWorm	abuse_ch
2026-05-20 13:36	worksodsirius.ydns.eu	XWorm		threatcat_ch
2026-05-20 06:05	globalwealth2026.duckdns.org	XWorm	XWorm	abuse_ch
2026-05-20 04:30	176.65.139.194:6000	XWorm	XWorm	abuse_ch
2026-05-19 23:35	68.219.64.89:4444	XWorm	XWorm	abuse_ch
2026-05-19 10:53	gatuso.duckdns.org	XWorm		proxylife
2026-05-12 08:35	tiktikmod.ru.com	XWorm	XWorm	abuse_ch
2026-05-12 07:45	brandy.it.com	XWorm	XWorm	abuse_ch
2026-05-11 07:22	192.3.171.227:8823	XWorm	XWorm	abuse_ch
2026-05-11 07:22	104.168.5.18:8823	XWorm	XWorm	abuse_ch
2026-05-10 18:50	aliexpress.us.com	XWorm	XWorm	abuse_ch
2026-05-08 13:35	172.245.155.84:1111	XWorm	XWorm	abuse_ch
2026-05-08 13:01	155.103.71.206:1122	XWorm	XWorm	abuse_ch
2026-05-08 12:50	155.103.71.230:2478	XWorm	XWorm	abuse_ch
2026-05-07 14:01	204.10.160.250:7007	XWorm	XWorm	abuse_ch
2026-05-06 13:16	104.194.132.27:443	XWorm	XWorm	abuse_ch
2026-05-06 10:10	dubaitrades.duckdns.org	XWorm	XWorm	abuse_ch
2026-05-05 14:25	83.142.209.150:1602	XWorm	XWorm	abuse_ch
2026-05-04 10:31	103.83.86.92:3333	XWorm	XWorm	abuse_ch
2026-05-03 20:26	89.124.121.249:3001	XWorm	XWorm	abuse_ch
2026-05-02 12:15	91.92.243.45:7070	XWorm	XWorm	abuse_ch
2026-05-01 02:05	7326.info	XWorm	XWorm	abuse_ch
2026-04-30 07:16	158.94.211.33:7017	XWorm	XWorm	abuse_ch
2026-04-30 05:48	5c2cf4d36a6d942d6beb7b27b37c380e3fd688a3bb4f8616a13d20bf80c0bbea	XWorm	ClickFix RMM-abuse ScreenConnect vercel	Lenny_3BO
2026-04-30 05:48	vickynewsc.xyz	XWorm	ClickFix RMM-abuse ScreenConnect vercel	Lenny_3BO
2026-04-30 05:48	vmailnewwqmwe.vercel.app	XWorm	ClickFix RMM-abuse ScreenConnect vercel	Lenny_3BO
2026-04-30 05:48	https://vmailnewwqmwe.vercel.app/new.msi	XWorm	ClickFix RMM-abuse ScreenConnect vercel	Lenny_3BO
2026-04-27 09:56	91.92.120.68:1985	XWorm	XWorm	abuse_ch
2026-04-27 09:04	203.202.232.149:2222	XWorm	XWorm	abuse_ch
2026-04-25 23:38	87.106.168.15:7004	XWorm	XWorm	abuse_ch
2026-04-24 14:06	203.202.232.132:2828	XWorm	XWorm	abuse_ch
2026-04-23 09:45	43.157.17.38:2323	XWorm	XWorm	abuse_ch
2026-04-23 07:13	178.16.53.62:2772	XWorm	XWorm	abuse_ch
2026-04-21 22:08	45.157.233.139:25565	XWorm	XWorm	abuse_ch
2026-04-21 08:07	209.99.188.19:8777	XWorm	XWorm	abuse_ch
2026-04-20 23:06	46.151.182.197:7007	XWorm	XWorm	abuse_ch
2026-04-20 23:05	cloud.lurstanmailer.com	XWorm	XWorm	abuse_ch
2026-04-20 22:51	179.43.176.101:443	XWorm	XWorm	abuse_ch
2026-04-20 22:50	dpunk.duckdns.org	XWorm	XWorm	abuse_ch
2026-04-20 15:18	45.141.148.126:1122	XWorm	XWorm	abuse_ch
2026-04-17 14:33	31.56.209.54:8800	XWorm	XWorm	abuse_ch
2026-04-17 14:33	209.127.35.204:2662	XWorm	XWorm	abuse_ch
2026-04-17 14:32	172.245.209.162:1122	XWorm	XWorm	abuse_ch
2026-04-17 13:39	209.99.187.182:63244	XWorm	XWorm	abuse_ch
2026-04-17 12:05	cablestreamstore.com	XWorm	XWorm	abuse_ch
2026-04-17 11:26	2.27.160.11:8558	XWorm	XWorm	abuse_ch
2026-04-15 12:01	zebi.kozow.com	XWorm	c2 domain triage XWorm	DonPasci
2026-04-15 12:01	zebi.giize.com	XWorm	c2 domain triage XWorm	DonPasci
2026-04-15 12:01	noajadfylf.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-04-15 08:12	172.245.209.160:2478	XWorm	XWorm	abuse_ch
2026-04-15 06:00	168.222.97.15:8001	XWorm	c2 triage XWorm	DonPasci
2026-04-14 18:01	egym7md-64674.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-04-14 18:01	kokymrgy2000.hopto.org	XWorm	c2 domain triage XWorm	DonPasci
2026-04-14 18:01	hacker76413312-39033.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-04-14 18:01	sdlpsajdioasjd-60039.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-04-14 18:01	45.83.31.50:7658	XWorm	AS210558 c2 triage XWorm	DonPasci
2026-04-14 12:01	rdqnbcayzh.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-04-14 12:01	abo3li-50042.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-04-14 12:01	172.245.244.81:1412	XWorm	AS36352 c2 triage XWorm	DonPasci
2026-04-14 07:11	209.54.101.154:2477	XWorm	XWorm	abuse_ch
2026-04-14 06:01	subscript-breadth.with.playit.plus	XWorm	c2 domain triage XWorm	DonPasci
2026-04-14 06:01	gasgasgaaxas-58063.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-04-14 06:01	newhoperediff.ddnsgeek.com	XWorm	c2 domain triage XWorm	DonPasci
2026-04-14 06:01	newhopereddif.duckdns.org	XWorm	c2 domain triage XWorm	DonPasci
2026-04-14 06:01	hopenewrediff.duckdns.org	XWorm	c2 domain triage XWorm	DonPasci
2026-04-14 06:01	overgaainweb.ddnsgeek.com	XWorm	c2 domain triage XWorm	DonPasci
2026-04-14 06:01	overgainweb.duckdns.org	XWorm	c2 domain triage XWorm	DonPasci
2026-04-14 06:01	46.151.182.18:5500	XWorm	AS205759 c2 triage XWorm	DonPasci
2026-04-13 18:01	31.56.209.14:8200	XWorm	AS48678 c2 triage XWorm	DonPasci
2026-04-13 18:01	185.213.155.231:7004	XWorm	AS39351 c2 triage XWorm	DonPasci
2026-04-13 18:01	opportification.jp.net	XWorm	c2 domain triage XWorm	DonPasci
2026-04-13 18:01	rgwr.sa.com	XWorm	c2 domain triage XWorm	DonPasci
2026-04-13 13:26	31.56.209.56:5900	XWorm	XWorm	abuse_ch
2026-04-13 12:00	209.54.101.190:1122	XWorm	AS36352 c2 triage XWorm	DonPasci
2026-04-12 19:01	147.124.213.101:1985	XWorm	XWorm	abuse_ch
2026-04-12 06:00	deathtoall-43710.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-04-12 06:00	deathtoall-38456.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-04-12 06:00	kurkupa-robux.ru	XWorm	c2 domain triage XWorm	DonPasci
2026-04-12 06:00	shee5kmm.3utilities.com	XWorm	c2 domain triage XWorm	DonPasci
2026-04-12 02:01	SerdyuK2-50934.portmap.host	XWorm	XWorm	dyingbreeds_
2026-04-11 12:00	pionernastoyashi-51662.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-04-11 12:00	mh0-44853.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-04-11 10:01	156.238.239.253:7000	XWorm	XWorm	dyingbreeds_
2026-04-10 18:00	dacy-50399.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-04-10 18:00	migueldias111-45351.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-04-10 02:30	2.27.63.221:3250	XWorm	XWorm	dyingbreeds_
2026-04-10 02:29	AFl2TON707-34858.portmap.host	XWorm	XWorm	dyingbreeds_
2026-04-09 22:02	rthbtrhyyrdbrt-37741.portmap.host	XWorm	XWorm	dyingbreeds_
2026-04-09 18:00	geoor-22593.portmap.io	XWorm	c2 domain triage XWorm	DonPasci
2026-04-09 18:00	95.216.226.121:6000	XWorm	AS24940 c2 triage XWorm	DonPasci
2026-04-09 18:00	82.26.74.177:121	XWorm	AS213200 c2 triage XWorm	DonPasci
2026-04-09 10:01	216.250.253.161:6000	XWorm	XWorm	dyingbreeds_
2026-04-09 06:00	chat.ttseokitty.com	XWorm	c2 domain triage XWorm	DonPasci
2026-04-09 02:01	Adamdasdadad-47266.portmap.host	XWorm	XWorm	dyingbreeds_
2026-04-08 18:00	all.ddnsskey.com	XWorm	c2 domain triage XWorm	DonPasci
2026-04-08 18:00	45.153.34.27:443	XWorm	AS51396 c2 triage XWorm	DonPasci
2026-04-08 18:00	38.87.116.37:2137	XWorm	AS174 c2 triage XWorm	DonPasci
2026-04-08 06:00	31.56.209.80:1996	XWorm	AS48678 c2 triage XWorm	DonPasci
2026-04-07 22:01	heather-goblet.with.playit.plus	XWorm	XWorm	dyingbreeds_
2026-04-07 18:00	3ed5lh-ip-178-214-244-87.tunnelmole.net	XWorm	c2 domain triage XWorm	DonPasci
2026-04-07 18:00	jxp1ms-ip-178-214-244-87.tunnelmole.net	XWorm	c2 domain triage XWorm	DonPasci
2026-04-07 10:36	192.3.45.7:28288	XWorm	XWorm	abuse_ch
2026-04-07 10:02	abdullah788-37389.portmap.host	XWorm	XWorm	dyingbreeds_
2026-04-07 10:01	catdogfree300-43400.portmap.host	XWorm	XWorm	dyingbreeds_
2026-04-07 02:01	jce85opnb7.localto.net	XWorm	XWorm	dyingbreeds_
2026-04-07 02:01	1yyx5olkch.localto.net	XWorm	XWorm	dyingbreeds_
2026-04-06 18:02	193.161.193.99:7777	XWorm	XWorm	dyingbreeds_
2026-04-06 18:00	51.195.109.77:2137	XWorm	AS16276 c2 triage XWorm	DonPasci
2026-04-06 14:01	91.236.186.56:23306	XWorm	XWorm	dyingbreeds_
2026-04-06 12:00	173.205.83.196:3210	XWorm	AS207083 c2 triage XWorm	DonPasci
2026-04-06 02:01	bossgsaghdh-62973.portmap.host	XWorm	XWorm	dyingbreeds_
2026-04-06 02:01	193.233.19.233:5552	XWorm	XWorm	dyingbreeds_
2026-04-05 18:01	5.42.92.37:7777	XWorm	XWorm	dyingbreeds_
2026-04-05 18:00	179.118.199.252:7771	XWorm	AS26599 c2 triage XWorm	DonPasci
2026-04-05 15:26	8.148.5.193:12748	XWorm	XWorm	abuse_ch
2026-04-05 10:01	95.70.183.89:90	XWorm	XWorm	dyingbreeds_
2026-04-05 02:01	ghfjfgj57765r67ghght-56660.portmap.host	XWorm	XWorm	dyingbreeds_
2026-04-04 22:01	browser-hazard.gl.at.ply.gg	XWorm	XWorm	dyingbreeds_
2026-04-04 22:01	82.26.74.167:48291	XWorm	XWorm	dyingbreeds_
2026-04-04 14:01	frozen-nicotine.with.playit.plus	XWorm	XWorm	dyingbreeds_
2026-04-04 12:00	girl-tries.gl.at.ply.gg	XWorm	c2 domain triage XWorm	DonPasci
2026-04-04 12:00	93.88.203.34:26880	XWorm	AS213220 c2 triage XWorm	DonPasci
2026-04-04 12:00	104.200.72.111:8382	XWorm	AS199959 c2 triage XWorm	DonPasci
2026-04-04 12:00	marxrwonew9090.duckdns.org	XWorm	c2 domain triage XWorm	DonPasci
2026-04-04 10:01	151.242.63.2:7000	XWorm	XWorm	dyingbreeds_
2026-04-04 06:00	snickerbarwithhotsauceonit-51791.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-04-04 02:01	notes-ease.gl.at.ply.gg	XWorm	XWorm	dyingbreeds_
2026-04-03 22:01	vrtuall-42047.portmap.host	XWorm	XWorm	dyingbreeds_
2026-04-03 18:00	178.16.52.78:7777	XWorm	AS202412 c2 triage XWorm	DonPasci
2026-04-03 18:00	burb-34671.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-04-03 18:00	144.31.237.190:1498	XWorm	c2 triage XWorm	DonPasci
2026-04-03 14:01	febxworm39090.duckdns.org	XWorm	XWorm	dyingbreeds_
2026-04-03 14:01	contatopacn-56157.portmap.host	XWorm	XWorm	dyingbreeds_
2026-04-03 12:00	192.99.190.119:7000	XWorm	AS16276 c2 triage XWorm	DonPasci
2026-04-03 12:00	fpzmgxdblu.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-04-03 12:00	doz6060xwo.duckdns.org	XWorm	c2 domain triage XWorm	DonPasci
2026-04-03 12:00	widely-revenue.gl.at.ply.gg	XWorm	c2 domain triage XWorm	DonPasci
2026-04-03 12:00	cxoljbb9p0.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-04-03 10:01	alm72rb-37531.portmap.host	XWorm	XWorm	dyingbreeds_
2026-04-03 06:01	147.185.221.26:43608	XWorm	XWorm	dyingbreeds_
2026-04-03 06:00	104.193.255.40:7070	XWorm	AS14576 c2 triage XWorm	DonPasci
2026-04-03 06:00	2.56.165.69:911	XWorm	AS204914 c2 triage XWorm	DonPasci
2026-04-02 22:01	217.154.6.255:7004	XWorm	XWorm	dyingbreeds_
2026-04-02 22:01	she55.ddnsking.com	XWorm	XWorm	dyingbreeds_
2026-04-02 18:01	cxtsee09ky.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-04-02 14:02	146.158.123.140:2083	XWorm	XWorm	dyingbreeds_
2026-04-02 12:01	lol42647-45750.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-04-02 12:01	skynet2.ydns.eu	XWorm	c2 domain triage XWorm	DonPasci
2026-04-02 10:02	names-again.at.playit.gg	XWorm	XWorm	dyingbreeds_
2026-04-02 02:01	kvhce4pcgf.localto.net	XWorm	XWorm	dyingbreeds_
2026-04-02 01:53	147.185.221.17:11977	XWorm	XWorm	dyingbreeds_
2026-04-01 18:00	114.207.112.13:2007	XWorm	AS9318 c2 triage XWorm	DonPasci
2026-04-01 17:30	cdnst.duckdns.org	XWorm	XWorm	abuse_ch
2026-04-01 06:00	138.201.106.62:7004	XWorm	AS24940 c2 triage XWorm	DonPasci
2026-04-01 02:01	AnderDingus.aamothership.com	XWorm	XWorm	dyingbreeds_
2026-03-31 22:01	voidbebr-48949.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-31 18:14	vivogrouplink.duckdns.org	XWorm	ClickFix duckdns SERPENTINE Violet	kirkderp
2026-03-31 18:00	81.159.116.2:7000	XWorm	AS2856 c2 triage XWorm	DonPasci
2026-03-31 18:00	qqxylozz-56474.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-31 14:01	194.156.79.140:9019	XWorm	XWorm	dyingbreeds_
2026-03-31 10:01	194.116.236.247:1222	XWorm	XWorm	dyingbreeds_
2026-03-31 06:50	machineryde.duckdns.org	XWorm	XWorm	abuse_ch
2026-03-31 06:00	9vun520l.aamothership.com	XWorm	c2 domain triage XWorm	DonPasci
2026-03-31 06:00	jvuqdwzk.aamothership.com	XWorm	c2 domain triage XWorm	DonPasci
2026-03-31 02:01	q4k7uphvys.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-31 02:01	kdxho645fm.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-30 22:01	lol42647-37621.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-30 18:01	103.83.87.178:2001	XWorm	XWorm	dyingbreeds_
2026-03-30 18:00	0kkp6fidn.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-03-30 10:01	151.245.112.70:7007	XWorm	XWorm	dyingbreeds_
2026-03-30 02:01	acannaaaaa-32635.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-30 02:01	fnhztgxdqg.a.pinggy.link	XWorm	XWorm	dyingbreeds_
2026-03-29 22:01	217.43.209.189:6666	XWorm	XWorm	dyingbreeds_
2026-03-29 22:01	acannaaaaa-46963.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-29 22:01	SigmaBoy1234567-46132.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-29 18:00	xixixisad-37873.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-29 16:30	zrsexetk0.localto.net	XWorm	XWorm	abuse_ch
2026-03-29 16:30	evpsbokvqh.localto.net	XWorm	XWorm	abuse_ch
2026-03-29 14:01	fzotnmreqj.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-29 14:01	185.73.126.186:8808	XWorm	XWorm	dyingbreeds_
2026-03-29 12:00	87.120.117.209:7000	XWorm	c2 triage XWorm	DonPasci
2026-03-29 12:00	193.233.19.97:5485	XWorm	AS63023 c2 triage XWorm	DonPasci
2026-03-29 06:03	lixcerxo0x-61297.portmap.host	XWorm	c2 XWorm	juroots
2026-03-29 06:02	https://pastebin.com/raw/BUKERxVj	XWorm	c2 XWorm	juroots
2026-03-29 06:00	barodh2ckerr-36722.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-28 23:01	fuckniggers69420911-30770.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-28 23:01	RATTEDNIGGERS-60092.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-28 23:01	45.131.46.14:22122	XWorm	XWorm	dyingbreeds_
2026-03-28 11:01	103.254.110.56:6099	XWorm	XWorm	dyingbreeds_
2026-03-28 11:01	ragefgs-36179.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-28 11:01	23.tcp.cpolar.top	XWorm	XWorm	dyingbreeds_
2026-03-28 03:01	161.35.110.36:41978	XWorm	XWorm	dyingbreeds_
2026-03-27 23:01	76.13.152.176:9000	XWorm	XWorm	dyingbreeds_
2026-03-27 19:02	144.31.48.132:34556	XWorm	XWorm	dyingbreeds_
2026-03-27 19:01	144.31.48.132:44556	XWorm	XWorm	dyingbreeds_
2026-03-27 18:00	163.5.210.247:25565	XWorm	AS399486 c2 triage XWorm	DonPasci
2026-03-27 18:00	niggaboo32-34796.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-27 15:01	fahadx700-35249.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-27 12:00	airlight-46647.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-27 06:00	45.88.9.140:6000	XWorm	AS204914 c2 triage XWorm	DonPasci
2026-03-26 21:13	91.92.240.127:6000	XWorm	XWorm	abuse_ch
2026-03-26 19:02	83.217.209.98:1111	XWorm	XWorm	dyingbreeds_
2026-03-26 15:02	212.162.148.16:4040	XWorm	XWorm	dyingbreeds_
2026-03-26 11:01	tcp4.tunnel4.com	XWorm	XWorm	dyingbreeds_
2026-03-26 09:11	45.83.207.90:7000	XWorm	XWorm	abuse_ch
2026-03-26 09:11	45.141.26.201:7004	XWorm	XWorm	abuse_ch
2026-03-26 08:16	194.110.172.159:1995	XWorm	XWorm	abuse_ch
2026-03-26 07:01	18.tcp.cpolar.top	XWorm	XWorm	dyingbreeds_
2026-03-25 23:01	9fzkfyhbtr.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-25 23:01	12.tcp.cpolar.top	XWorm	XWorm	dyingbreeds_
2026-03-25 18:00	goober420-36534.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-25 16:43	jacethegoat178-48145.portmap.host	XWorm	c2 XWorm	juroots
2026-03-25 16:43	Strike-35725.portmap.host	XWorm	c2 XWorm	juroots
2026-03-25 16:43	mkkf8237-31070.portmap.host	XWorm	c2 XWorm	juroots
2026-03-25 16:42	https://pastebin.com/raw/frTxisXL	XWorm	c2 XWorm	juroots
2026-03-25 12:51	192.154.241.18:3333	XWorm	XWorm	abuse_ch
2026-03-25 11:01	94.154.32.16:6000	XWorm	XWorm	dyingbreeds_
2026-03-25 08:45	madeinchina.minhacasa.tv	XWorm	XWorm	abuse_ch
2026-03-25 06:00	adfg.exfrp.sbs	XWorm	c2 domain triage XWorm	DonPasci
2026-03-25 06:00	41.104.161.128:1605	XWorm	AS36947 c2 triage XWorm	DonPasci
2026-03-25 03:02	151.243.109.36:10134	XWorm	XWorm	dyingbreeds_
2026-03-25 03:02	ks48f3vnga.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-24 23:01	shahkkkk-45956.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-24 23:01	ashashh-64209.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-24 23:01	optic-handsets.with.playit.plus	XWorm	XWorm	dyingbreeds_
2026-03-24 19:01	172.111.136.159:6000	XWorm	XWorm	dyingbreeds_
2026-03-24 19:01	8.tcp.vip.cpolar.cn	XWorm	XWorm	dyingbreeds_
2026-03-24 15:02	sadasdada511-31947.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-24 15:02	asdasdasda2-41912.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-24 15:02	asjdajsd22-41755.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-24 06:00	importgenius.duckdns.org	XWorm	c2 domain triage XWorm	DonPasci
2026-03-24 06:00	r54-45345.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-24 03:41	151.243.109.36:6000	XWorm	XWorm	abuse_ch
2026-03-24 03:01	87.120.120.15:31952	XWorm	XWorm	dyingbreeds_
2026-03-23 23:01	sigmatopki-60241.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-23 23:01	lnescgkwgt.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-23 23:01	lvwjo2n0w3.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-23 23:01	172.245.195.216:4005	XWorm	XWorm	dyingbreeds_
2026-03-23 15:01	PlushEditz-49070.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-23 12:00	143.14.44.51:1337	XWorm	AS213200 c2 triage XWorm	DonPasci
2026-03-23 12:00	45.88.9.160:4444	XWorm	AS204914 c2 triage XWorm	DonPasci
2026-03-23 11:01	192.154.241.18:1960	XWorm	XWorm	dyingbreeds_
2026-03-23 11:01	ayodhh-30917.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-23 03:01	91.238.123.18:7644	XWorm	XWorm	dyingbreeds_
2026-03-23 03:01	jbbjbjkb-61631.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-22 23:01	zqw16kp0nv.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-22 23:01	d5nnast9u1.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-22 19:01	24.tcp.cpolar.top	XWorm	XWorm	dyingbreeds_
2026-03-22 18:02	45.74.34.167:6000	XWorm	XWorm	Anonymous
2026-03-22 18:00	underfed-task.with.playit.plus	XWorm	c2 domain triage XWorm	DonPasci
2026-03-22 18:00	zbzd-56945.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-22 18:00	miningworker1-33706.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-22 15:01	144.31.48.132:3356	XWorm	XWorm	dyingbreeds_
2026-03-22 06:00	yodhhasdasf-39007.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-22 03:01	Iscape-31656.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-21 15:01	12.tcp.vip.cpolar.cn	XWorm	XWorm	dyingbreeds_
2026-03-21 15:01	147.185.221.27:20	XWorm	XWorm	dyingbreeds_
2026-03-21 15:01	147.185.221.27:13700	XWorm	XWorm	dyingbreeds_
2026-03-21 15:01	asdafsdafdfa-63185.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-21 12:00	ayodhaltbohy-59438.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-21 11:01	Dexvsy-41268.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-21 11:01	193.161.193.99:1024	XWorm	XWorm	dyingbreeds_
2026-03-21 11:01	doulovemedoudou.duckdns.org	XWorm	XWorm	dyingbreeds_
2026-03-20 23:01	france-unsafe.gl.at.ply.gg	XWorm	XWorm	dyingbreeds_
2026-03-20 15:01	sinpidorasa228nixware-44719.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-20 13:03	172.93.164.102:6000	XWorm	AS18450 c2 WEBNX XWorm	DonPasci
2026-03-20 13:03	167.114.48.166:7007	XWorm	AS16276 c2 OVH XWorm	DonPasci
2026-03-20 13:03	146.70.143.166:1012	XWorm	AS9009 c2 M247 XWorm	DonPasci
2026-03-20 13:03	15.229.150.214:7000	XWorm	AMAZON-02 AS16509 c2 XWorm	DonPasci
2026-03-20 13:03	38.247.145.235:7007	XWorm	AS32097 c2 WII XWorm	DonPasci
2026-03-20 06:00	envi11marz.duckdns.org	XWorm	c2 domain triage XWorm	DonPasci
2026-03-19 23:02	94.154.32.93:6000	XWorm	XWorm	dyingbreeds_
2026-03-19 18:01	192.3.136.197:6000	XWorm	AS36352 c2 triage XWorm	DonPasci
2026-03-19 14:10	69.61.36.229:2080	XWorm	XWorm	abuse_ch
2026-03-19 11:01	kellydarosa.ddns.com.br	XWorm	XWorm	dyingbreeds_
2026-03-19 06:00	34.39.197.251:6000	XWorm	AS396982 c2 triage XWorm	DonPasci
2026-03-19 03:02	ayidhh-48261.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-19 03:01	aliowiasidaids-62178.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-19 03:01	sex4fun.duckdns.org	XWorm	XWorm	dyingbreeds_
2026-03-18 23:01	41.45.156.241:5505	XWorm	XWorm	dyingbreeds_
2026-03-18 18:00	154.219.104.140:7007	XWorm	AS401701 c2 triage XWorm	DonPasci
2026-03-18 15:01	158.94.210.181:8900	XWorm	XWorm	dyingbreeds_
2026-03-18 13:45	217.217.251.213:7000	XWorm	XWorm	abuse_ch
2026-03-18 11:01	fxtun.dev	XWorm	XWorm	dyingbreeds_
2026-03-18 09:40	globalsourcesinc.duckdns.org	XWorm	XWorm	abuse_ch
2026-03-18 06:00	sh67h.fun	XWorm	c2 domain triage XWorm	DonPasci
2026-03-17 23:01	asd.exfrp.sbs	XWorm	XWorm	dyingbreeds_
2026-03-17 21:06	156.233.71.230:4040	XWorm	XWorm	abuse_ch
2026-03-17 21:05	156.233.71.222:4040	XWorm	XWorm	abuse_ch
2026-03-17 20:55	slashxx.duckdns.org	XWorm	XWorm	abuse_ch
2026-03-17 20:50	20.175.100.73:7004	XWorm	XWorm	abuse_ch
2026-03-17 16:15	envio11.ddnsguru.com	XWorm	XWorm	abuse_ch
2026-03-17 11:01	Soofunny-64517.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-17 06:00	njmiscoming.ddns.net	XWorm	c2 domain triage XWorm	DonPasci
2026-03-17 06:00	1.tcp.vip.cpolar.cn	XWorm	c2 domain triage XWorm	DonPasci
2026-03-17 03:01	104.128.191.108:2398	XWorm	XWorm	dyingbreeds_
2026-03-16 18:00	185.29.11.70:8018	XWorm	AS203557 c2 triage XWorm	DonPasci
2026-03-16 18:00	su9yfgcpt1.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-03-16 15:01	198.23.175.59:2388	XWorm	XWorm	dyingbreeds_
2026-03-16 11:01	69.61.84.201:2389	XWorm	XWorm	dyingbreeds_
2026-03-16 07:01	90.100.52.173:1337	XWorm	XWorm	dyingbreeds_
2026-03-16 06:00	xdm434-42444.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-16 03:01	connect.xdmserverconnect.website	XWorm	XWorm	dyingbreeds_
2026-03-15 23:01	grannyboosted-33522.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-15 23:01	ycqsf-93-171-240-170.a.free.pinggy.link	XWorm	XWorm	dyingbreeds_
2026-03-15 23:01	212.227.93.216:1000	XWorm	XWorm	dyingbreeds_
2026-03-15 19:01	144.31.12.196:57942	XWorm	XWorm	dyingbreeds_
2026-03-15 15:01	192.3.176.253:7004	XWorm	XWorm	dyingbreeds_
2026-03-15 15:01	ugvsss-39887.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-15 12:00	176.65.139.46:1337	XWorm	c2 triage XWorm	DonPasci
2026-03-15 12:00	ulia111-35403.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-15 11:01	catoooomw.ddnsfree.com	XWorm	XWorm	dyingbreeds_
2026-03-15 11:01	45.157.233.46:25565	XWorm	XWorm	dyingbreeds_
2026-03-15 06:48	103.83.87.178:1990	XWorm	c2 XWorm	Lenny_3BO
2026-03-15 06:48	http://158.94.211.208/OBOXW2026.txt	XWorm	OBOXW2026 Omegatech staging XWorm	Lenny_3BO
2026-03-15 06:48	tur.applecloud.com.co	XWorm	Apple_impersonation phishing turkey XWorm	Lenny_3BO
2026-03-15 06:48	mail.clearvwtp.shop	XWorm	email_infrastructure phishing XWorm	Lenny_3BO
2026-03-15 06:48	mail.wetradetra.cfd	XWorm	email_infrastructure phishing XWorm	Lenny_3BO
2026-03-15 06:48	mail.wetrasogo.shop	XWorm	email_infrastructure phishing XWorm	Lenny_3BO
2026-03-14 23:01	94.156.179.152:62064	XWorm	XWorm	dyingbreeds_
2026-03-14 19:30	sacromante.availinfra.cam	XWorm	XWorm	abuse_ch
2026-03-14 19:30	dextecrop.availinfra.cam	XWorm	XWorm	abuse_ch
2026-03-14 19:30	belazay.availinfra.cam	XWorm	XWorm	abuse_ch
2026-03-14 19:15	192.159.99.224:7007	XWorm	XWorm	abuse_ch
2026-03-14 18:00	25.tcp.cpolar.top	XWorm	c2 domain triage XWorm	DonPasci
2026-03-14 14:59	0b36732cc40d5d15a80e7d3f8785ae01	XWorm		Grim
2026-03-14 14:59	8c46e3d0bd891b4be4621ed734974b9c3965b3bc	XWorm		Grim
2026-03-14 14:59	9279fcb85f90aa6ae754e8749f82625ca0d5f51138759310690d7214eae77dd6	XWorm		Grim
2026-03-14 12:00	91.202.5.158:2129	XWorm	AS43641 c2 triage XWorm	DonPasci
2026-03-13 23:01	157.245.45.38:7771	XWorm	XWorm	dyingbreeds_
2026-03-13 23:01	fkeasfodsfkefoapdsofkp-38135.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-13 19:01	effect-decide.gl.at.ply.gg	XWorm	XWorm	dyingbreeds_
2026-03-13 12:00	subscribe-marina.gl.at.ply.gg	XWorm	c2 domain triage XWorm	DonPasci
2026-03-13 11:01	belawer.duckdns.org	XWorm	XWorm	dyingbreeds_
2026-03-13 06:13	656991f4dabe0e5d989be730dac86a2cf294b6b538b08d7db7a0a72f0c6c484b	XWorm	Loader steganography XWorm	Lenny_3BO
2026-03-13 06:13	b73ce45f837e67b2f81565c63c8601ec0b89360101331f89fc6821e2fb60a7f6	XWorm	RAT XWorm xworm-v5.6	Lenny_3BO
2026-03-13 06:13	ecdaa31802b6a8ef94fbc3f16da5068c6f126876af0b9c964a915a556194a1f9	XWorm	Dropper JScript obfuscation XWorm	Lenny_3BO
2026-03-13 06:13	34e90568af4dcd40f4f04174ec326e2a	XWorm	Loader process-hollowing trojanized-library XWorm	Lenny_3BO
2026-03-13 06:13	158.94.211.208:443	XWorm	staging steganography XWorm	Lenny_3BO
2026-03-13 03:01	mouftakhiramin-53951.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-12 18:00	yukilotaev-44610.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-12 18:00	194.116.236.27:2026	XWorm	AS44382 c2 triage WHITELABEL XWorm	DonPasci
2026-03-12 18:00	yukilotaev-51407.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-12 18:00	94.156.179.152:61262	XWorm	AS215439 c2 triage XWorm	DonPasci
2026-03-12 12:00	150.241.70.126:8848	XWorm	AS401152 c2 triage XWorm	DonPasci
2026-03-11 23:01	datahawk.duckdns.org	XWorm	XWorm	dyingbreeds_
2026-03-11 23:01	datah.ddns.net	XWorm	XWorm	dyingbreeds_
2026-03-11 23:01	62.45.223.212:7000	XWorm	XWorm	dyingbreeds_
2026-03-11 19:01	sawkech-42998.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-11 18:00	trungtammmo.vn	XWorm	c2 domain triage XWorm	DonPasci
2026-03-11 08:30	192.3.176.252:8780	XWorm	XWorm	abuse_ch
2026-03-11 08:10	158.94.210.210:5590	XWorm	XWorm	abuse_ch
2026-03-11 07:01	216.250.252.227:443	XWorm	XWorm	dyingbreeds_
2026-03-11 06:00	mu19rs2vmk.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-03-11 06:00	soe8j24fm3.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-03-10 23:01	162.246.185.228:6000	XWorm	XWorm	dyingbreeds_
2026-03-10 15:01	85.137.253.58:9090	XWorm	XWorm	abuse_ch
2026-03-10 06:00	driftit-34835.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-10 03:01	windowsupdateservice.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-10 03:01	6.tcp.vip.cpolar.cn	XWorm	XWorm	dyingbreeds_
2026-03-09 20:02	85.137.253.58:9000	XWorm	AS215428 c2 censys open-dir SHINOMIYA XWorm	DonPasci
2026-03-09 18:00	tax-fc.gl.at.ply.gg	XWorm	c2 domain triage XWorm	DonPasci
2026-03-09 11:01	Dreem-45850.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-09 11:01	shown-mario.gl.at.ply.gg	XWorm	XWorm	dyingbreeds_
2026-03-09 11:01	skin-greece.gl.at.ply.gg	XWorm	XWorm	dyingbreeds_
2026-03-09 04:01	151.240.151.123:80	XWorm	AS207043 c2 censys DEDIK-IO open-dir XWorm	DonPasci
2026-03-08 23:01	aurmouse-30157.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-08 23:01	45.87.63.80:7000	XWorm	XWorm	dyingbreeds_
2026-03-08 19:01	193.25.251.10:7004	XWorm	XWorm	dyingbreeds_
2026-03-08 19:01	sxxpv-193-25-251-10.a.free.pinggy.link	XWorm	XWorm	dyingbreeds_
2026-03-08 18:00	matidiax1-58523.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-08 15:02	uz8vz5cpm6.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-08 12:00	192.227.135.212:2662	XWorm	AS36352 c2 triage XWorm	DonPasci
2026-03-08 11:02	rqtankvea.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-08 11:01	cou369ppsh.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-08 06:00	19.tcp.cpolar.top	XWorm	c2 domain triage XWorm	DonPasci
2026-03-08 04:01	151.240.151.123:443	XWorm	AS207043 c2 censys DEDIK-IO open-dir XWorm	DonPasci
2026-03-07 15:01	gravefrnothere-40108.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-07 11:01	85.209.231.90:7007	XWorm	XWorm	dyingbreeds_
2026-03-07 11:01	0qbwh6hprn.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-07 03:01	wgDV1FDEQGBTBTRBh3-35046.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-06 23:02	laohen29.myvnc.com	XWorm	XWorm	dyingbreeds_
2026-03-06 21:40	212.28.188.80:9090	XWorm	XWorm	abuse_ch
2026-03-06 19:01	pidoras6742-56928.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-06 18:00	arklen-64027.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-06 18:00	jaheya5849-64670.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-06 15:40	107.172.13.251:2888	XWorm	XWorm	abuse_ch
2026-03-06 15:02	fsocietyserver-63331.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-06 15:02	fusldhtp5.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-06 12:00	shadowlogikov-33583.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-06 12:00	fsocietyserver-38405.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-06 11:02	hyblazemc.myddns.me	XWorm	XWorm	dyingbreeds_
2026-03-06 11:02	209.25.141.23:1094	XWorm	XWorm	dyingbreeds_
2026-03-06 11:02	193.161.193.99:5520	XWorm	XWorm	dyingbreeds_
2026-03-06 11:02	Doghan-52372.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-06 11:02	193.161.193.99:52372	XWorm	XWorm	dyingbreeds_
2026-03-06 07:01	rajkumarred.ddnsgeek.com	XWorm	XWorm	dyingbreeds_
2026-03-06 07:01	212.11.64.215:4400	XWorm	XWorm	dyingbreeds_
2026-03-06 07:01	rajkumarred.duckdns.org	XWorm	XWorm	dyingbreeds_
2026-03-06 03:01	lamon.ddns.net	XWorm	XWorm	dyingbreeds_
2026-03-05 23:02	getting-acquisitions.gl.at.ply.gg	XWorm	XWorm	dyingbreeds_
2026-03-05 19:01	Dldo3-53471.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-05 11:02	107.172.13.248:8787	XWorm	XWorm	dyingbreeds_
2026-03-05 08:05	94.154.32.40:8383	XWorm	XWorm	abuse_ch
2026-03-05 03:01	nvd9pk2u4h.localto.net	XWorm	XWorm	dyingbreeds_
2026-03-05 03:01	niggerbigertrigger-40627.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-04 23:01	lynx1test111-35010.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-04 18:00	193.221.201.76:1111	XWorm	AS215826 c2 triage XWorm	DonPasci
2026-03-04 15:02	valid-witnesses.gl.at.ply.gg	XWorm	XWorm	dyingbreeds_
2026-03-04 12:00	unitedclassifiedsourcinginc.duckdns.org	XWorm	c2 domain triage XWorm	DonPasci
2026-03-04 12:00	84.181.175.173:4444	XWorm	AS3320 c2 triage XWorm	DonPasci
2026-03-04 06:00	web.vx.ink	XWorm	c2 domain triage XWorm	DonPasci
2026-03-04 06:00	web.yg.ink	XWorm	c2 domain triage XWorm	DonPasci
2026-03-04 06:00	service.hsjyxx.com	XWorm	c2 domain triage XWorm	DonPasci
2026-03-04 06:00	system.yg.ink	XWorm	c2 domain triage XWorm	DonPasci
2026-03-04 06:00	system.vx.ink	XWorm	c2 domain triage XWorm	DonPasci
2026-03-04 03:01	95.90.186.240:4444	XWorm	XWorm	dyingbreeds_
2026-03-04 03:01	9.tcp.cpolar.top	XWorm	XWorm	dyingbreeds_
2026-03-03 18:00	194.87.54.114:6666	XWorm	AS57043 c2 triage XWorm	DonPasci
2026-03-03 15:02	1.230.16.57:5050	XWorm	XWorm	dyingbreeds_
2026-03-03 14:26	ed22eea89ee3207e18847b0110e9c124	XWorm		Grim
2026-03-03 14:26	a874812d5f6518587a09b679236e71a2555702fb99458400613626651dc83f3b	XWorm		Grim
2026-03-03 14:26	351774e894c603bd12e23791d626cb11b522d215	XWorm		Grim
2026-03-03 09:14	app-google3.duckdns.org	XWorm	c2 XWorm	juroots
2026-03-03 08:38	45.88.9.19:5555	XWorm	3March2026 iocbottest	Gi7w0rm
2026-03-03 06:00	ynvgx9hh15.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-03-02 15:02	unease-liens.with.playit.plus	XWorm	XWorm	dyingbreeds_
2026-03-02 15:02	94.154.32.18:8383	XWorm	XWorm	dyingbreeds_
2026-03-02 11:50	dianganadores.duckdns.org	XWorm	XWorm	abuse_ch
2026-03-02 11:02	82.158.88.101:7000	XWorm	XWorm	dyingbreeds_
2026-03-02 08:17	176.65.132.10:6000	XWorm	c2 XWorm	juroots
2026-03-02 08:16	https://pastebin.com/raw/Rq7yMK0W	XWorm	c2 XWorm	juroots
2026-03-01 23:02	ceee.zapto.org	XWorm	XWorm	dyingbreeds_
2026-03-01 23:02	integral2048-47645.portmap.host	XWorm	XWorm	dyingbreeds_
2026-03-01 23:02	february-authors.gl.at.ply.gg	XWorm	XWorm	dyingbreeds_
2026-03-01 11:10	hlgzssmbz.localto.net	XWorm	XWorm	abuse_ch
2026-03-01 11:02	151.241.154.244:80	XWorm	XWorm	dyingbreeds_
2026-03-01 08:36	efebudaktr.duckdns.org	XWorm	c2 XWorm	juroots
2026-03-01 08:01	84.201.14.2:80	XWorm	AS214036 c2 censys open-dir ULTAHOST-AS XWorm	DonPasci
2026-03-01 06:00	qdasvwggwt24t2wdw-57582.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-01 06:00	fkeasfodsfkefoapdsofkp-64534.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-03-01 04:01	84.201.14.2:443	XWorm	AS214036 c2 censys open-dir ULTAHOST-AS XWorm	DonPasci
2026-03-01 03:02	fkeasfodsfkefoapdsofkp-45692.portmap.host	XWorm	XWorm	dyingbreeds_
2026-02-28 12:00	fdasfsd-51675.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-02-28 06:01	a.pinggy.io	XWorm	c2 domain triage XWorm	DonPasci
2026-02-28 06:01	209.25.140.25:27034	XWorm	AS400519 c2 triage XWorm	DonPasci
2026-02-28 06:01	unenvied-saskatoon.with.playit.plus	XWorm	c2 domain triage XWorm	DonPasci
2026-02-28 06:01	5mux6rtj8.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-02-28 06:00	7v4hd5u6r.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-02-27 17:20	198.23.175.51:4078	XWorm	XWorm	abuse_ch
2026-02-27 12:00	31.57.97.69:34245	XWorm	AS213200 c2 triage XWorm	DonPasci
2026-02-27 12:00	158.94.211.151:1605	XWorm	AS202412 c2 triage XWorm	DonPasci
2026-02-27 10:28	193.161.193.99:64203	XWorm	c2 XWorm	juroots
2026-02-27 10:27	fkeasfodsfkefoapdsofkp-64203.portmap.host	XWorm	c2 XWorm	juroots
2026-02-27 10:27	milkai2002-61901.portmap.host	XWorm	c2 XWorm	juroots
2026-02-27 10:27	https://pastebin.com/raw/guvRQaLJ	XWorm	c2 XWorm	juroots
2026-02-27 06:00	indahoodd.ddns.net	XWorm	c2 domain triage XWorm	DonPasci
2026-02-27 06:00	193.222.99.44:6000	XWorm	AS215439 c2 triage XWorm	DonPasci
2026-02-27 06:00	185.249.197.163:666	XWorm	AS206996 c2 triage XWorm	DonPasci
2026-02-26 18:00	classes-cap.gl.joinmc.link	XWorm	c2 domain triage XWorm	DonPasci
2026-02-26 15:02	185.216.71.155:54321	XWorm	XWorm	dyingbreeds_
2026-02-26 11:02	216.250.252.227:80	XWorm	XWorm	dyingbreeds_
2026-02-25 23:02	gardian0mar1on-64077.portmap.host	XWorm	XWorm	dyingbreeds_
2026-02-25 11:02	xoeyxsife-53554.portmap.host	XWorm	XWorm	dyingbreeds_
2026-02-25 11:02	45.144.212.94:8823	XWorm	XWorm	dyingbreeds_
2026-02-25 11:02	nz5umskcf.localto.net	XWorm	XWorm	dyingbreeds_
2026-02-25 11:02	84.38.129.7:8018	XWorm	XWorm	dyingbreeds_
2026-02-25 06:01	womanless-assurance.gl.at.ply.gg	XWorm	c2 domain triage XWorm	DonPasci
2026-02-25 06:01	envi2026fe.duckdns.org	XWorm	c2 domain triage XWorm	DonPasci
2026-02-24 18:01	185.98.168.28:32865	XWorm	AS212238 c2 triage XWorm	DonPasci
2026-02-24 18:01	xword5.duckdns.org	XWorm	c2 domain triage XWorm	DonPasci
2026-02-23 23:02	41.105.137.137:1605	XWorm	XWorm	dyingbreeds_
2026-02-23 15:02	max-acknowledge.gl.at.ply.gg	XWorm	XWorm	dyingbreeds_
2026-02-23 12:01	151.241.154.193:7007	XWorm	AS399486 c2 triage XWorm	DonPasci
2026-02-23 11:55	198.23.175.46:4078	XWorm	XWorm	abuse_ch
2026-02-23 06:01	trymeonce-63682.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-02-23 03:01	fkeasfodsfkefoapdsofkp-33083.portmap.host	XWorm	XWorm	dyingbreeds_
2026-02-22 18:01	idk123456789012-51385.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-02-22 06:02	egtwax65c.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-02-22 03:02	xoeyxsife-33031.portmap.host	XWorm	XWorm	dyingbreeds_
2026-02-22 03:01	193.161.193.99:40701	XWorm	XWorm	dyingbreeds_
2026-02-21 18:01	cyaiylzj6.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-02-21 18:01	vanillacakeyoutube-52569.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-02-21 17:33	0085165a47472cefc4e3d4385f656382	XWorm		Grim
2026-02-21 17:33	9076e30a647a961f7578ff2cda20fbb8f119bd28	XWorm		Grim
2026-02-21 17:33	519a114231809dca8849f6f9e3653ffcbdd8244845023668a3e3a90be8aa6662	XWorm		Grim
2026-02-21 13:15	118.107.16.253:7004	XWorm	XWorm	abuse_ch
2026-02-21 06:01	porfs.servehalflife.com	XWorm	c2 domain triage XWorm	DonPasci
2026-02-21 03:02	fahadx700-53150.portmap.host	XWorm	XWorm	dyingbreeds_
2026-02-21 03:02	jcy98d7wk.localto.net	XWorm	XWorm	dyingbreeds_
2026-02-20 23:02	8i5lypxm6.localto.net	XWorm	XWorm	dyingbreeds_
2026-02-20 15:05	1t7qbrm9t.localto.net	XWorm	XWorm	dyingbreeds_
2026-02-20 08:50	xworm2026.ddns.net	XWorm	XWorm	abuse_ch
2026-02-20 07:46	23.94.252.101:7000	XWorm	ARCH-EXEC AUTO-STARTUP discovery NETREACTOR RAT trojan XWorm	Neiki
2026-02-20 07:45	193.124.250.110:8080	XWorm	defense_evasion RAT trojan XWorm	Neiki
2026-02-20 07:43	193.161.193.99:64601	XWorm	RAT trojan XWorm	Neiki
2026-02-19 18:01	103.83.86.162:1985	XWorm	AS44382 c2 triage XWorm	DonPasci
2026-02-19 15:03	193.161.193.99:63603	XWorm	XWorm	dyingbreeds_
2026-02-19 15:03	37.4.250.173:63603	XWorm	XWorm	dyingbreeds_
2026-02-19 14:39	45.61.149.192:6000	XWorm	AS14956 c2 ROUTERHOSTING XWorm	DonPasci
2026-02-19 14:39	45.137.98.189:6666	XWorm	AS49581 c2 FERDINANDZINK XWorm	DonPasci
2026-02-19 14:39	20.234.151.26:6000	XWorm	AS8075 c2 MICROSOFT-CORP-MSN-AS-BLOCK XWorm	DonPasci
2026-02-19 14:39	82.26.104.128:6000	XWorm	AS63989 c2 DE-CORP XWorm	DonPasci
2026-02-19 14:39	45.141.26.201:6000	XWorm	AS142299 c2 CLOUDFORESTCOLTD-AS-AP XWorm	DonPasci
2026-02-19 14:39	91.208.197.30:1605	XWorm	ALEXHOST AS200019 c2 XWorm	DonPasci
2026-02-19 14:39	5.230.159.62:7000	XWorm	AS12586 ASGHOSTNET c2 XWorm	DonPasci
2026-02-19 14:31	141.11.213.91:8282	XWorm	AS212477 c2 ROYALE-AS XWorm	DonPasci
2026-02-19 14:31	103.163.219.252:7000	XWorm	AS140787 c2 LAMA-AS-VN XWorm	DonPasci
2026-02-19 14:31	147.45.45.110:7777	XWorm	AS215826 c2 PARTNER-HOSTING-LTD XWorm	DonPasci
2026-02-19 14:31	193.233.113.137:7000	XWorm	AS215826 c2 PARTNER-HOSTING-LTD XWorm	DonPasci
2026-02-19 14:30	202.95.18.16:7000	XWorm	AS152194 c2 CTGSERVERLIMITED-AS-AP XWorm	DonPasci
2026-02-19 14:30	134.122.154.171:7000	XWorm	AS152194 c2 CTGSERVERLIMITED-AS-AP XWorm	DonPasci
2026-02-19 14:30	134.122.152.135:7000	XWorm	AS152194 c2 CTGSERVERLIMITED-AS-AP XWorm	DonPasci
2026-02-19 14:30	202.95.17.184:7000	XWorm	AS152194 c2 CTGSERVERLIMITED-AS-AP XWorm	DonPasci
2026-02-19 14:30	134.122.140.89:7000	XWorm	AS152194 c2 CTGSERVERLIMITED-AS-AP XWorm	DonPasci
2026-02-19 13:16	213.152.161.162:5103	XWorm	AMSI-BYPASS AUTO-REG persistence RAT trojan XWorm	Neiki
2026-02-19 11:02	dawdawf-45472.portmap.host	XWorm	XWorm	dyingbreeds_
2026-02-19 09:41	209.54.103.184:1909	XWorm	AUTO-STARTUP execution persistence SUSP-POWERSHELL XWorm	Neiki
2026-02-19 09:35	xxblessingswealths.duckdns.org	XWorm	XWorm	abuse_ch
2026-02-19 06:27	8.162.5.187:14701	XWorm	RAT trojan XWorm	Neiki
2026-02-19 06:27	198.244.201.139:7181	XWorm	AUTO-REG AUTO-STARTUP evasion execution persistence RAT trojan XWorm	Neiki
2026-02-19 06:27	172.105.85.143:20809	XWorm	defense_evasion execution RAT trojan XWorm	Neiki
2026-02-19 06:27	193.161.193.99:25340	XWorm	AUTO-REG AUTO-STARTUP evasion persistence RAT trojan XWorm	Neiki
2026-02-19 06:27	193.161.193.99:51173	XWorm	AUTO-REG AUTO-STARTUP execution persistence RAT trojan XWorm	Neiki
2026-02-19 06:26	193.161.193.99:61682	XWorm	RAT trojan XWorm	Neiki
2026-02-19 06:26	128.90.102.133:7000	XWorm	AUTO-STARTUP discovery NETREACTOR RAT trojan XWorm	Neiki
2026-02-19 06:26	147.185.221.181:17288	XWorm	RAT trojan XWorm	Neiki
2026-02-19 06:01	next-dance.gl.at.ply.gg	XWorm	c2 domain triage XWorm	DonPasci
2026-02-19 06:01	94.73.17.125:8088	XWorm	AS51407 c2 triage XWorm	DonPasci
2026-02-19 03:02	Nexit-62461.portmap.host	XWorm	XWorm	dyingbreeds_
2026-02-18 23:02	often-richmond.gl.at.ply.gg	XWorm	XWorm	dyingbreeds_
2026-02-18 18:01	h1utmdojg.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-02-18 16:36	31.40.204.103:1990	XWorm	ARCH-SCR AUTO-STARTUP discovery execution RAT SUSP-POWERSHELL trojan XWorm	Neiki
2026-02-18 16:36	198.244.201.139:2352	XWorm	ANTI-EVASION AUTO-REG AUTO-STARTUP crypter defense_evasion evasion execution persistence XWorm	Neiki
2026-02-18 12:01	lqpoartdg.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-02-18 12:01	mflk332-50294.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-02-18 09:48	192.236.154.249:6000	XWorm	API-BASE64 ARCH-SCR defense_evasion discovery execution RAT SUSP-POWERSHELL trojan XWorm	Neiki
2026-02-18 09:25	office001.duckdns.org	XWorm	XWorm	abuse_ch
2026-02-18 07:34	78.29.43.89:40689	XWorm	defense_evasion execution persistence RAT trojan XWorm	Neiki
2026-02-18 07:34	156.205.97.11:4444	XWorm	AUTO-REG AUTO-STARTUP execution persistence RAT trojan XWorm	Neiki
2026-02-18 07:34	8.148.70.84:1984	XWorm	RAT trojan XWorm	Neiki
2026-02-18 07:16	https://pastebin.com/raw/SDSD	XWorm	c2 XWorm	juroots
2026-02-18 03:02	kittyland.gg	XWorm	XWorm	dyingbreeds_
2026-02-17 16:51	94.46.236.201:6000	XWorm	17February2026 iocbottest	Gi7w0rm
2026-02-17 15:42	https://gamewinners.in.net/	XWorm	c2 XWorm	juroots
2026-02-17 12:30	80.46.218.20:4444	XWorm	execution RAT XWorm	Neiki
2026-02-17 07:25	coscoshippingjp.duckdns.org	XWorm	XWorm	abuse_ch
2026-02-17 07:22	5.252.153.240:2055	XWorm	Adware ANTI-EVASION discovery execution Loader persistence RAT spyware XWorm	Neiki
2026-02-17 06:19	165.245.189.98:8008	XWorm	ANTIVM persistence RAT RUST trojan XWorm	Neiki
2026-02-17 06:19	95.148.150.125:3074	XWorm	AUTO-REG AUTO-STARTUP evasion RAT trojan XWorm	Neiki
2026-02-17 06:19	107.152.32.98:3919	XWorm	AUTO-REG AUTO-STARTUP evasion RAT trojan XWorm	Neiki
2026-02-17 06:19	16.78.248.241:4832	XWorm	AUTO-REG AUTO-STARTUP BINDER CRYPTO-REGEX defense_evasion execution generic IMS-API XWorm	Neiki
2026-02-17 00:02	89.190.158.76:80	XWorm	AS204914 c2 censys LABIXE open-dir XWorm	DonPasci
2026-02-16 18:01	horus65-58899.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-02-16 16:23	37.114.46.213:4042	XWorm	AS58087 c2 FLORIANKOLB VirusTotal XWorm	DonPasci
2026-02-16 13:46	185.91.127.179:555	XWorm	AUTO-SCH execution persistence XWorm	Neiki
2026-02-16 12:27	209.54.103.189:63712	XWorm	AUTO-REG execution persistence RAT trojan XWorm	Neiki
2026-02-16 11:05	xxblessings.minhaempresa.tv	XWorm	XWorm	dyingbreeds_
2026-02-16 07:59	45.243.236.40:9898	XWorm	AUTO-REG AUTO-STARTUP BINDER evasion RAT telegram trojan xbinder XWorm	Neiki
2026-02-16 07:58	8.162.0.105:10438	XWorm	bootkit defense_evasion discovery DonutLoader execution Loader persistence RAT XWorm	Neiki
2026-02-15 19:04	8.148.24.19:11601	XWorm	AUTO-STARTUP RAT trojan XWorm	Neiki
2026-02-15 19:01	37.tcp.cpolar.top	XWorm	XWorm	dyingbreeds_
2026-02-15 18:01	xdm111-37027.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-02-15 14:50	13.200.54.243:11343	XWorm	evasion RAT trojan XWorm	Neiki
2026-02-15 14:50	147.185.221.16:13795	XWorm	AUTO-REG discovery execution Github NeptuneRAT persistence RAT trojan XWorm	Neiki
2026-02-15 11:01	dawdawf-32460.portmap.host	XWorm	XWorm	dyingbreeds_
2026-02-15 07:09	gramskate.ddns.net	XWorm	14February2026 iocbottest	Gi7w0rm
2026-02-15 07:09	ynhasmi-46863.portmap.host	XWorm	14February2026 iocbottest	Gi7w0rm
2026-02-15 07:09	gramskate.camdvr.org	XWorm	14February2026 iocbottest	Gi7w0rm
2026-02-15 07:09	198.244.201.139:4834	XWorm	AUTO-REG AUTO-STARTUP crypter evasion PROTECTOR RAT trojan XWorm	Neiki
2026-02-15 07:09	161.35.110.36:48330	XWorm	RAT trojan XWorm	Neiki
2026-02-15 07:08	8.148.76.192:12182	XWorm	RAT trojan XWorm	Neiki
2026-02-15 07:08	109.122.18.53:7788	XWorm	AUTO-REG crypter CRYPTO-REGEX evasion PROTECTOR RAT trojan XWorm	Neiki
2026-02-15 07:08	94.103.84.143:9050	XWorm	AMSI-BYPASS AUTO-REG defense_evasion execution persistence RAT trojan XWorm	Neiki
2026-02-15 07:08	198.244.201.139:4886	XWorm	ANTI-EVASION AUTO-REG AUTO-STARTUP BYTEGUARD crypter defense_evasion evasion XERINFUSCATOR XWorm	Neiki
2026-02-15 06:01	128.0.0.1:7004	XWorm	c2 triage XWorm	DonPasci
2026-02-15 06:01	129.0.0.1:7004	XWorm	AS30992 c2 triage XWorm	DonPasci
2026-02-15 02:45	650316ebfb7fc834a7cd0b4f9db79c0374cb92e1a671719f95939c0c8ff4ab24	XWorm		Grim
2026-02-15 02:45	f6dcf54c897e28c106b146c8452842a8	XWorm		Grim
2026-02-15 02:45	5d42c7be8533970732d75303e34e61837849a5a2	XWorm		Grim
2026-02-14 23:02	fssop-77-91-148-5.a.free.pinggy.link	XWorm	XWorm	dyingbreeds_
2026-02-14 19:02	91.89.111.120:6000	XWorm	XWorm	dyingbreeds_
2026-02-14 15:40	45.74.19.28:443	XWorm	XWorm	abuse_ch
2026-02-14 15:24	141.94.23.83:14433	XWorm	AUTO-REG AUTO-STARTUP BINDER defense_evasion discovery evasion execution generic XWorm	Neiki
2026-02-14 15:24	54.38.55.91:14433	XWorm	AUTO-REG AUTO-STARTUP BINDER defense_evasion discovery evasion execution generic XWorm	Neiki
2026-02-14 15:24	147.185.221.211:60581	XWorm	evasion RAT trojan XWorm	Neiki
2026-02-14 15:24	78.29.43.89:1488	XWorm	AUTO-REG AUTO-STARTUP evasion RAT trojan XWorm	Neiki
2026-02-14 15:24	52.84.143.48:443	XWorm	ANTI-EVASION execution Loader persistence RAT XWorm	Neiki
2026-02-14 15:24	78.29.43.89:40544	XWorm	crypter evasion PROTECTOR RAT trojan XWorm	Neiki
2026-02-14 15:24	185.208.159.174:1337	XWorm	AUTO-REG AUTO-STARTUP execution persistence RAT trojan XWorm	Neiki
2026-02-14 15:23	146.70.226.138:5103	XWorm	AUTO-STARTUP AutoIT defense_evasion discovery RAT trojan XWorm	Neiki
2026-02-14 15:23	147.185.221.181:9539	XWorm	AUTO-REG AUTO-STARTUP evasion RAT trojan XWorm	Neiki
2026-02-14 15:23	155.117.44.130:1337	XWorm	AUTO-REG AUTO-STARTUP execution persistence RAT trojan XWorm	Neiki
2026-02-14 15:23	107.152.32.98:2557	XWorm	defense_evasion RAT trojan XWorm	Neiki
2026-02-14 15:23	141.227.129.198:14433	XWorm	AUTO-REG AUTO-STARTUP BINDER defense_evasion discovery evasion execution generic XWorm	Neiki
2026-02-14 15:23	147.185.221.29:34986	XWorm	AUTO-REG AUTO-STARTUP evasion INNOSETUP RAT trojan XWorm	Neiki
2026-02-14 15:23	198.244.201.139:3913	XWorm	AUTO-REG AUTO-STARTUP crypter evasion PROTECTOR RAT trojan XWorm	Neiki
2026-02-14 15:22	161.35.110.36:24598	XWorm	defense_evasion execution RAT trojan XWorm	Neiki
2026-02-14 15:01	zjrhp8su2.localto.net	XWorm	XWorm	dyingbreeds_
2026-02-14 14:29	147.185.221.29:3765	XWorm	XWorm	dyingbreeds_
2026-02-14 12:01	45.151.236.233:3765	XWorm	AS206257 c2 triage XWorm	DonPasci
2026-02-14 08:50	t72k-30675.portmap.host	XWorm	XWorm	dyingbreeds_
2026-02-14 08:50	GGmenP120-43957.portmap.host	XWorm	XWorm	dyingbreeds_
2026-02-14 08:50	odayrifaii-37201.portmap.host	XWorm	XWorm	dyingbreeds_
2026-02-14 03:01	webxio1231-40781.portmap.host	XWorm	XWorm	dyingbreeds_
2026-02-14 03:01	7mgtwzocu.localto.net	XWorm	XWorm	dyingbreeds_
2026-02-13 19:02	yassinekjdkfj-42734.portmap.host	XWorm	XWorm	dyingbreeds_
2026-02-13 18:00	releases-scale.gl.at.ply.gg	XWorm	c2 domain triage XWorm	DonPasci
2026-02-13 18:00	144.31.164.226:56778	XWorm	AS215439 c2 triage XWorm	DonPasci
2026-02-13 17:45	truesir.duckdns.org	XWorm	XWorm	abuse_ch
2026-02-13 15:02	213.14.185.201:1604	XWorm	XWorm	dyingbreeds_
2026-02-13 14:09	cdb024793ae053acb6c5fb927a6ee170937196b6	XWorm		Grim
2026-02-13 14:09	1e42dee27620428093cdfe7f2f3fe6cf	XWorm		Grim
2026-02-13 14:09	aede2107d738ac4bf5dda44a26da450a4c4bada3170b3e8da4482e798eb69874	XWorm		Grim
2026-02-13 10:04	46.203.233.102:1337	XWorm	AUTO-REG AUTO-STARTUP execution INNOSETUP persistence RAT trojan XWorm	Neiki
2026-02-13 10:04	158.94.211.18:5909	XWorm	AUTO-STARTUP discovery NETREACTOR RAT trojan XWorm	Neiki
2026-02-13 07:27	35.tcp.cpolar.top	XWorm	c2 domain XWorm	DonPasci
2026-02-13 07:25	https://pastebin.com/raw/2dMBx2GB	XWorm	c2 XWorm	juroots
2026-02-13 07:25	https://pastebin.com/raw/W7TaYq0k	XWorm	c2 XWorm	juroots
2026-02-13 07:25	https://pastebin.com/raw/s9dq5qMX	XWorm	c2 XWorm	juroots
2026-02-13 06:09	209.25.140.20:1025	XWorm	AUTO-REG AUTO-STARTUP evasion RAT trojan XWorm	Neiki
2026-02-13 06:09	209.25.140.20:1028	XWorm	AUTO-REG AUTO-STARTUP evasion RAT trojan XWorm	Neiki
2026-02-13 06:09	146.59.151.2:14433	XWorm	AUTO-REG AUTO-STARTUP BINDER defense_evasion discovery evasion execution generic XWorm	Neiki
2026-02-13 06:09	51.89.23.91:14433	XWorm	AUTO-REG AUTO-STARTUP BINDER defense_evasion discovery evasion execution generic XWorm	Neiki
2026-02-13 06:02	185.242.3.72:1003	XWorm	c2 triage XWorm	DonPasci
2026-02-13 03:01	asfegfrwg4t42t-58664.portmap.host	XWorm	XWorm	dyingbreeds_
2026-02-12 21:28	kde-exe.with.playit.plus	XWorm	XWorm	dyingbreeds_
2026-02-12 16:59	178.81.14.217:4444	XWorm	AUTO-SCH bootkit defense_evasion execution persistence RAT trojan XWorm	Neiki
2026-02-12 16:59	147.185.221.29:61938	XWorm	RAT trojan XWorm	Neiki
2026-02-12 16:59	147.185.221.180:19481	XWorm	AUTO-REG AUTO-STARTUP evasion generic IMS-API pastebin RAT telegram XWorm	Neiki
2026-02-12 12:00	wish-carefully.gl.at.ply.gg	XWorm	c2 domain triage XWorm	DonPasci
2026-02-12 08:42	45.87.153.148:9802	XWorm	API-BASE64 AUTO-STARTUP discovery execution NETREACTOR RAT trojan XWorm	Neiki
2026-02-12 06:26	91.160.139.68:27015	XWorm	AUTO-REG AUTO-STARTUP evasion RAT trojan XWorm	Neiki
2026-02-12 06:26	45.88.186.98:9739	XWorm	AUTO-REG AUTO-STARTUP CRYPTO-REGEX discovery evasion generic IMS-API RAT XWorm	Neiki
2026-02-12 06:26	198.244.201.139:8535	XWorm	AUTO-REG AUTO-STARTUP evasion RAT trojan XWorm	Neiki
2026-02-12 06:26	90.0.231.39:4444	XWorm	AUTO-REG AUTO-STARTUP discovery evasion execution persistence RAT trojan XWorm	Neiki
2026-02-12 05:00	64.89.163.7:8888	XWorm	XWorm	abuse_ch
2026-02-11 18:00	slrbi356-30384.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-02-11 16:50	191.23.31.238:1000	XWorm	execution RAT trojan XWorm	Neiki
2026-02-11 16:50	45.149.153.129:2020	XWorm	execution RAT trojan XWorm	Neiki
2026-02-11 12:00	sparepartstecnam.duckdns.org	XWorm	c2 domain triage XWorm	DonPasci
2026-02-11 06:00	nhasmi67-47935.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-02-11 04:52	45.88.186.98:9097	XWorm	AUTO-REG AUTO-STARTUP CRYPTO-REGEX discovery evasion generic IMS-API RAT XWorm	Neiki
2026-02-11 04:52	147.185.221.31:5000	XWorm	AUTO-REG AUTO-STARTUP crypter execution persistence PROTECTOR RAT trojan XWorm	Neiki
2026-02-11 04:52	170.130.55.99:25565	XWorm	AMSI-BYPASS ANTI-EVASION bootkit defense_evasion execution pastebin persistence RAT XWorm	Neiki
2026-02-11 04:52	31.59.58.109:1337	XWorm	AUTO-REG AUTO-STARTUP XWorm	Neiki
2026-02-11 04:52	212.64.210.140:3632	XWorm	AUTO-REG AUTO-STARTUP CRYPTO-REGEX execution PACKER persistence PyInstaller python XWorm	Neiki
2026-02-10 18:00	turkialenzi-42249.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-02-10 18:00	ndbf79ap3.localto.net	XWorm	c2 domain triage XWorm	DonPasci
2026-02-10 07:18	34.145.0.194:2121	XWorm	API-BASE64 AUTO-STARTUP discovery execution NETREACTOR RAT trojan XWorm	Neiki
2026-02-10 07:18	45.88.186.98:9792	XWorm	AUTO-REG AUTO-STARTUP CRYPTO-REGEX discovery evasion generic IMS-API RAT XWorm	Neiki
2026-02-10 07:18	174.26.219.140:3232	XWorm	AUTO-REG crypter defense_evasion pastebin persistence PROTECTOR RAT trojan XWorm	Neiki
2026-02-09 17:49	181.224.24.205:8000	XWorm	RAT trojan XWorm	Neiki
2026-02-09 16:40	3.64.4.198:11193	XWorm	AUTO-REG AUTO-STARTUP evasion pastebin RAT XWorm	Neiki
2026-02-09 16:40	18.158.58.205:11193	XWorm	AUTO-REG AUTO-STARTUP evasion pastebin RAT trojan XWorm	Neiki
2026-02-09 12:27	212.11.64.126:2222	XWorm	discovery PACKER PyInstaller python RAT trojan XWorm	Neiki
2026-02-09 12:00	onebigbucks2026.duckdns.org	XWorm	c2 domain triage XWorm	DonPasci
2026-02-09 12:00	103.254.110.56:7000	XWorm	AS152194 c2 triage XWorm	DonPasci
2026-02-09 12:00	89.208.105.207:6000	XWorm	AS210644 c2 triage XWorm	DonPasci
2026-02-09 06:11	31.57.219.108:6000	XWorm	AUTO-REG AUTO-STARTUP evasion RAT trojan XWorm	Neiki
2026-02-09 06:11	8.148.29.29:13108	XWorm	AUTO-REG AUTO-SCH AUTO-STARTUP RAT XWorm	Neiki
2026-02-09 06:10	182.212.9.184:55555	XWorm	AUTO-REG AUTO-STARTUP execution generic IMS-API pastebin persistence RAT XWorm	Neiki
2026-02-09 06:00	allwheelwealth.duckdns.org	XWorm	c2 domain triage XWorm	DonPasci
2026-02-08 18:42	38.247.131.5:10008	XWorm	RAT trojan XWorm	Neiki
2026-02-08 18:42	89.243.54.145:6666	XWorm	defense_evasion RAT trojan XWorm	Neiki
2026-02-08 18:00	penispro8ty2-54766.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-02-08 18:00	turkirma7-53217.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-02-08 18:00	rmaa7-37443.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-02-08 17:55	172.234.99.50:14829	XWorm	AUTO-REG AUTO-STARTUP defense_evasion execution persistence RAT trojan XWorm	Neiki
2026-02-08 10:39	th3hunt3r-48288.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-02-08 09:56	93.171.44.221:7004	XWorm	AUTO-REG AUTO-STARTUP evasion RAT trojan XWorm	Neiki
2026-02-08 09:56	193.58.121.74:5533	XWorm	AUTO-REG AUTO-STARTUP evasion RAT trojan XWorm	Neiki
2026-02-08 09:56	2.56.165.13:666	XWorm	RAT trojan XWorm	Neiki
2026-02-08 09:56	8.148.29.29:10495	XWorm	RAT trojan XWorm	Neiki
2026-02-08 09:54	89.243.54.145:4444	XWorm	RAT trojan XWorm	Neiki
2026-02-08 06:00	45.74.8.75:7000	XWorm	AS3223 c2 triage XWorm	DonPasci
2026-02-07 14:32	89.190.158.176:4444	XWorm	ANTI-EVASION AUTO-REG AUTO-STARTUP evasion execution FILESHARE Loader PACKER XWorm	Neiki
2026-02-07 12:00	tcpport333-38897.portmap.host	XWorm	c2 domain triage XWorm	DonPasci
2026-02-07 11:53	86.29.59.189:7007	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	103.252.137.157:6000	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	82.22.62.73:555	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	141.11.192.223:8800	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	31.150.126.33:4001	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	86.29.59.189:5525	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	82.22.62.73:999	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	185.208.159.138:2222	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	107.2.136.238:1123	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	191.96.225.217:7007	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	69.9.184.1:5525	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	185.184.192.251:4000	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	90.213.31.133:44158	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	162.120.187.244:4000	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	163.61.182.41:56001	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	104.188.33.128:7000	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	saqir.world	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	vmbot-2601-282-8600-2870-5dd1-8492-7afd-379f.a.free.pinggy.link	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	ghostglocks-45443.portmap.host	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	park-sarah.gl.at.ply.gg	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	rawr986-54931.portmap.host	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	combining-melbourne.with.playit.plus	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	kai22222-32133.portmap.host	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	penguin16342-43860.portmap.host	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	fall-cj.gl.at.ply.gg	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	pinklemonade-53074.portmap.host	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	nepedag445-41040.portmap.host	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	f3en305f3en-35578.portmap.host	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	vallper.ddns.net	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	jari25u777-33269.portmap.host	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	egor917383-47506.portmap.host	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	ceaps-158-173-23-8.a.free.pinggy.link	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	amazon-mini.gl.at.ply.gg	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	key-bath.gl.at.ply.gg	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	rooms-traveller.gl.at.ply.gg	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	unhiin2-60345.portmap.host	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	homes-scan.gl.at.ply.gg	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	444444444440-37173.portmap.host	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	darwin151-51782.portmap.host	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	nepedag445-42672.portmap.host	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	violation-swagger.gl.at.ply.gg	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	ecolombia2026.kozow.com	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	yoseflikesjujutsukaisen-57011.portmap.host	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	wyattmouris-47273.portmap.host	XWorm	7February2026 iocbottest	Gi7w0rm
2026-02-07 11:53	pmmnv-158-173-23-8.a.free.pinggy.link	XWorm	7February2026 iocbottest	Gi7w0rm