| 2026-11-06 11:12 | 31.56.19.164:7007 | XWorm | XWorm |  abuse_ch |
| 2026-11-06 11:05 | 196.251.102.107:7007 | XWorm | XWorm | abuse_ch |
| 2026-11-06 11:05 | 31.57.216.11:7005 | XWorm | XWorm | abuse_ch |
| 2026-11-05 09:58 | 185.12.130.161:3009 | XWorm | XWorm | abuse_ch |
| 2026-11-05 09:40 | 155.103.70.237:2424 | XWorm | XWorm | abuse_ch |
| 2026-11-05 09:35 | 31.57.216.11:7004 | XWorm | XWorm | abuse_ch |
| 2026-11-04 18:45 | 36.255.97.22:7007 | XWorm | XWorm | abuse_ch |
| 2026-11-04 11:00 | 217.60.103.38:7007 | XWorm | XWorm | abuse_ch |
| 2026-11-04 10:50 | 36.255.97.226:4445 | XWorm | XWorm | abuse_ch |
| 2026-11-04 08:40 | 45.141.21.235:7575 | XWorm | XWorm | abuse_ch |
| 2026-11-04 08:40 | 5.175.166.90:6604 | XWorm | XWorm | abuse_ch |
| 2026-11-04 08:40 | mrv001.ddns.net | XWorm | XWorm | abuse_ch |
| 2026-11-03 17:42 | 45.83.31.203:1177 | XWorm | c2 XWorm |  ghozt |
| 2026-11-03 16:30 | 51.222.88.203:65000 | XWorm | XWorm | abuse_ch |
| 2026-11-03 07:07 | 195.186.4.217:4689 | XWorm | XWorm | abuse_ch |
| 2026-11-02 21:05 | 31.57.38.202:7007 | XWorm | XWorm | abuse_ch |
| 2026-11-02 14:00 | 217.60.102.225:443 | XWorm | XWorm | abuse_ch |
| 2026-11-02 13:59 | 217.60.195.98:8808 | XWorm | XWorm | abuse_ch |
| 2026-11-02 13:49 | 103.118.252.177:168 | XWorm | minecraft PCL2 RAT XWorm |  youngski |
| 2026-11-02 13:40 | 91.210.109.211:443 | XWorm | XWorm | abuse_ch |
| 2026-11-02 13:40 | 45.141.21.216:7007 | XWorm | XWorm | abuse_ch |
| 2026-11-02 13:40 | abukfreshserv.gotdns.ch | XWorm | XWorm | abuse_ch |
| 2026-11-02 11:10 | 86.38.225.163:7777 | XWorm | XWorm | abuse_ch |
| 2026-10-30 20:02 | 207.189.8.169:4995 | XWorm | XWorm | abuse_ch |
| 2026-10-30 19:58 | 207.189.27.192:3557 | XWorm | XWorm | abuse_ch |
| 2026-10-30 19:25 | 203.202.232.86:2323 | XWorm | XWorm | abuse_ch |
| 2026-10-30 19:25 | chrissz.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-10-30 19:25 | anambra.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-10-30 12:56 | c24315cfb010c888ebc5cd9cbdf1a2c45b94fb19a0cbc1183a22576c63e21f78 | XWorm | exe thomson101 XWorm |  Tuxxin |
| 2026-10-30 12:56 | c68cc737b28013c4f173ec0c92cf338b95d9355e512f7a6af25859ee6f062bff | XWorm | exe thomson101 XWorm | Tuxxin |
| 2026-10-30 12:56 | d56acf53cf6d4c419dedeef42bb3058afecfc467c60388d8f49505ac17582d31 | XWorm | exe thomson101 XWorm | Tuxxin |
| 2026-10-30 12:38 | 56bb65dd4756314a643b270a77fe67f6b44219d7258ef5900fbc01618da3f76a | XWorm | exe Github XWorm |  wristhulk |
| 2026-10-30 12:38 | 1aa3a04af2f1eafa200a9251ce7d22e960b4827e96973d118df702876eb3e893 | XWorm | exe Github XWorm | wristhulk |
| 2026-10-30 07:40 | gozmmmaa.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-10-30 07:35 | 217.60.195.94:443 | XWorm | XWorm | abuse_ch |
| 2026-10-29 12:10 | surfixasa.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-10-29 11:55 | 109.120.139.126:3008 | XWorm | XWorm | abuse_ch |
| 2026-10-29 07:59 | c96f81d0ddbc29f0315c4b0809d97e280051a016b6a6852e5bd88e1a6ec235bc | XWorm | exe Github XWorm | wristhulk |
| 2026-10-29 07:24 | 195.186.4.216:4689 | XWorm | XWorm | abuse_ch |
| 2026-10-29 07:20 | 194.116.236.51:7172 | XWorm | XWorm | abuse_ch |
| 2026-10-29 06:12 | f0f686989d043a10a7f5ee442fc97877ac52b9baf16b4cdca1191dd9631efc4c | XWorm | exe Github XWorm | wristhulk |
| 2026-10-28 16:05 | 82.47.101.59:2025 | XWorm | XWorm | abuse_ch |
| 2026-10-28 10:50 | 45.136.5.187:5151 | XWorm | XWorm | abuse_ch |
| 2026-10-28 10:35 | d515d3eeb16636e316345494bf98a312b59bb7f5c226faa6c64ca2e6980f3185 | XWorm | exe Github XWorm | wristhulk |
| 2026-10-28 06:36 | 53a8bd56d87f50e7cef6a9ffa7edbe1e3ed611457b6c7fd577a6a0ffb0f1d2d5 | XWorm | exe Github XWorm | wristhulk |
| 2026-10-28 06:35 | 64.188.67.232:7000 | XWorm | c2 RAT XWorm |  7H40 |
| 2026-10-28 00:25 | ov1j9h5mhk.localto.net | XWorm | XWorm | abuse_ch |
| 2026-10-27 15:46 | 188.191.96.116:9467 | XWorm | XWorm | abuse_ch |
| 2026-10-27 15:08 | b4ad9b09c0119579e88b7627b9c48625934b1bd0a90fade337cd0d2281825513 | XWorm | exe Github XWorm | wristhulk |
| 2026-10-27 13:55 | 91.210.109.228:5050 | XWorm | XWorm | abuse_ch |
| 2026-10-27 13:01 | 6eec26c15b5458108d3a7a52d905acd93ba716fd9b0555259946128a1bb4ccfa | XWorm | exe Github XWorm | wristhulk |
| 2026-10-27 07:18 | 830fdb947aa60a491d22c8f698e9531fdd651f76cecafd3350d408442db4c59e | XWorm | exe Github XWorm | wristhulk |
| 2026-10-27 05:42 | 0641ec66f2738f661e74fdd5a11949b9e80e45764d8292d5927b4f2fc1843a00 | XWorm | exe gitlab XWorm | wristhulk |
| 2026-10-26 15:35 | 104.249.10.158:7007 | XWorm | XWorm | abuse_ch |
| 2026-10-26 15:30 | vallxx.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-10-26 15:29 | 31.56.19.166:7007 | XWorm | XWorm | abuse_ch |
| 2026-10-26 13:10 | 103.83.87.77:1212 | XWorm | XWorm | abuse_ch |
| 2026-10-26 07:45 | 91.210.109.207:8080 | XWorm | XWorm | abuse_ch |
| 2026-10-25 14:34 | x87sw.top | Unknown malware | ClickFix js-loader remcos XWorm |  Dense |
| 2026-10-23 12:40 | 45.74.19.54:1099 | XWorm | XWorm | abuse_ch |
| 2026-10-23 12:35 | remc.standsbup.com | XWorm | XWorm | abuse_ch |
| 2026-10-23 12:15 | 84.38.129.31:8018 | XWorm | XWorm | abuse_ch |
| 2026-10-23 12:10 | 155.103.69.48:2222 | XWorm | XWorm | abuse_ch |
| 2026-10-22 22:54 | 5ae300101bef874b2d8e9dc927571074d7cd6c706903f4a23d91bf0c2943e256 | Unknown Loader | asyncrat exe Loader XWorm | Tuxxin |
| 2026-10-22 14:20 | 185.149.27.7:7777 | XWorm | XWorm | abuse_ch |
| 2026-10-22 07:05 | 46.151.182.249:7004 | XWorm | XWorm | abuse_ch |
| 2026-10-22 04:35 | 147.124.216.205:5151 | XWorm | XWorm | abuse_ch |
| 2026-10-22 04:33 | 178.16.53.15:7004 | XWorm | XWorm | abuse_ch |
| 2026-10-22 04:30 | 104.128.191.55:8823 | XWorm | XWorm | abuse_ch |
| 2026-10-22 04:20 | 31.56.209.214:443 | XWorm | XWorm | abuse_ch |
| 2026-10-21 12:10 | 217.60.102.94:443 | XWorm | XWorm | abuse_ch |
| 2026-10-20 16:54 | 7ca1dfc3154381c742649930ef86f7d4413150c9d1309f3da6526f842d3e4097 | XWorm | asyncrat exe XWorm | Tuxxin |
| 2026-10-19 08:00 | 209.127.35.200:7689 | XWorm | XWorm | abuse_ch |
| 2026-10-19 07:55 | 152.89.168.244:8443 | XWorm | XWorm | abuse_ch |
| 2026-10-16 10:25 | 209.54.102.133:4445 | XWorm | XWorm | abuse_ch |
| 2026-10-15 08:36 | 147.90.182.38:3557 | XWorm | XWorm | abuse_ch |
| 2026-10-15 06:20 | cjjjmoney.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-10-14 18:15 | 43.228.157.81:7007 | XWorm | XWorm | abuse_ch |
| 2026-10-14 16:20 | dcworman.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-10-14 16:15 | 154.127.53.6:7731 | XWorm | XWorm | abuse_ch |
| 2026-10-14 16:10 | 209.127.35.200:3533 | XWorm | XWorm | abuse_ch |
| 2026-10-13 12:50 | www.abvision.cam | XWorm | XWorm | abuse_ch |
| 2026-10-12 08:25 | 84.38.133.187:3270 | XWorm | XWorm | abuse_ch |
| 2026-10-11 15:34 | 153.52.182.94:3567 | XWorm | XWorm | abuse_ch |
| 2026-10-09 18:52 | 178.16.53.15:8808 | XWorm | XWorm | abuse_ch |
| 2026-10-09 10:48 | 172.94.99.29:1408 | XWorm | RAT XWorm | Anonymous |
| 2026-10-08 15:45 | 64.188.67.232:8080 | XWorm | XWorm | abuse_ch |
| 2026-10-08 09:50 | 45.136.5.227:23101 | XWorm | XWorm | abuse_ch |
| 2026-10-07 18:10 | 217.60.103.154:443 | XWorm | XWorm | abuse_ch |
| 2026-10-07 18:10 | 155.103.69.56:4326 | XWorm | XWorm | abuse_ch |
| 2026-10-07 18:10 | 102.220.163.105:2754 | XWorm | XWorm | abuse_ch |
| 2026-10-07 18:10 | 217.60.195.112:443 | XWorm | XWorm | abuse_ch |
| 2026-10-07 18:10 | ellab0098.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-10-07 18:05 | 203.202.232.254:1122 | XWorm | XWorm | abuse_ch |
| 2026-10-07 15:00 | xvip.ddns.net | XWorm | XWorm | abuse_ch |
| 2026-10-06 15:20 | 151.241.154.23:7007 | XWorm | XWorm | abuse_ch |
| 2026-10-06 08:05 | 102.220.160.217:7005 | XWorm | XWorm | abuse_ch |
| 2026-10-06 08:05 | 84.38.133.120:7004 | XWorm | XWorm | abuse_ch |
| 2026-10-05 09:05 | 107.174.20.206:8827 | XWorm | XWorm | abuse_ch |
| 2026-10-02 06:15 | ogo1.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-10-01 21:45 | ebuxsfresh.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-10-01 21:40 | infogruposyc.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-10-01 16:55 | xw.cizt.top | XWorm | XWorm | abuse_ch |
| 2026-10-01 16:55 | xw.vqxt.top | XWorm | XWorm | abuse_ch |
| 2026-10-01 16:55 | xw.vyqt.top | XWorm | XWorm | abuse_ch |
| 2026-10-01 16:55 | xw.maxr.top | XWorm | XWorm | abuse_ch |
| 2026-10-01 16:55 | xw.fexd.top | XWorm | XWorm | abuse_ch |
| 2026-10-01 16:55 | xw.jukt.top | XWorm | XWorm | abuse_ch |
| 2026-10-01 16:55 | xw.bidz.top | XWorm | XWorm | abuse_ch |
| 2026-10-01 15:09 | 155.103.69.190:7707 | XWorm | XWorm | abuse_ch |
| 2026-10-01 15:00 | 102.220.163.27:3070 | XWorm | XWorm | abuse_ch |
| 2026-10-01 14:55 | 46.151.182.5:5050 | XWorm | XWorm | abuse_ch |
| 2026-10-01 12:40 | 94.154.32.41:7004 | XWorm | XWorm | abuse_ch |
| 2026-10-01 10:05 | faithbiglovered.opik.net | XWorm | XWorm | abuse_ch |
| 2026-10-01 10:05 | nothinglikefaith.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-10-01 10:05 | loveyoufaith.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-09-30 20:36 | 38.tcp.vip.cpolar.cn | XWorm | XWorm |  juroots |
| 2026-09-30 08:35 | 84.38.129.15:4545 | XWorm | XWorm | abuse_ch |
| 2026-09-30 08:30 | 135.136.140.150:7007 | XWorm | XWorm | abuse_ch |
| 2026-09-30 08:25 | 155.103.69.55:3333 | XWorm | XWorm | abuse_ch |
| 2026-09-29 18:05 | 77.110.114.115:3008 | XWorm | XWorm | abuse_ch |
| 2026-09-29 08:35 | medellin202156.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-09-29 06:15 | 207.189.14.71:7007 | XWorm | XWorm | abuse_ch |
| 2026-09-28 17:05 | 103.131.131.96:7007 | XWorm | XWorm | abuse_ch |
| 2026-09-25 10:25 | loganwolverin2042.webredirect.org | XWorm | XWorm | abuse_ch |
| 2026-09-24 05:45 | 102.220.161.92:2021 | XWorm | XWorm | abuse_ch |
| 2026-09-23 15:20 | 23.132.164.57:7007 | XWorm | XWorm | abuse_ch |
| 2026-09-23 07:47 | 64.89.160.127:5892 | XWorm | XWorm | abuse_ch |
| 2026-09-22 17:29 | 155.103.69.190:7787 | XWorm | XWorm | abuse_ch |
| 2026-09-22 17:26 | 46.151.182.5:7007 | XWorm | XWorm | abuse_ch |
| 2026-09-22 15:15 | 89.106.83.35:8823 | XWorm | XWorm | abuse_ch |
| 2026-09-22 12:18 | 139.99.88.62:3778 | XWorm | XWorm | abuse_ch |
| 2026-09-22 08:25 | 188.212.158.34:6000 | XWorm | XWorm | abuse_ch |
| 2026-09-22 06:20 | 104.249.10.101:7004 | XWorm | XWorm | abuse_ch |
| 2026-09-22 04:55 | 09090clami09090930032.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-09-21 21:35 | 13.143.66.14:1370 | XWorm | XWorm | abuse_ch |
| 2026-09-21 21:35 | 89.39.121.145:1370 | XWorm | XWorm | abuse_ch |
| 2026-09-20 16:45 | 144.217.94.121:1339 | XWorm | XWorm | abuse_ch |
| 2026-09-18 18:21 | tyyyy-50833.portmap.host | XWorm | XWorm |  dyingbreeds_ |
| 2026-09-18 18:21 | 195.177.94.91:6000 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-18 18:21 | jxjdhjdx-61930.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-09-18 18:21 | 31.6.50.206:2002 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-18 18:21 | 143.92.51.33:443 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-18 18:21 | 82.47.101.153:3388 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-18 18:21 | hb2grktsae.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-09-18 18:21 | t2d2.ddns.net | XWorm | XWorm | dyingbreeds_ |
| 2026-09-18 18:21 | 45.141.27.97:7000 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-18 18:21 | zogyjkdssr.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-09-18 18:21 | 8.tcp.cpolar.cn | XWorm | XWorm | dyingbreeds_ |
| 2026-09-18 17:25 | 162.217.248.219:9467 | XWorm | XWorm | abuse_ch |
| 2026-09-18 17:25 | mail.qilantelecorn.com | XWorm | XWorm | abuse_ch |
| 2026-09-17 20:54 | vla.tcptunnel.su | XWorm | XWorm | dyingbreeds_ |
| 2026-09-17 20:54 | Azx19-45876.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-09-17 20:54 | britsygomez90901002.duckdns.org | XWorm | XWorm | dyingbreeds_ |
| 2026-09-17 20:54 | 31.57.97.111:5555 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-17 20:54 | tissues-carers.tun.ply.gg | XWorm | XWorm | dyingbreeds_ |
| 2026-09-17 20:54 | 36.255.97.7:4445 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-17 20:54 | 82.47.102.179:5001 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-17 20:54 | 85.203.4.222:6000 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-17 20:54 | sddfgdqw45tj-35300.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-09-17 20:54 | 85.203.4.161:6000 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-17 20:54 | lodalasan22wwee.duckdns.org | XWorm | XWorm | dyingbreeds_ |
| 2026-09-17 20:54 | 82.22.62.195:6767 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-17 15:10 | 191.101.130.75:7731 | XWorm | XWorm | abuse_ch |
| 2026-09-16 17:47 | 82.47.101.153:7165 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-16 17:47 | 188.52.56.123:5000 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | portmapper222-61558.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | HamoHas-46035.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | ljxyfapr71.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | 3.tcp.cpolar.top | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | camicamicmai0390393.duckdns.org | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | 89.190.158.37:911 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | Modyhoba-57738.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | kkjjjytvfdfd4534-41452.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | 2.56.165.152:7000 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | america-surrey.gl.at.ply.gg | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | Baaptyst-25027.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | AnonKrnl-47127.portmap.io | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | 97.104.107.190:80 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | 92.24.51.238:80 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | 197.83.232.19:80 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 20:39 | 182.187.139.200:8080 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-15 13:06 | 46.151.182.34:7007 | XWorm | XWorm | abuse_ch |
| 2026-09-14 17:25 | 203.202.232.16:2477 | XWorm | XWorm | abuse_ch |
| 2026-09-14 17:20 | 158.94.210.194:6000 | XWorm | XWorm | abuse_ch |
| 2026-09-14 13:59 | 109.206.240.95:7000 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-14 13:59 | labestiadelport-44237.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-09-14 13:59 | wdw343244323e3d-60296.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-09-14 13:59 | sh56a-57180.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-09-14 13:59 | 188.137.255.18:6000 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-14 13:59 | or3k-51808.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-09-14 13:59 | 130.12.181.118:7000 | XWorm | XWorm | dyingbreeds_ |
| 2026-09-14 11:56 | 31.6.50.206:2017 | XWorm | c2 XWorm | juroots |
| 2026-09-14 11:55 | za7fmrh-63387.portmap.host | XWorm | c2 XWorm | juroots |
| 2026-09-14 11:55 | tr308gf-36294.portmap.host | XWorm | c2 XWorm | juroots |
| 2026-09-14 11:55 | porrt.ddns.net | XWorm | c2 XWorm | juroots |
| 2026-09-14 11:55 | jasmrjbynyk3jp-50520.portmap.host | XWorm | c2 XWorm | juroots |
| 2026-09-14 11:55 | hixavec547-37489.portmap.host | XWorm | c2 XWorm | juroots |
| 2026-09-14 11:55 | googlecloud.exfrp.zip | XWorm | c2 XWorm | juroots |
| 2026-09-14 11:55 | gdgregergedrge.ddns.net | XWorm | c2 XWorm | juroots |
| 2026-09-14 11:55 | faresahmedkuwait-52119.portmap.host | XWorm | c2 XWorm | juroots |
| 2026-09-14 11:55 | https://pastebin.com/raw/Zsds1pcW | XWorm | c2 XWorm | juroots |
| 2026-09-10 17:15 | 13.140.42.128:7004 | XWorm | XWorm | abuse_ch |
| 2026-09-10 11:25 | 64.89.160.225:7001 | XWorm | XWorm | abuse_ch |
| 2026-09-10 11:25 | 45.154.98.168:9019 | XWorm | XWorm | abuse_ch |
| 2026-09-10 11:15 | phanxwodm.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-09-10 11:10 | 103.83.86.22:7500 | XWorm | XWorm | abuse_ch |
| 2026-09-10 11:10 | 194.116.236.9:7000 | XWorm | XWorm | abuse_ch |
| 2026-09-10 11:01 | 203.202.232.127:1515 | XWorm | XWorm | abuse_ch |
| 2026-09-10 10:55 | 103.83.86.96:4001 | XWorm | XWorm | abuse_ch |
| 2026-09-10 10:45 | 91.239.6.97:4449 | XWorm | XWorm | abuse_ch |
| 2026-09-10 10:40 | windowsupgrade.3utilities.com | XWorm | XWorm | abuse_ch |
| 2026-09-10 06:18 | 107.149.8.250:54321 | XWorm | XWorm | abuse_ch |
| 2026-09-10 06:10 | 185.29.10.23:1012 | XWorm | XWorm | abuse_ch |
| 2026-09-10 05:32 | http://209.145.51.44/keepon.exe | XWorm | exe XWorm | Tuxxin |
| 2026-09-09 18:20 | 95.211.120.98:7004 | XWorm | XWorm | abuse_ch |
| 2026-09-09 18:15 | 104.168.7.212:7004 | XWorm | XWorm | abuse_ch |
| 2026-09-08 22:45 | btmobv4.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-09-07 08:31 | 43.228.157.124:7080 | XWorm | XWorm | abuse_ch |
| 2026-09-07 07:21 | 84.32.230.217:7004 | XWorm | XWorm | abuse_ch |
| 2026-09-07 07:16 | 102.220.160.217:7004 | XWorm | XWorm | abuse_ch |
| 2026-09-07 07:16 | 102.220.160.195:7008 | XWorm | XWorm | abuse_ch |
| 2026-09-06 08:01 | 43.228.157.141:7007 | XWorm | XWorm | abuse_ch |
| 2026-09-04 20:26 | 172.245.93.70:443 | XWorm | XWorm | abuse_ch |
| 2026-09-04 12:41 | 74.120.121.223:7004 | XWorm | XWorm | abuse_ch |
| 2026-09-04 12:20 | techycarterpiller.kozow.com | XWorm | XWorm | abuse_ch |
| 2026-09-01 07:35 | 103.67.163.188:6161 | XWorm | XWorm | abuse_ch |
| 2026-09-01 06:25 | 151.241.154.50:7004 | XWorm | XWorm | abuse_ch |
| 2026-08-31 14:15 | 102.220.160.87:7009 | XWorm | XWorm | abuse_ch |
| 2026-08-31 08:40 | 92.118.206.129:7006 | XWorm | XWorm | abuse_ch |
| 2026-08-31 08:35 | 209.54.103.151:6000 | XWorm | XWorm | abuse_ch |
| 2026-08-31 08:35 | 172.245.92.217:7004 | XWorm | XWorm | abuse_ch |
| 2026-08-30 10:50 | 36.255.97.175:8787 | XWorm | XWorm | abuse_ch |
| 2026-08-28 14:12 | 45.74.3.160:443 | XWorm | XWorm | abuse_ch |
| 2026-08-28 13:50 | 185.215.151.63:8823 | XWorm | XWorm | abuse_ch |
| 2026-08-27 08:47 | 109.122.18.169:3693 | XWorm | XWorm | abuse_ch |
| 2026-08-27 08:43 | 178.173.234.123:7007 | XWorm | XWorm | abuse_ch |
| 2026-08-27 08:40 | 66.55.77.158:7400 | HypeAgent | XWorm | abuse_ch |
| 2026-08-27 08:30 | killkill1.myftp.biz | XWorm | XWorm | abuse_ch |
| 2026-08-27 08:30 | inter.myftp.biz | XWorm | XWorm | abuse_ch |
| 2026-08-26 13:35 | 104.251.180.194:7007 | XWorm | XWorm | abuse_ch |
| 2026-08-26 08:03 | 31.40.204.71:777 | XWorm | XWorm | abuse_ch |
| 2026-08-26 08:00 | 88.99.165.153:8780 | XWorm | XWorm | abuse_ch |
| 2026-08-26 08:00 | windowsfeeds.3utilities.com | XWorm | XWorm | abuse_ch |
| 2026-08-26 07:55 | 217.217.97.84:2021 | XWorm | XWorm | abuse_ch |
| 2026-08-26 07:55 | 191.101.46.43:2021 | XWorm | XWorm | abuse_ch |
| 2026-08-25 06:10 | 80.96.109.204:2021 | XWorm | XWorm | abuse_ch |
| 2026-08-24 08:50 | 45.141.21.47:7004 | XWorm | XWorm | abuse_ch |
| 2026-08-21 08:45 | 194.116.236.49:2222 | XWorm | XWorm | abuse_ch |
| 2026-08-21 08:35 | 84.38.129.114:4545 | XWorm | XWorm | abuse_ch |
| 2026-08-20 14:40 | 84.38.133.144:9090 | XWorm | XWorm | abuse_ch |
| 2026-08-20 12:45 | 45.141.148.10:4001 | XWorm | XWorm | abuse_ch |
| 2026-08-20 08:06 | 194.59.31.98:2021 | XWorm | XWorm | abuse_ch |
| 2026-08-20 08:06 | 169.58.169.10:7004 | XWorm | XWorm | abuse_ch |
| 2026-08-20 08:06 | 15.204.115.143:7004 | XWorm | XWorm | abuse_ch |
| 2026-08-20 08:05 | range2021.kozow.com | XWorm | XWorm | abuse_ch |
| 2026-08-20 07:45 | halakw.com | XWorm | XWorm | abuse_ch |
| 2026-08-19 11:40 | koyet88723-44608.portmap.host | XWorm | c2 XWorm | juroots |
| 2026-08-19 10:35 | 195.177.94.85:7004 | XWorm | XWorm | abuse_ch |
| 2026-08-19 06:04 | 108.181.175.198:7000 | XWorm | HTA mexico WhatsApp XWorm | isahjs6 |
| 2026-08-18 19:15 | 103.83.87.183:1717 | XWorm | XWorm | abuse_ch |
| 2026-08-18 10:45 | 45.62.170.51:7000 | XWorm | XWorm | abuse_ch |
| 2026-08-18 09:55 | 31.56.209.234:443 | XWorm | XWorm | abuse_ch |
| 2026-08-13 20:56 | 103.83.87.158:4040 | XWorm | XWorm | abuse_ch |
| 2026-08-13 11:41 | 194.116.236.54:2467 | XWorm | XWorm | abuse_ch |
| 2026-08-13 11:35 | 107.175.101.136:8823 | XWorm | XWorm | abuse_ch |
| 2026-08-12 11:20 | wmxdata.ddns.net | XWorm | XWorm | abuse_ch |
| 2026-08-12 10:02 | 103.67.163.6:443 | XWorm | XWorm | abuse_ch |
| 2026-08-12 08:44 | 151.241.154.218:2021 | XWorm | XWorm | abuse_ch |
| 2026-08-12 08:41 | 104.249.10.187:7004 | XWorm | XWorm | abuse_ch |
| 2026-08-12 08:26 | 107.174.20.215:8824 | XWorm | XWorm | abuse_ch |
| 2026-08-12 08:12 | 217.60.195.74:443 | XWorm | XWorm | abuse_ch |
| 2026-08-12 06:20 | xwsub.cincv.group | XWorm | XWorm | abuse_ch |
| 2026-08-11 10:10 | windowsupdate.webhop.me | XWorm | XWorm | abuse_ch |
| 2026-08-11 10:05 | 31.56.209.60:443 | XWorm | XWorm | abuse_ch |
| 2026-08-11 09:44 | barikadeuku.freedev.app | XWorm | XWorm | abuse_ch |
| 2026-08-11 09:44 | 185.27.134.137:443 | XWorm | XWorm | abuse_ch |
| 2026-08-11 09:41 | without.kesug.com | XWorm | XWorm | abuse_ch |
| 2026-08-11 09:41 | 185.27.134.212:443 | XWorm | XWorm | abuse_ch |
| 2026-08-11 09:00 | tagmentos.bingbaochow.cam | XWorm | XWorm | abuse_ch |
| 2026-08-11 09:00 | haghuer.bingbaochow.cam | XWorm | XWorm | abuse_ch |
| 2026-08-11 07:03 | 104.249.10.95:7004 | XWorm | XWorm | abuse_ch |
| 2026-08-11 06:40 | technocalfindersda.bounceme.net | XWorm | XWorm | abuse_ch |
| 2026-08-10 15:25 | 31.59.118.77:7004 | XWorm | XWorm | abuse_ch |
| 2026-08-10 15:25 | 155.103.71.203:2233 | XWorm | XWorm | abuse_ch |
| 2026-08-10 15:05 | 155.254.98.57:7007 | XWorm | XWorm | abuse_ch |
| 2026-08-10 15:05 | 155.103.71.88:3456 | XWorm | XWorm | abuse_ch |
| 2026-08-10 14:25 | 107.172.134.28:6000 | XWorm | XWorm | abuse_ch |
| 2026-08-10 14:15 | 109.248.151.124:7575 | XWorm | XWorm | abuse_ch |
| 2026-08-10 13:50 | 104.249.130.248:5960 | XWorm | XWorm | abuse_ch |
| 2026-08-07 12:20 | 46.151.182.225:7007 | XWorm | XWorm | abuse_ch |
| 2026-08-07 12:20 | tmplsnd.cabvlliahermosa.com.mx | XWorm | XWorm | abuse_ch |
| 2026-08-07 12:06 | 45.148.18.40:58798 | XWorm | XWorm | abuse_ch |
| 2026-08-07 12:06 | 45.148.18.40:58268 | XWorm | XWorm | abuse_ch |
| 2026-08-07 10:20 | 185.215.151.16:8823 | XWorm | XWorm | abuse_ch |
| 2026-08-07 10:20 | Pb3089EP3WAwzicHHzF9zQ== | XWorm | XWorm | abuse_ch |
| 2026-08-06 18:13 | 45.61.114.66:6000 | XWorm | XWorm | abuse_ch |
| 2026-08-06 11:00 | 45.88.91.117:7004 | XWorm | XWorm | abuse_ch |
| 2026-08-06 09:18 | imobilityes.cabvlliahermosa.com.mx | XWorm | XWorm | abuse_ch |
| 2026-08-06 09:18 | 46.151.182.234:7007 | XWorm | XWorm | abuse_ch |
| 2026-08-05 11:00 | yayana.myftp.org | XWorm | XWorm | abuse_ch |
| 2026-08-05 08:20 | 80.76.49.76:7004 | XWorm | XWorm | abuse_ch |
| 2026-08-05 08:20 | 155.103.69.171:1122 | XWorm | XWorm | abuse_ch |
| 2026-08-05 08:20 | 104.128.191.103:8823 | XWorm | XWorm | abuse_ch |
| 2026-08-05 08:15 | 31.56.209.61:443 | XWorm | XWorm | abuse_ch |
| 2026-08-05 08:15 | 130.12.182.59:2026 | XWorm | XWorm | abuse_ch |
| 2026-08-05 08:05 | 185.215.151.120:8823 | XWorm | XWorm | abuse_ch |
| 2026-08-04 12:55 | 217.60.195.193:443 | XWorm | XWorm | abuse_ch |
| 2026-08-04 09:20 | 102.220.160.146:5050 | XWorm | XWorm | abuse_ch |
| 2026-08-04 09:10 | 84.38.133.132:6000 | XWorm | XWorm | abuse_ch |
| 2026-08-04 09:10 | 217.60.195.87:443 | XWorm | XWorm | abuse_ch |
| 2026-08-04 09:10 | 109.248.150.234:1012 | XWorm | XWorm | abuse_ch |
| 2026-08-03 11:35 | 31.57.184.10:5050 | XWorm | XWorm | abuse_ch |
| 2026-08-02 15:40 | 204.10.160.254:443 | XWorm | XWorm | abuse_ch |
| 2026-07-27 17:10 | carrenzaalwarex.ddns.net | XWorm | XWorm | abuse_ch |
| 2026-07-27 12:35 | bucakosb.org.tr | XWorm | XWorm | abuse_ch |
| 2026-07-24 12:25 | range2021.myftp.biz | XWorm | XWorm | abuse_ch |
| 2026-07-24 07:41 | 45.133.174.99:443 | XWorm | XWorm | abuse_ch |
| 2026-07-23 03:35 | 109.248.150.244:1070 | XWorm | XWorm | abuse_ch |
| 2026-07-22 08:50 | 45.88.91.35:7004 | XWorm | XWorm | abuse_ch |
| 2026-07-21 06:45 | 192.169.7.60:7000 | XWorm | XWorm | abuse_ch |
| 2026-07-20 12:05 | 166.88.132.80:2323 | XWorm | XWorm | abuse_ch |
| 2026-07-16 07:31 | 102.220.160.143:5010 | XWorm | XWorm | abuse_ch |
| 2026-07-16 07:25 | 64.89.161.16:1470 | XWorm | XWorm | abuse_ch |
| 2026-07-16 07:11 | 217.60.195.17:7007 | XWorm | XWorm | abuse_ch |
| 2026-07-14 10:20 | 104.239.66.185:7004 | XWorm | XWorm | abuse_ch |
| 2026-07-11 07:15 | 217.60.195.237:443 | XWorm | XWorm | abuse_ch |
| 2026-07-11 07:15 | 217.60.195.213:443 | XWorm | XWorm | abuse_ch |
| 2026-07-11 07:15 | ultraportal.4nmn.com | XWorm | XWorm | abuse_ch |
| 2026-07-11 07:10 | 217.60.195.12:7006 | XWorm | XWorm | abuse_ch |
| 2026-07-11 07:10 | 135.136.134.57:7007 | XWorm | XWorm | abuse_ch |
| 2026-07-09 08:40 | 194.116.236.216:5005 | XWorm | XWorm | abuse_ch |
| 2026-07-09 08:35 | 133.18.165.80:7004 | XWorm | XWorm | abuse_ch |
| 2026-07-08 19:16 | 64.89.162.178:7007 | XWorm | XWorm | abuse_ch |
| 2026-07-08 10:31 | 194.116.236.94:4433 | XWorm | XWorm | abuse_ch |
| 2026-07-07 20:31 | 178.173.247.121:1982 | XWorm | XWorm | abuse_ch |
| 2026-07-07 17:26 | 81.90.31.12:9438 | XWorm | XWorm | abuse_ch |
| 2026-07-07 17:21 | 107.173.143.20:7004 | XWorm | XWorm | abuse_ch |
| 2026-07-07 14:46 | 172.245.244.91:443 | XWorm | XWorm | abuse_ch |
| 2026-07-07 14:20 | currentpi021.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-07-07 13:35 | sourcingallproductsworldwide.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-07-07 12:20 | 194.116.236.223:1717 | XWorm | XWorm | abuse_ch |
| 2026-07-07 12:20 | 31.40.204.237:3322 | XWorm | XWorm | abuse_ch |
| 2026-07-07 11:20 | 207.180.29.85:7004 | XWorm | XWorm | abuse_ch |
| 2026-07-07 11:20 | 207.180.29.217:7004 | XWorm | XWorm | abuse_ch |
| 2026-07-07 06:30 | biesmanscars.biz | XWorm | XWorm | abuse_ch |
| 2026-07-06 21:21 | 217.217.97.75:4445 | XWorm | XWorm | abuse_ch |
| 2026-07-06 12:10 | 185.254.96.128:1605 | XWorm | XWorm | abuse_ch |
| 2026-07-06 09:15 | 217.60.195.172:443 | XWorm | XWorm | abuse_ch |
| 2026-07-02 23:05 | 198.37.105.48:2233 | XWorm | XWorm | abuse_ch |
| 2026-07-02 08:20 | laohen1.myvnc.com | XWorm | XWorm | abuse_ch |
| 2026-07-02 02:55 | 198.23.177.200:4445 | XWorm | XWorm | abuse_ch |
| 2026-07-01 07:00 | 104.239.66.42:7004 | XWorm | XWorm | abuse_ch |
| 2026-06-26 18:20 | 185.194.175.132:4445 | XWorm | XWorm | abuse_ch |
| 2026-06-25 05:40 | 204.10.160.167:443 | XWorm | XWorm | abuse_ch |
| 2026-06-23 08:10 | 94.154.32.52:7004 | XWorm | XWorm | abuse_ch |
| 2026-06-23 08:10 | 91.92.120.66:7004 | XWorm | XWorm | abuse_ch |
| 2026-06-23 08:10 | 104.239.66.11:7004 | XWorm | XWorm | abuse_ch |
| 2026-06-23 08:01 | 155.103.69.160:2839 | XWorm | XWorm | abuse_ch |
| 2026-06-22 15:35 | 38.240.51.74:7004 | XWorm | XWorm | abuse_ch |
| 2026-06-22 15:35 | 216.250.250.247:443 | XWorm | XWorm | abuse_ch |
| 2026-06-22 15:35 | 104.239.66.178:7004 | XWorm | XWorm | abuse_ch |
| 2026-06-22 15:35 | watchthisyear.gotdns.ch | XWorm | XWorm | abuse_ch |
| 2026-06-22 15:25 | 193.104.58.63:1122 | XWorm | XWorm | abuse_ch |
| 2026-06-21 18:25 | aiBot.casacam.net | XWorm | XWorm | abuse_ch |
| 2026-06-18 20:35 | 103.83.87.182:2222 | XWorm | XWorm | abuse_ch |
| 2026-06-18 06:06 | 109.248.150.234:443 | XWorm | XWorm | abuse_ch |
| 2026-06-17 09:26 | 194.116.236.4:2829 | XWorm | XWorm | abuse_ch |
| 2026-06-17 06:15 | demagic009.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-06-15 19:50 | 155.103.71.244:1234 | XWorm | XWorm | abuse_ch |
| 2026-06-15 14:10 | eminley.ydns.eu | XWorm | XWorm | abuse_ch |
| 2026-06-15 13:35 | 172.245.106.54:3333 | XWorm | XWorm | abuse_ch |
| 2026-06-12 22:05 | 195.177.94.56:7004 | XWorm | XWorm | abuse_ch |
| 2026-06-11 15:00 | ogonna.ydns.eu | XWorm | XWorm | abuse_ch |
| 2026-06-11 14:45 | 94.154.32.163:7004 | XWorm | XWorm | abuse_ch |
| 2026-06-11 14:45 | 45.88.91.5:7004 | XWorm | XWorm | abuse_ch |
| 2026-06-09 06:30 | 89.40.31.72:6000 | XWorm | XWorm | abuse_ch |
| 2026-06-08 13:05 | 104.239.66.136:2017 | XWorm | XWorm | abuse_ch |
| 2026-06-08 09:55 | 84.38.129.122:443 | XWorm | XWorm | abuse_ch |
| 2026-06-08 09:40 | 87.120.107.29:1194 | XWorm | XWorm | abuse_ch |
| 2026-06-08 09:20 | 31.56.209.126:1996 | XWorm | XWorm | abuse_ch |
| 2026-06-08 08:55 | 216.250.250.247:8086 | XWorm | XWorm | abuse_ch |
| 2026-06-08 08:50 | 151.244.232.26:443 | XWorm | XWorm | abuse_ch |
| 2026-06-08 08:45 | 107.172.13.245:7007 | XWorm | XWorm | abuse_ch |
| 2026-06-08 08:35 | 31.56.209.92:443 | XWorm | XWorm | abuse_ch |
| 2026-06-08 08:35 | 104.168.7.219:8823 | XWorm | XWorm | abuse_ch |
| 2026-06-08 08:35 | frBvNnnFYR6XR622pBE0NQ== | XWorm | XWorm | abuse_ch |
| 2026-06-06 18:50 | 194.116.236.7:3333 | XWorm | XWorm | abuse_ch |
| 2026-06-05 05:45 | 185.91.127.173:24959 | XWorm | XWorm | abuse_ch |
| 2026-06-04 14:40 | 67.207.166.167:4020 | XWorm | XWorm | abuse_ch |
| 2026-06-04 11:30 | 192.3.171.223:4445 | XWorm | XWorm | abuse_ch |
| 2026-06-04 09:25 | 103.83.86.174:2929 | XWorm | XWorm | abuse_ch |
| 2026-06-04 06:30 | 80.76.49.132:7004 | XWorm | XWorm | abuse_ch |
| 2026-06-04 06:30 | BiMQuT238p64emYwAjhVaw== | XWorm | XWorm | abuse_ch |
| 2026-06-04 06:25 | 45.133.116.16:8823 | XWorm | XWorm | abuse_ch |
| 2026-06-04 06:25 | 104.239.66.86:7004 | XWorm | XWorm | abuse_ch |
| 2026-06-04 05:50 | 155.103.71.146:777 | XWorm | XWorm | abuse_ch |
| 2026-06-03 14:40 | 81.180.93.249:80 | XWorm | c2 shodan XWorm | juroots |
| 2026-06-03 06:40 | laohe4.myvnc.com | XWorm | XWorm | abuse_ch |
| 2026-06-01 06:10 | 82.38.4.40:7004 | XWorm | XWorm | abuse_ch |
| 2026-05-27 18:53 | http://94.159.113.64/a.jpg | XWorm | ClickFix iwr-iex ps-stager XWorm | Lenny_3BO |
| 2026-05-27 18:53 | 37b0e82941af3a9c12e09991411d1b037b9dc516c99a447f1929039f6648d34f | XWorm | dotNET double-ext js-dropper ps-loader XWorm | Lenny_3BO |
| 2026-05-27 18:53 | http://94.159.113.64/b.jpg | XWorm | ClickFix iwr-iex ps-stager XWorm | Lenny_3BO |
| 2026-05-27 18:53 | eb185ca03b1309eb280e66a53545ef8e899c90ebdbd7897c05c11fa9ae3d7dd2 | XWorm | dotNET double-ext js-dropper ps-loader XWorm | Lenny_3BO |
| 2026-05-27 18:53 | 3142ab1bd28b53bb14e4b5edd918c734a2bcdceee81e76b44444d548a93abcb6 | XWorm | dotNET double-ext js-dropper ps-loader XWorm | Lenny_3BO |
| 2026-05-27 18:53 | 074e4567fbe1d97669b64d9fec23678ebbd27633812b37ae3b64271aa2546ba2 | XWorm | dotNET double-ext js-dropper ps-loader XWorm | Lenny_3BO |
| 2026-05-27 18:53 | 12a7502e951fa4922df01a8d69f6dd4a19bbcfa0c0b421ce92888ced54611e3f | XWorm | dotNET double-ext js-dropper ps-loader XWorm | Lenny_3BO |
| 2026-05-26 16:10 | 130.12.181.11:7433 | XWorm | XWorm | abuse_ch |
| 2026-05-22 06:15 | 151.242.63.220:7004 | XWorm | XWorm | abuse_ch |
| 2026-05-21 13:40 | 192.3.243.155:7000 | XWorm | XWorm | abuse_ch |
| 2026-05-20 18:05 | newx3910.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-05-20 18:05 | greekxwl3010.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-05-20 18:05 | greatxil3010.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-05-20 06:05 | globalwealth2026.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-05-20 04:30 | 176.65.139.194:6000 | XWorm | XWorm | abuse_ch |
| 2026-05-19 23:35 | 68.219.64.89:4444 | XWorm | XWorm | abuse_ch |
| 2026-05-12 08:35 | tiktikmod.ru.com | XWorm | XWorm | abuse_ch |
| 2026-05-12 07:45 | brandy.it.com | XWorm | XWorm | abuse_ch |
| 2026-05-11 07:22 | 192.3.171.227:8823 | XWorm | XWorm | abuse_ch |
| 2026-05-11 07:22 | 104.168.5.18:8823 | XWorm | XWorm | abuse_ch |
| 2026-05-10 18:50 | aliexpress.us.com | XWorm | XWorm | abuse_ch |
| 2026-05-08 13:35 | 172.245.155.84:1111 | XWorm | XWorm | abuse_ch |
| 2026-05-08 13:01 | 155.103.71.206:1122 | XWorm | XWorm | abuse_ch |
| 2026-05-08 12:50 | 155.103.71.230:2478 | XWorm | XWorm | abuse_ch |
| 2026-05-07 14:01 | 204.10.160.250:7007 | XWorm | XWorm | abuse_ch |
| 2026-05-06 13:16 | 104.194.132.27:443 | XWorm | XWorm | abuse_ch |
| 2026-05-06 10:10 | dubaitrades.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-05-05 14:25 | 83.142.209.150:1602 | XWorm | XWorm | abuse_ch |
| 2026-05-04 10:31 | 103.83.86.92:3333 | XWorm | XWorm | abuse_ch |
| 2026-05-03 20:26 | 89.124.121.249:3001 | XWorm | XWorm | abuse_ch |
| 2026-05-02 12:15 | 91.92.243.45:7070 | XWorm | XWorm | abuse_ch |
| 2026-05-01 02:05 | 7326.info | XWorm | XWorm | abuse_ch |
| 2026-04-30 07:16 | 158.94.211.33:7017 | XWorm | XWorm | abuse_ch |
| 2026-04-27 09:56 | 91.92.120.68:1985 | XWorm | XWorm | abuse_ch |
| 2026-04-27 09:04 | 203.202.232.149:2222 | XWorm | XWorm | abuse_ch |
| 2026-04-25 23:38 | 87.106.168.15:7004 | XWorm | XWorm | abuse_ch |
| 2026-04-24 14:06 | 203.202.232.132:2828 | XWorm | XWorm | abuse_ch |
| 2026-04-23 09:45 | 43.157.17.38:2323 | XWorm | XWorm | abuse_ch |
| 2026-04-23 07:13 | 178.16.53.62:2772 | XWorm | XWorm | abuse_ch |
| 2026-04-21 22:08 | 45.157.233.139:25565 | XWorm | XWorm | abuse_ch |
| 2026-04-21 08:07 | 209.99.188.19:8777 | XWorm | XWorm | abuse_ch |
| 2026-04-20 23:06 | 46.151.182.197:7007 | XWorm | XWorm | abuse_ch |
| 2026-04-20 23:05 | cloud.lurstanmailer.com | XWorm | XWorm | abuse_ch |
| 2026-04-20 22:51 | 179.43.176.101:443 | XWorm | XWorm | abuse_ch |
| 2026-04-20 22:50 | dpunk.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-04-20 15:18 | 45.141.148.126:1122 | XWorm | XWorm | abuse_ch |
| 2026-04-17 14:33 | 31.56.209.54:8800 | XWorm | XWorm | abuse_ch |
| 2026-04-17 14:33 | 209.127.35.204:2662 | XWorm | XWorm | abuse_ch |
| 2026-04-17 14:32 | 172.245.209.162:1122 | XWorm | XWorm | abuse_ch |
| 2026-04-17 13:39 | 209.99.187.182:63244 | XWorm | XWorm | abuse_ch |
| 2026-04-17 12:05 | cablestreamstore.com | XWorm | XWorm | abuse_ch |
| 2026-04-17 11:26 | 2.27.160.11:8558 | XWorm | XWorm | abuse_ch |
| 2026-04-15 12:01 | zebi.kozow.com | XWorm | c2 domain triage XWorm |  DonPasci |
| 2026-04-15 12:01 | zebi.giize.com | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-15 12:01 | noajadfylf.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-15 08:12 | 172.245.209.160:2478 | XWorm | XWorm | abuse_ch |
| 2026-04-15 06:00 | 168.222.97.15:8001 | XWorm | c2 triage XWorm | DonPasci |
| 2026-04-14 18:01 | egym7md-64674.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-14 18:01 | kokymrgy2000.hopto.org | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-14 18:01 | hacker76413312-39033.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-14 18:01 | sdlpsajdioasjd-60039.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-14 18:01 | 45.83.31.50:7658 | XWorm | AS210558 c2 triage XWorm | DonPasci |
| 2026-04-14 12:01 | rdqnbcayzh.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-14 12:01 | abo3li-50042.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-14 12:01 | 172.245.244.81:1412 | XWorm | AS36352 c2 triage XWorm | DonPasci |
| 2026-04-14 07:11 | 209.54.101.154:2477 | XWorm | XWorm | abuse_ch |
| 2026-04-14 06:01 | subscript-breadth.with.playit.plus | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-14 06:01 | gasgasgaaxas-58063.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-14 06:01 | newhoperediff.ddnsgeek.com | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-14 06:01 | newhopereddif.duckdns.org | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-14 06:01 | hopenewrediff.duckdns.org | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-14 06:01 | overgaainweb.ddnsgeek.com | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-14 06:01 | overgainweb.duckdns.org | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-14 06:01 | 46.151.182.18:5500 | XWorm | AS205759 c2 triage XWorm | DonPasci |
| 2026-04-13 18:01 | 31.56.209.14:8200 | XWorm | AS48678 c2 triage XWorm | DonPasci |
| 2026-04-13 18:01 | 185.213.155.231:7004 | XWorm | AS39351 c2 triage XWorm | DonPasci |
| 2026-04-13 18:01 | opportification.jp.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-13 18:01 | rgwr.sa.com | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-13 13:26 | 31.56.209.56:5900 | XWorm | XWorm | abuse_ch |
| 2026-04-13 12:00 | 209.54.101.190:1122 | XWorm | AS36352 c2 triage XWorm | DonPasci |
| 2026-04-12 19:01 | 147.124.213.101:1985 | XWorm | XWorm | abuse_ch |
| 2026-04-12 06:00 | deathtoall-43710.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-12 06:00 | deathtoall-38456.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-12 06:00 | kurkupa-robux.ru | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-12 06:00 | shee5kmm.3utilities.com | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-12 02:01 | SerdyuK2-50934.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-04-11 12:00 | pionernastoyashi-51662.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-11 12:00 | mh0-44853.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-11 10:01 | 156.238.239.253:7000 | XWorm | XWorm | dyingbreeds_ |
| 2026-04-10 18:00 | dacy-50399.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-10 18:00 | migueldias111-45351.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-10 02:30 | 2.27.63.221:3250 | XWorm | XWorm | dyingbreeds_ |
| 2026-04-10 02:29 | AFl2TON707-34858.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-04-09 22:02 | rthbtrhyyrdbrt-37741.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-04-09 18:00 | geoor-22593.portmap.io | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-09 18:00 | 95.216.226.121:6000 | XWorm | AS24940 c2 triage XWorm | DonPasci |
| 2026-04-09 18:00 | 82.26.74.177:121 | XWorm | AS213200 c2 triage XWorm | DonPasci |
| 2026-04-09 10:01 | 216.250.253.161:6000 | XWorm | XWorm | dyingbreeds_ |
| 2026-04-09 06:00 | chat.ttseokitty.com | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-09 02:01 | Adamdasdadad-47266.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-04-08 18:00 | all.ddnsskey.com | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-08 18:00 | 45.153.34.27:443 | XWorm | AS51396 c2 triage XWorm | DonPasci |
| 2026-04-08 18:00 | 38.87.116.37:2137 | XWorm | AS174 c2 triage XWorm | DonPasci |
| 2026-04-08 06:00 | 31.56.209.80:1996 | XWorm | AS48678 c2 triage XWorm | DonPasci |
| 2026-04-07 22:01 | heather-goblet.with.playit.plus | XWorm | XWorm | dyingbreeds_ |
| 2026-04-07 18:00 | 3ed5lh-ip-178-214-244-87.tunnelmole.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-07 18:00 | jxp1ms-ip-178-214-244-87.tunnelmole.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-07 10:36 | 192.3.45.7:28288 | XWorm | XWorm | abuse_ch |
| 2026-04-07 10:02 | abdullah788-37389.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-04-07 10:01 | catdogfree300-43400.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-04-07 02:01 | jce85opnb7.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-04-07 02:01 | 1yyx5olkch.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-04-06 18:02 | 193.161.193.99:7777 | XWorm | XWorm | dyingbreeds_ |
| 2026-04-06 18:00 | 51.195.109.77:2137 | XWorm | AS16276 c2 triage XWorm | DonPasci |
| 2026-04-06 14:01 | 91.236.186.56:23306 | XWorm | XWorm | dyingbreeds_ |
| 2026-04-06 12:00 | 173.205.83.196:3210 | XWorm | AS207083 c2 triage XWorm | DonPasci |
| 2026-04-06 02:01 | bossgsaghdh-62973.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-04-06 02:01 | 193.233.19.233:5552 | XWorm | XWorm | dyingbreeds_ |
| 2026-04-05 18:01 | 5.42.92.37:7777 | XWorm | XWorm | dyingbreeds_ |
| 2026-04-05 18:00 | 179.118.199.252:7771 | XWorm | AS26599 c2 triage XWorm | DonPasci |
| 2026-04-05 15:26 | 8.148.5.193:12748 | XWorm | XWorm | abuse_ch |
| 2026-04-05 10:01 | 95.70.183.89:90 | XWorm | XWorm | dyingbreeds_ |
| 2026-04-05 02:01 | ghfjfgj57765r67ghght-56660.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-04-04 22:01 | browser-hazard.gl.at.ply.gg | XWorm | XWorm | dyingbreeds_ |
| 2026-04-04 22:01 | 82.26.74.167:48291 | XWorm | XWorm | dyingbreeds_ |
| 2026-04-04 14:01 | frozen-nicotine.with.playit.plus | XWorm | XWorm | dyingbreeds_ |
| 2026-04-04 12:00 | girl-tries.gl.at.ply.gg | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-04 12:00 | 93.88.203.34:26880 | XWorm | AS213220 c2 triage XWorm | DonPasci |
| 2026-04-04 12:00 | 104.200.72.111:8382 | XWorm | AS199959 c2 triage XWorm | DonPasci |
| 2026-04-04 12:00 | marxrwonew9090.duckdns.org | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-04 10:01 | 151.242.63.2:7000 | XWorm | XWorm | dyingbreeds_ |
| 2026-04-04 06:00 | snickerbarwithhotsauceonit-51791.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-04 02:01 | notes-ease.gl.at.ply.gg | XWorm | XWorm | dyingbreeds_ |
| 2026-04-03 22:01 | vrtuall-42047.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-04-03 18:00 | 178.16.52.78:7777 | XWorm | AS202412 c2 triage XWorm | DonPasci |
| 2026-04-03 18:00 | burb-34671.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-03 18:00 | 144.31.237.190:1498 | XWorm | c2 triage XWorm | DonPasci |
| 2026-04-03 14:01 | febxworm39090.duckdns.org | XWorm | XWorm | dyingbreeds_ |
| 2026-04-03 14:01 | contatopacn-56157.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-04-03 12:00 | 192.99.190.119:7000 | XWorm | AS16276 c2 triage XWorm | DonPasci |
| 2026-04-03 12:00 | fpzmgxdblu.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-03 12:00 | doz6060xwo.duckdns.org | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-03 12:00 | widely-revenue.gl.at.ply.gg | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-03 12:00 | cxoljbb9p0.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-03 10:01 | alm72rb-37531.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-04-03 06:01 | 147.185.221.26:43608 | XWorm | XWorm | dyingbreeds_ |
| 2026-04-03 06:00 | 104.193.255.40:7070 | XWorm | AS14576 c2 triage XWorm | DonPasci |
| 2026-04-03 06:00 | 2.56.165.69:911 | XWorm | AS204914 c2 triage XWorm | DonPasci |
| 2026-04-02 22:01 | 217.154.6.255:7004 | XWorm | XWorm | dyingbreeds_ |
| 2026-04-02 22:01 | she55.ddnsking.com | XWorm | XWorm | dyingbreeds_ |
| 2026-04-02 18:01 | cxtsee09ky.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-02 14:02 | 146.158.123.140:2083 | XWorm | XWorm | dyingbreeds_ |
| 2026-04-02 12:01 | lol42647-45750.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-02 12:01 | skynet2.ydns.eu | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-04-02 10:02 | names-again.at.playit.gg | XWorm | XWorm | dyingbreeds_ |
| 2026-04-02 02:01 | kvhce4pcgf.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-04-02 01:53 | 147.185.221.17:11977 | XWorm | XWorm | dyingbreeds_ |
| 2026-04-01 18:00 | 114.207.112.13:2007 | XWorm | AS9318 c2 triage XWorm | DonPasci |
| 2026-04-01 17:30 | cdnst.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-04-01 06:00 | 138.201.106.62:7004 | XWorm | AS24940 c2 triage XWorm | DonPasci |
| 2026-04-01 02:01 | AnderDingus.aamothership.com | XWorm | XWorm | dyingbreeds_ |
| 2026-03-31 22:01 | voidbebr-48949.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-31 18:00 | 81.159.116.2:7000 | XWorm | AS2856 c2 triage XWorm | DonPasci |
| 2026-03-31 18:00 | qqxylozz-56474.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-31 14:01 | 194.156.79.140:9019 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-31 10:01 | 194.116.236.247:1222 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-31 06:50 | machineryde.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-03-31 06:00 | 9vun520l.aamothership.com | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-31 06:00 | jvuqdwzk.aamothership.com | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-31 02:01 | q4k7uphvys.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-31 02:01 | kdxho645fm.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-30 22:01 | lol42647-37621.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-30 18:01 | 103.83.87.178:2001 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-30 18:00 | 0kkp6fidn.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-30 10:01 | 151.245.112.70:7007 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-30 02:01 | acannaaaaa-32635.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-30 02:01 | fnhztgxdqg.a.pinggy.link | XWorm | XWorm | dyingbreeds_ |
| 2026-03-29 22:01 | 217.43.209.189:6666 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-29 22:01 | acannaaaaa-46963.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-29 22:01 | SigmaBoy1234567-46132.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-29 18:00 | xixixisad-37873.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-29 16:30 | zrsexetk0.localto.net | XWorm | XWorm | abuse_ch |
| 2026-03-29 16:30 | evpsbokvqh.localto.net | XWorm | XWorm | abuse_ch |
| 2026-03-29 14:01 | fzotnmreqj.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-29 14:01 | 185.73.126.186:8808 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-29 12:00 | 87.120.117.209:7000 | XWorm | c2 triage XWorm | DonPasci |
| 2026-03-29 12:00 | 193.233.19.97:5485 | XWorm | AS63023 c2 triage XWorm | DonPasci |
| 2026-03-29 06:03 | lixcerxo0x-61297.portmap.host | XWorm | c2 XWorm | juroots |
| 2026-03-29 06:02 | https://pastebin.com/raw/BUKERxVj | XWorm | c2 XWorm | juroots |
| 2026-03-29 06:00 | barodh2ckerr-36722.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-28 23:01 | fuckniggers69420911-30770.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-28 23:01 | RATTEDNIGGERS-60092.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-28 23:01 | 45.131.46.14:22122 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-28 11:01 | 103.254.110.56:6099 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-28 11:01 | ragefgs-36179.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-28 11:01 | 23.tcp.cpolar.top | XWorm | XWorm | dyingbreeds_ |
| 2026-03-28 03:01 | 161.35.110.36:41978 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-27 23:01 | 76.13.152.176:9000 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-27 19:02 | 144.31.48.132:34556 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-27 19:01 | 144.31.48.132:44556 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-27 18:00 | 163.5.210.247:25565 | XWorm | AS399486 c2 triage XWorm | DonPasci |
| 2026-03-27 18:00 | niggaboo32-34796.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-27 15:01 | fahadx700-35249.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-27 12:00 | airlight-46647.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-27 06:00 | 45.88.9.140:6000 | XWorm | AS204914 c2 triage XWorm | DonPasci |
| 2026-03-26 21:13 | 91.92.240.127:6000 | XWorm | XWorm | abuse_ch |
| 2026-03-26 19:02 | 83.217.209.98:1111 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-26 15:02 | 212.162.148.16:4040 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-26 11:01 | tcp4.tunnel4.com | XWorm | XWorm | dyingbreeds_ |
| 2026-03-26 09:11 | 45.83.207.90:7000 | XWorm | XWorm | abuse_ch |
| 2026-03-26 09:11 | 45.141.26.201:7004 | XWorm | XWorm | abuse_ch |
| 2026-03-26 08:16 | 194.110.172.159:1995 | XWorm | XWorm | abuse_ch |
| 2026-03-26 07:01 | 18.tcp.cpolar.top | XWorm | XWorm | dyingbreeds_ |
| 2026-03-25 23:01 | 9fzkfyhbtr.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-25 23:01 | 12.tcp.cpolar.top | XWorm | XWorm | dyingbreeds_ |
| 2026-03-25 18:00 | goober420-36534.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-25 16:43 | mkkf8237-31070.portmap.host | XWorm | c2 XWorm | juroots |
| 2026-03-25 16:43 | jacethegoat178-48145.portmap.host | XWorm | c2 XWorm | juroots |
| 2026-03-25 16:43 | Strike-35725.portmap.host | XWorm | c2 XWorm | juroots |
| 2026-03-25 16:42 | https://pastebin.com/raw/frTxisXL | XWorm | c2 XWorm | juroots |
| 2026-03-25 12:51 | 192.154.241.18:3333 | XWorm | XWorm | abuse_ch |
| 2026-03-25 11:01 | 94.154.32.16:6000 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-25 08:45 | madeinchina.minhacasa.tv | XWorm | XWorm | abuse_ch |
| 2026-03-25 06:00 | adfg.exfrp.sbs | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-25 06:00 | 41.104.161.128:1605 | XWorm | AS36947 c2 triage XWorm | DonPasci |
| 2026-03-25 03:02 | 151.243.109.36:10134 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-25 03:02 | ks48f3vnga.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-24 23:01 | shahkkkk-45956.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-24 23:01 | ashashh-64209.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-24 23:01 | optic-handsets.with.playit.plus | XWorm | XWorm | dyingbreeds_ |
| 2026-03-24 19:01 | 172.111.136.159:6000 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-24 19:01 | 8.tcp.vip.cpolar.cn | XWorm | XWorm | dyingbreeds_ |
| 2026-03-24 15:02 | sadasdada511-31947.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-24 15:02 | asdasdasda2-41912.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-24 15:02 | asjdajsd22-41755.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-24 06:00 | importgenius.duckdns.org | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-24 06:00 | r54-45345.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-24 03:41 | 151.243.109.36:6000 | XWorm | XWorm | abuse_ch |
| 2026-03-24 03:01 | 87.120.120.15:31952 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-23 23:01 | sigmatopki-60241.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-23 23:01 | lnescgkwgt.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-23 23:01 | lvwjo2n0w3.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-23 23:01 | 172.245.195.216:4005 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-23 15:01 | PlushEditz-49070.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-23 12:00 | 143.14.44.51:1337 | XWorm | AS213200 c2 triage XWorm | DonPasci |
| 2026-03-23 12:00 | 45.88.9.160:4444 | XWorm | AS204914 c2 triage XWorm | DonPasci |
| 2026-03-23 11:01 | 192.154.241.18:1960 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-23 11:01 | ayodhh-30917.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-23 03:01 | 91.238.123.18:7644 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-23 03:01 | jbbjbjkb-61631.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-22 23:01 | zqw16kp0nv.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-22 23:01 | d5nnast9u1.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-22 19:01 | 24.tcp.cpolar.top | XWorm | XWorm | dyingbreeds_ |
| 2026-03-22 18:02 | 45.74.34.167:6000 | XWorm | XWorm | Anonymous |
| 2026-03-22 18:00 | underfed-task.with.playit.plus | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-22 18:00 | zbzd-56945.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-22 18:00 | miningworker1-33706.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-22 15:01 | 144.31.48.132:3356 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-22 06:00 | yodhhasdasf-39007.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-22 03:01 | Iscape-31656.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-21 15:01 | 12.tcp.vip.cpolar.cn | XWorm | XWorm | dyingbreeds_ |
| 2026-03-21 15:01 | 147.185.221.27:20 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-21 15:01 | 147.185.221.27:13700 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-21 15:01 | asdafsdafdfa-63185.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-21 12:00 | ayodhaltbohy-59438.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-21 11:01 | Dexvsy-41268.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-21 11:01 | doulovemedoudou.duckdns.org | XWorm | XWorm | dyingbreeds_ |
| 2026-03-21 11:01 | 193.161.193.99:1024 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-20 23:01 | france-unsafe.gl.at.ply.gg | XWorm | XWorm | dyingbreeds_ |
| 2026-03-20 15:01 | sinpidorasa228nixware-44719.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-20 13:03 | 172.93.164.102:6000 | XWorm | AS18450 c2 WEBNX XWorm | DonPasci |
| 2026-03-20 13:03 | 167.114.48.166:7007 | XWorm | AS16276 c2 OVH XWorm | DonPasci |
| 2026-03-20 13:03 | 146.70.143.166:1012 | XWorm | AS9009 c2 M247 XWorm | DonPasci |
| 2026-03-20 13:03 | 38.247.145.235:7007 | XWorm | AS32097 c2 WII XWorm | DonPasci |
| 2026-03-20 13:03 | 15.229.150.214:7000 | XWorm | AMAZON-02 AS16509 c2 XWorm | DonPasci |
| 2026-03-20 06:00 | envi11marz.duckdns.org | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-19 23:02 | 94.154.32.93:6000 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-19 18:01 | 192.3.136.197:6000 | XWorm | AS36352 c2 triage XWorm | DonPasci |
| 2026-03-19 14:10 | 69.61.36.229:2080 | XWorm | XWorm | abuse_ch |
| 2026-03-19 11:01 | kellydarosa.ddns.com.br | XWorm | XWorm | dyingbreeds_ |
| 2026-03-19 06:00 | 34.39.197.251:6000 | XWorm | AS396982 c2 triage XWorm | DonPasci |
| 2026-03-19 03:02 | ayidhh-48261.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-19 03:01 | aliowiasidaids-62178.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-19 03:01 | sex4fun.duckdns.org | XWorm | XWorm | dyingbreeds_ |
| 2026-03-18 23:01 | 41.45.156.241:5505 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-18 18:00 | 154.219.104.140:7007 | XWorm | AS401701 c2 triage XWorm | DonPasci |
| 2026-03-18 15:01 | 158.94.210.181:8900 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-18 13:45 | 217.217.251.213:7000 | XWorm | XWorm | abuse_ch |
| 2026-03-18 11:01 | fxtun.dev | XWorm | XWorm | dyingbreeds_ |
| 2026-03-18 09:40 | globalsourcesinc.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-03-18 06:00 | sh67h.fun | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-17 23:01 | asd.exfrp.sbs | XWorm | XWorm | dyingbreeds_ |
| 2026-03-17 21:06 | 156.233.71.230:4040 | XWorm | XWorm | abuse_ch |
| 2026-03-17 21:05 | 156.233.71.222:4040 | XWorm | XWorm | abuse_ch |
| 2026-03-17 20:55 | slashxx.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-03-17 20:50 | 20.175.100.73:7004 | XWorm | XWorm | abuse_ch |
| 2026-03-17 16:15 | envio11.ddnsguru.com | XWorm | XWorm | abuse_ch |
| 2026-03-17 11:01 | Soofunny-64517.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-17 06:00 | njmiscoming.ddns.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-17 06:00 | 1.tcp.vip.cpolar.cn | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-17 03:01 | 104.128.191.108:2398 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-16 18:00 | 185.29.11.70:8018 | XWorm | AS203557 c2 triage XWorm | DonPasci |
| 2026-03-16 18:00 | su9yfgcpt1.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-16 15:01 | 198.23.175.59:2388 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-16 11:01 | 69.61.84.201:2389 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-16 07:01 | 90.100.52.173:1337 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-16 06:00 | xdm434-42444.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-16 03:01 | connect.xdmserverconnect.website | XWorm | XWorm | dyingbreeds_ |
| 2026-03-15 23:01 | grannyboosted-33522.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-15 23:01 | ycqsf-93-171-240-170.a.free.pinggy.link | XWorm | XWorm | dyingbreeds_ |
| 2026-03-15 23:01 | 212.227.93.216:1000 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-15 19:01 | 144.31.12.196:57942 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-15 15:01 | 192.3.176.253:7004 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-15 15:01 | ugvsss-39887.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-15 12:00 | 176.65.139.46:1337 | XWorm | c2 triage XWorm | DonPasci |
| 2026-03-15 12:00 | ulia111-35403.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-15 11:01 | catoooomw.ddnsfree.com | XWorm | XWorm | dyingbreeds_ |
| 2026-03-15 11:01 | 45.157.233.46:25565 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-15 06:48 | http://158.94.211.208/OBOXW2026.txt | XWorm | OBOXW2026 Omegatech staging XWorm | Lenny_3BO |
| 2026-03-15 06:48 | 103.83.87.178:1990 | XWorm | c2 XWorm | Lenny_3BO |
| 2026-03-15 06:48 | mail.clearvwtp.shop | XWorm | email_infrastructure phishing XWorm | Lenny_3BO |
| 2026-03-15 06:48 | tur.applecloud.com.co | XWorm | Apple_impersonation phishing turkey XWorm | Lenny_3BO |
| 2026-03-15 06:48 | mail.wetradetra.cfd | XWorm | email_infrastructure phishing XWorm | Lenny_3BO |
| 2026-03-15 06:48 | mail.wetrasogo.shop | XWorm | email_infrastructure phishing XWorm | Lenny_3BO |
| 2026-03-14 23:01 | 94.156.179.152:62064 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-14 19:30 | sacromante.availinfra.cam | XWorm | XWorm | abuse_ch |
| 2026-03-14 19:30 | dextecrop.availinfra.cam | XWorm | XWorm | abuse_ch |
| 2026-03-14 19:30 | belazay.availinfra.cam | XWorm | XWorm | abuse_ch |
| 2026-03-14 19:15 | 192.159.99.224:7007 | XWorm | XWorm | abuse_ch |
| 2026-03-14 18:00 | 25.tcp.cpolar.top | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-14 12:00 | 91.202.5.158:2129 | XWorm | AS43641 c2 triage XWorm | DonPasci |
| 2026-03-13 23:01 | 157.245.45.38:7771 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-13 23:01 | fkeasfodsfkefoapdsofkp-38135.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-13 19:01 | effect-decide.gl.at.ply.gg | XWorm | XWorm | dyingbreeds_ |
| 2026-03-13 12:00 | subscribe-marina.gl.at.ply.gg | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-13 11:01 | belawer.duckdns.org | XWorm | XWorm | dyingbreeds_ |
| 2026-03-13 06:13 | 656991f4dabe0e5d989be730dac86a2cf294b6b538b08d7db7a0a72f0c6c484b | XWorm | Loader steganography XWorm | Lenny_3BO |
| 2026-03-13 06:13 | b73ce45f837e67b2f81565c63c8601ec0b89360101331f89fc6821e2fb60a7f6 | XWorm | RAT XWorm xworm-v5.6 | Lenny_3BO |
| 2026-03-13 06:13 | ecdaa31802b6a8ef94fbc3f16da5068c6f126876af0b9c964a915a556194a1f9 | XWorm | Dropper JScript obfuscation XWorm | Lenny_3BO |
| 2026-03-13 06:13 | 34e90568af4dcd40f4f04174ec326e2a | XWorm | Loader process-hollowing trojanized-library XWorm | Lenny_3BO |
| 2026-03-13 06:13 | 158.94.211.208:443 | XWorm | staging steganography XWorm | Lenny_3BO |
| 2026-03-13 03:01 | mouftakhiramin-53951.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-12 18:00 | yukilotaev-44610.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-12 18:00 | yukilotaev-51407.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-12 18:00 | 194.116.236.27:2026 | XWorm | AS44382 c2 triage WHITELABEL XWorm | DonPasci |
| 2026-03-12 18:00 | 94.156.179.152:61262 | XWorm | AS215439 c2 triage XWorm | DonPasci |
| 2026-03-12 12:00 | 150.241.70.126:8848 | XWorm | AS401152 c2 triage XWorm | DonPasci |
| 2026-03-11 23:01 | datahawk.duckdns.org | XWorm | XWorm | dyingbreeds_ |
| 2026-03-11 23:01 | datah.ddns.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-11 23:01 | 62.45.223.212:7000 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-11 19:01 | sawkech-42998.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-11 18:00 | trungtammmo.vn | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-11 08:30 | 192.3.176.252:8780 | XWorm | XWorm | abuse_ch |
| 2026-03-11 08:10 | 158.94.210.210:5590 | XWorm | XWorm | abuse_ch |
| 2026-03-11 07:01 | 216.250.252.227:443 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-11 06:00 | mu19rs2vmk.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-11 06:00 | soe8j24fm3.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-10 23:01 | 162.246.185.228:6000 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-10 15:01 | 85.137.253.58:9090 | XWorm | XWorm | abuse_ch |
| 2026-03-10 06:00 | driftit-34835.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-10 03:01 | windowsupdateservice.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-10 03:01 | 6.tcp.vip.cpolar.cn | XWorm | XWorm | dyingbreeds_ |
| 2026-03-09 20:02 | 85.137.253.58:9000 | XWorm | AS215428 c2 censys open-dir SHINOMIYA XWorm | DonPasci |
| 2026-03-09 18:00 | tax-fc.gl.at.ply.gg | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-09 11:01 | Dreem-45850.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-09 11:01 | shown-mario.gl.at.ply.gg | XWorm | XWorm | dyingbreeds_ |
| 2026-03-09 11:01 | skin-greece.gl.at.ply.gg | XWorm | XWorm | dyingbreeds_ |
| 2026-03-09 04:01 | 151.240.151.123:80 | XWorm | AS207043 c2 censys DEDIK-IO open-dir XWorm | DonPasci |
| 2026-03-08 23:01 | aurmouse-30157.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-08 23:01 | 45.87.63.80:7000 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-08 19:01 | 193.25.251.10:7004 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-08 19:01 | sxxpv-193-25-251-10.a.free.pinggy.link | XWorm | XWorm | dyingbreeds_ |
| 2026-03-08 18:00 | matidiax1-58523.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-08 15:02 | uz8vz5cpm6.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-08 12:00 | 192.227.135.212:2662 | XWorm | AS36352 c2 triage XWorm | DonPasci |
| 2026-03-08 11:02 | rqtankvea.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-08 11:01 | cou369ppsh.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-08 06:00 | 19.tcp.cpolar.top | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-08 04:01 | 151.240.151.123:443 | XWorm | AS207043 c2 censys DEDIK-IO open-dir XWorm | DonPasci |
| 2026-03-07 15:01 | gravefrnothere-40108.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-07 11:01 | 85.209.231.90:7007 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-07 11:01 | 0qbwh6hprn.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-07 03:01 | wgDV1FDEQGBTBTRBh3-35046.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-06 23:02 | laohen29.myvnc.com | XWorm | XWorm | dyingbreeds_ |
| 2026-03-06 21:40 | 212.28.188.80:9090 | XWorm | XWorm | abuse_ch |
| 2026-03-06 19:01 | pidoras6742-56928.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-06 18:00 | arklen-64027.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-06 18:00 | jaheya5849-64670.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-06 15:40 | 107.172.13.251:2888 | XWorm | XWorm | abuse_ch |
| 2026-03-06 15:02 | fsocietyserver-63331.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-06 15:02 | fusldhtp5.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-06 12:00 | shadowlogikov-33583.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-06 12:00 | fsocietyserver-38405.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-06 11:02 | hyblazemc.myddns.me | XWorm | XWorm | dyingbreeds_ |
| 2026-03-06 11:02 | 209.25.141.23:1094 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-06 11:02 | 193.161.193.99:5520 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-06 11:02 | Doghan-52372.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-06 11:02 | 193.161.193.99:52372 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-06 07:01 | rajkumarred.duckdns.org | XWorm | XWorm | dyingbreeds_ |
| 2026-03-06 07:01 | rajkumarred.ddnsgeek.com | XWorm | XWorm | dyingbreeds_ |
| 2026-03-06 07:01 | 212.11.64.215:4400 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-06 03:01 | lamon.ddns.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-05 23:02 | getting-acquisitions.gl.at.ply.gg | XWorm | XWorm | dyingbreeds_ |
| 2026-03-05 19:01 | Dldo3-53471.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-05 11:02 | 107.172.13.248:8787 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-05 08:05 | 94.154.32.40:8383 | XWorm | XWorm | abuse_ch |
| 2026-03-05 03:01 | nvd9pk2u4h.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-03-05 03:01 | niggerbigertrigger-40627.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-04 23:01 | lynx1test111-35010.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-04 18:00 | 193.221.201.76:1111 | XWorm | AS215826 c2 triage XWorm | DonPasci |
| 2026-03-04 15:02 | valid-witnesses.gl.at.ply.gg | XWorm | XWorm | dyingbreeds_ |
| 2026-03-04 12:00 | 84.181.175.173:4444 | XWorm | AS3320 c2 triage XWorm | DonPasci |
| 2026-03-04 12:00 | unitedclassifiedsourcinginc.duckdns.org | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-04 06:00 | service.hsjyxx.com | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-04 06:00 | web.vx.ink | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-04 06:00 | web.yg.ink | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-04 06:00 | system.vx.ink | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-04 06:00 | system.yg.ink | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-04 03:01 | 95.90.186.240:4444 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-04 03:01 | 9.tcp.cpolar.top | XWorm | XWorm | dyingbreeds_ |
| 2026-03-03 18:00 | 194.87.54.114:6666 | XWorm | AS57043 c2 triage XWorm | DonPasci |
| 2026-03-03 15:02 | 1.230.16.57:5050 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-03 09:14 | app-google3.duckdns.org | XWorm | c2 XWorm | juroots |
| 2026-03-03 06:00 | ynvgx9hh15.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-02 15:02 | unease-liens.with.playit.plus | XWorm | XWorm | dyingbreeds_ |
| 2026-03-02 15:02 | 94.154.32.18:8383 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-02 11:50 | dianganadores.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-03-02 11:02 | 82.158.88.101:7000 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-02 08:17 | 176.65.132.10:6000 | XWorm | c2 XWorm | juroots |
| 2026-03-02 08:16 | https://pastebin.com/raw/Rq7yMK0W | XWorm | c2 XWorm | juroots |
| 2026-03-01 23:02 | ceee.zapto.org | XWorm | XWorm | dyingbreeds_ |
| 2026-03-01 23:02 | integral2048-47645.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-03-01 23:02 | february-authors.gl.at.ply.gg | XWorm | XWorm | dyingbreeds_ |
| 2026-03-01 11:10 | hlgzssmbz.localto.net | XWorm | XWorm | abuse_ch |
| 2026-03-01 11:02 | 151.241.154.244:80 | XWorm | XWorm | dyingbreeds_ |
| 2026-03-01 08:36 | efebudaktr.duckdns.org | XWorm | c2 XWorm | juroots |
| 2026-03-01 08:01 | 84.201.14.2:80 | XWorm | AS214036 c2 censys open-dir ULTAHOST-AS XWorm | DonPasci |
| 2026-03-01 06:00 | qdasvwggwt24t2wdw-57582.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-01 06:00 | fkeasfodsfkefoapdsofkp-64534.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-03-01 04:01 | 84.201.14.2:443 | XWorm | AS214036 c2 censys open-dir ULTAHOST-AS XWorm | DonPasci |
| 2026-03-01 03:02 | fkeasfodsfkefoapdsofkp-45692.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-02-28 12:00 | fdasfsd-51675.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-28 06:01 | a.pinggy.io | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-28 06:01 | 209.25.140.25:27034 | XWorm | AS400519 c2 triage XWorm | DonPasci |
| 2026-02-28 06:01 | unenvied-saskatoon.with.playit.plus | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-28 06:01 | 5mux6rtj8.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-28 06:00 | 7v4hd5u6r.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-27 17:20 | 198.23.175.51:4078 | XWorm | XWorm | abuse_ch |
| 2026-02-27 12:00 | 31.57.97.69:34245 | XWorm | AS213200 c2 triage XWorm | DonPasci |
| 2026-02-27 12:00 | 158.94.211.151:1605 | XWorm | AS202412 c2 triage XWorm | DonPasci |
| 2026-02-27 10:28 | 193.161.193.99:64203 | XWorm | c2 XWorm | juroots |
| 2026-02-27 10:27 | milkai2002-61901.portmap.host | XWorm | c2 XWorm | juroots |
| 2026-02-27 10:27 | fkeasfodsfkefoapdsofkp-64203.portmap.host | XWorm | c2 XWorm | juroots |
| 2026-02-27 10:27 | https://pastebin.com/raw/guvRQaLJ | XWorm | c2 XWorm | juroots |
| 2026-02-27 06:00 | 193.222.99.44:6000 | XWorm | AS215439 c2 triage XWorm | DonPasci |
| 2026-02-27 06:00 | indahoodd.ddns.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-27 06:00 | 185.249.197.163:666 | XWorm | AS206996 c2 triage XWorm | DonPasci |
| 2026-02-26 18:00 | classes-cap.gl.joinmc.link | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-26 15:02 | 185.216.71.155:54321 | XWorm | XWorm | dyingbreeds_ |
| 2026-02-26 11:02 | 216.250.252.227:80 | XWorm | XWorm | dyingbreeds_ |
| 2026-02-25 23:02 | gardian0mar1on-64077.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-02-25 11:02 | xoeyxsife-53554.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-02-25 11:02 | 45.144.212.94:8823 | XWorm | XWorm | dyingbreeds_ |
| 2026-02-25 11:02 | nz5umskcf.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-02-25 11:02 | 84.38.129.7:8018 | XWorm | XWorm | dyingbreeds_ |
| 2026-02-25 06:01 | womanless-assurance.gl.at.ply.gg | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-25 06:01 | envi2026fe.duckdns.org | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-24 18:01 | 185.98.168.28:32865 | XWorm | AS212238 c2 triage XWorm | DonPasci |
| 2026-02-24 18:01 | xword5.duckdns.org | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-23 23:02 | 41.105.137.137:1605 | XWorm | XWorm | dyingbreeds_ |
| 2026-02-23 15:02 | max-acknowledge.gl.at.ply.gg | XWorm | XWorm | dyingbreeds_ |
| 2026-02-23 12:01 | 151.241.154.193:7007 | XWorm | AS399486 c2 triage XWorm | DonPasci |
| 2026-02-23 11:55 | 198.23.175.46:4078 | XWorm | XWorm | abuse_ch |
| 2026-02-23 06:01 | trymeonce-63682.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-23 03:01 | fkeasfodsfkefoapdsofkp-33083.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-02-22 18:01 | idk123456789012-51385.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-22 06:02 | egtwax65c.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-22 03:02 | xoeyxsife-33031.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-02-22 03:01 | 193.161.193.99:40701 | XWorm | XWorm | dyingbreeds_ |
| 2026-02-21 18:01 | cyaiylzj6.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-21 18:01 | vanillacakeyoutube-52569.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-21 13:15 | 118.107.16.253:7004 | XWorm | XWorm | abuse_ch |
| 2026-02-21 06:01 | porfs.servehalflife.com | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-21 03:02 | fahadx700-53150.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-02-21 03:02 | jcy98d7wk.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-02-20 23:02 | 8i5lypxm6.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-02-20 15:05 | 1t7qbrm9t.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-02-20 08:50 | xworm2026.ddns.net | XWorm | XWorm | abuse_ch |
| 2026-02-20 07:46 | 23.94.252.101:7000 | XWorm | ARCH-EXEC AUTO-STARTUP discovery NETREACTOR RAT trojan XWorm |  Neiki |
| 2026-02-20 07:45 | 193.124.250.110:8080 | XWorm | defense_evasion RAT trojan XWorm | Neiki |
| 2026-02-20 07:43 | 193.161.193.99:64601 | XWorm | RAT trojan XWorm | Neiki |
| 2026-02-19 18:01 | 103.83.86.162:1985 | XWorm | AS44382 c2 triage XWorm | DonPasci |
| 2026-02-19 15:03 | 37.4.250.173:63603 | XWorm | XWorm | dyingbreeds_ |
| 2026-02-19 15:03 | 193.161.193.99:63603 | XWorm | XWorm | dyingbreeds_ |
| 2026-02-19 14:39 | 91.208.197.30:1605 | XWorm | ALEXHOST AS200019 c2 XWorm | DonPasci |
| 2026-02-19 14:39 | 82.26.104.128:6000 | XWorm | AS63989 c2 DE-CORP XWorm | DonPasci |
| 2026-02-19 14:39 | 45.141.26.201:6000 | XWorm | AS142299 c2 CLOUDFORESTCOLTD-AS-AP XWorm | DonPasci |
| 2026-02-19 14:39 | 45.137.98.189:6666 | XWorm | AS49581 c2 FERDINANDZINK XWorm | DonPasci |
| 2026-02-19 14:39 | 45.61.149.192:6000 | XWorm | AS14956 c2 ROUTERHOSTING XWorm | DonPasci |
| 2026-02-19 14:39 | 20.234.151.26:6000 | XWorm | AS8075 c2 MICROSOFT-CORP-MSN-AS-BLOCK XWorm | DonPasci |
| 2026-02-19 14:39 | 5.230.159.62:7000 | XWorm | AS12586 ASGHOSTNET c2 XWorm | DonPasci |
| 2026-02-19 14:31 | 193.233.113.137:7000 | XWorm | AS215826 c2 PARTNER-HOSTING-LTD XWorm | DonPasci |
| 2026-02-19 14:31 | 147.45.45.110:7777 | XWorm | AS215826 c2 PARTNER-HOSTING-LTD XWorm | DonPasci |
| 2026-02-19 14:31 | 141.11.213.91:8282 | XWorm | AS212477 c2 ROYALE-AS XWorm | DonPasci |
| 2026-02-19 14:31 | 103.163.219.252:7000 | XWorm | AS140787 c2 LAMA-AS-VN XWorm | DonPasci |
| 2026-02-19 14:30 | 202.95.18.16:7000 | XWorm | AS152194 c2 CTGSERVERLIMITED-AS-AP XWorm | DonPasci |
| 2026-02-19 14:30 | 202.95.17.184:7000 | XWorm | AS152194 c2 CTGSERVERLIMITED-AS-AP XWorm | DonPasci |
| 2026-02-19 14:30 | 134.122.154.171:7000 | XWorm | AS152194 c2 CTGSERVERLIMITED-AS-AP XWorm | DonPasci |
| 2026-02-19 14:30 | 134.122.152.135:7000 | XWorm | AS152194 c2 CTGSERVERLIMITED-AS-AP XWorm | DonPasci |
| 2026-02-19 14:30 | 134.122.140.89:7000 | XWorm | AS152194 c2 CTGSERVERLIMITED-AS-AP XWorm | DonPasci |
| 2026-02-19 13:16 | 213.152.161.162:5103 | XWorm | AMSI-BYPASS AUTO-REG persistence RAT trojan XWorm | Neiki |
| 2026-02-19 11:02 | dawdawf-45472.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-02-19 09:41 | 209.54.103.184:1909 | XWorm | AUTO-STARTUP execution persistence SUSP-POWERSHELL XWorm | Neiki |
| 2026-02-19 09:35 | xxblessingswealths.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-02-19 06:27 | 8.162.5.187:14701 | XWorm | RAT trojan XWorm | Neiki |
| 2026-02-19 06:27 | 198.244.201.139:7181 | XWorm | AUTO-REG AUTO-STARTUP evasion execution persistence RAT trojan XWorm | Neiki |
| 2026-02-19 06:27 | 172.105.85.143:20809 | XWorm | defense_evasion execution RAT trojan XWorm | Neiki |
| 2026-02-19 06:27 | 193.161.193.99:25340 | XWorm | AUTO-REG AUTO-STARTUP evasion persistence RAT trojan XWorm | Neiki |
| 2026-02-19 06:27 | 193.161.193.99:51173 | XWorm | AUTO-REG AUTO-STARTUP execution persistence RAT trojan XWorm | Neiki |
| 2026-02-19 06:26 | 193.161.193.99:61682 | XWorm | RAT trojan XWorm | Neiki |
| 2026-02-19 06:26 | 128.90.102.133:7000 | XWorm | AUTO-STARTUP discovery NETREACTOR RAT trojan XWorm | Neiki |
| 2026-02-19 06:26 | 147.185.221.181:17288 | XWorm | RAT trojan XWorm | Neiki |
| 2026-02-19 06:01 | next-dance.gl.at.ply.gg | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-19 06:01 | 94.73.17.125:8088 | XWorm | AS51407 c2 triage XWorm | DonPasci |
| 2026-02-19 03:02 | Nexit-62461.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-02-18 23:02 | often-richmond.gl.at.ply.gg | XWorm | XWorm | dyingbreeds_ |
| 2026-02-18 18:01 | h1utmdojg.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-18 16:36 | 31.40.204.103:1990 | XWorm | ARCH-SCR AUTO-STARTUP discovery execution RAT SUSP-POWERSHELL trojan XWorm | Neiki |
| 2026-02-18 16:36 | 198.244.201.139:2352 | XWorm | ANTI-EVASION AUTO-REG AUTO-STARTUP crypter defense_evasion evasion execution persistence XWorm | Neiki |
| 2026-02-18 12:01 | lqpoartdg.localto.net | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-18 12:01 | mflk332-50294.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-18 09:48 | 192.236.154.249:6000 | XWorm | API-BASE64 ARCH-SCR defense_evasion discovery execution RAT SUSP-POWERSHELL trojan XWorm | Neiki |
| 2026-02-18 09:25 | office001.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-02-18 07:34 | 78.29.43.89:40689 | XWorm | defense_evasion execution persistence RAT trojan XWorm | Neiki |
| 2026-02-18 07:34 | 156.205.97.11:4444 | XWorm | AUTO-REG AUTO-STARTUP execution persistence RAT trojan XWorm | Neiki |
| 2026-02-18 07:34 | 8.148.70.84:1984 | XWorm | RAT trojan XWorm | Neiki |
| 2026-02-18 07:16 | https://pastebin.com/raw/SDSD | XWorm | c2 XWorm | juroots |
| 2026-02-18 03:02 | kittyland.gg | XWorm | XWorm | dyingbreeds_ |
| 2026-02-17 15:42 | https://gamewinners.in.net/ | XWorm | c2 XWorm | juroots |
| 2026-02-17 12:30 | 80.46.218.20:4444 | XWorm | execution RAT XWorm | Neiki |
| 2026-02-17 07:25 | coscoshippingjp.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-02-17 07:22 | 5.252.153.240:2055 | XWorm | Adware ANTI-EVASION discovery execution Loader persistence RAT spyware XWorm | Neiki |
| 2026-02-17 06:19 | 165.245.189.98:8008 | XWorm | ANTIVM persistence RAT RUST trojan XWorm | Neiki |
| 2026-02-17 06:19 | 95.148.150.125:3074 | XWorm | AUTO-REG AUTO-STARTUP evasion RAT trojan XWorm | Neiki |
| 2026-02-17 06:19 | 107.152.32.98:3919 | XWorm | AUTO-REG AUTO-STARTUP evasion RAT trojan XWorm | Neiki |
| 2026-02-17 06:19 | 16.78.248.241:4832 | XWorm | AUTO-REG AUTO-STARTUP BINDER CRYPTO-REGEX defense_evasion execution generic IMS-API XWorm | Neiki |
| 2026-02-17 00:02 | 89.190.158.76:80 | XWorm | AS204914 c2 censys LABIXE open-dir XWorm | DonPasci |
| 2026-02-16 18:01 | horus65-58899.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-16 16:23 | 37.114.46.213:4042 | XWorm | AS58087 c2 FLORIANKOLB VirusTotal XWorm | DonPasci |
| 2026-02-16 13:46 | 185.91.127.179:555 | XWorm | AUTO-SCH execution persistence XWorm | Neiki |
| 2026-02-16 12:27 | 209.54.103.189:63712 | XWorm | AUTO-REG execution persistence RAT trojan XWorm | Neiki |
| 2026-02-16 11:05 | xxblessings.minhaempresa.tv | XWorm | XWorm | dyingbreeds_ |
| 2026-02-16 07:59 | 45.243.236.40:9898 | XWorm | AUTO-REG AUTO-STARTUP BINDER evasion RAT telegram trojan xbinder XWorm | Neiki |
| 2026-02-16 07:58 | 8.162.0.105:10438 | XWorm | bootkit defense_evasion discovery DonutLoader execution Loader persistence RAT XWorm | Neiki |
| 2026-02-15 19:04 | 8.148.24.19:11601 | XWorm | AUTO-STARTUP RAT trojan XWorm | Neiki |
| 2026-02-15 19:01 | 37.tcp.cpolar.top | XWorm | XWorm | dyingbreeds_ |
| 2026-02-15 18:01 | xdm111-37027.portmap.host | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-15 14:50 | 13.200.54.243:11343 | XWorm | evasion RAT trojan XWorm | Neiki |
| 2026-02-15 14:50 | 147.185.221.16:13795 | XWorm | AUTO-REG discovery execution Github NeptuneRAT persistence RAT trojan XWorm | Neiki |
| 2026-02-15 11:01 | dawdawf-32460.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-02-15 07:09 | 198.244.201.139:4834 | XWorm | AUTO-REG AUTO-STARTUP crypter evasion PROTECTOR RAT trojan XWorm | Neiki |
| 2026-02-15 07:09 | 161.35.110.36:48330 | XWorm | RAT trojan XWorm | Neiki |
| 2026-02-15 07:08 | 109.122.18.53:7788 | XWorm | AUTO-REG crypter CRYPTO-REGEX evasion PROTECTOR RAT trojan XWorm | Neiki |
| 2026-02-15 07:08 | 8.148.76.192:12182 | XWorm | RAT trojan XWorm | Neiki |
| 2026-02-15 07:08 | 94.103.84.143:9050 | XWorm | AMSI-BYPASS AUTO-REG defense_evasion execution persistence RAT trojan XWorm | Neiki |
| 2026-02-15 07:08 | 198.244.201.139:4886 | XWorm | ANTI-EVASION AUTO-REG AUTO-STARTUP BYTEGUARD crypter defense_evasion evasion XERINFUSCATOR XWorm | Neiki |
| 2026-02-15 06:01 | 129.0.0.1:7004 | XWorm | AS30992 c2 triage XWorm | DonPasci |
| 2026-02-15 06:01 | 128.0.0.1:7004 | XWorm | c2 triage XWorm | DonPasci |
| 2026-02-14 23:02 | fssop-77-91-148-5.a.free.pinggy.link | XWorm | XWorm | dyingbreeds_ |
| 2026-02-14 19:02 | 91.89.111.120:6000 | XWorm | XWorm | dyingbreeds_ |
| 2026-02-14 15:40 | 45.74.19.28:443 | XWorm | XWorm | abuse_ch |
| 2026-02-14 15:24 | 141.94.23.83:14433 | XWorm | AUTO-REG AUTO-STARTUP BINDER defense_evasion discovery evasion execution generic XWorm | Neiki |
| 2026-02-14 15:24 | 54.38.55.91:14433 | XWorm | AUTO-REG AUTO-STARTUP BINDER defense_evasion discovery evasion execution generic XWorm | Neiki |
| 2026-02-14 15:24 | 147.185.221.211:60581 | XWorm | evasion RAT trojan XWorm | Neiki |
| 2026-02-14 15:24 | 78.29.43.89:1488 | XWorm | AUTO-REG AUTO-STARTUP evasion RAT trojan XWorm | Neiki |
| 2026-02-14 15:24 | 52.84.143.48:443 | XWorm | ANTI-EVASION execution Loader persistence RAT XWorm | Neiki |
| 2026-02-14 15:24 | 78.29.43.89:40544 | XWorm | crypter evasion PROTECTOR RAT trojan XWorm | Neiki |
| 2026-02-14 15:24 | 185.208.159.174:1337 | XWorm | AUTO-REG AUTO-STARTUP execution persistence RAT trojan XWorm | Neiki |
| 2026-02-14 15:23 | 146.70.226.138:5103 | XWorm | AUTO-STARTUP AutoIT defense_evasion discovery RAT trojan XWorm | Neiki |
| 2026-02-14 15:23 | 147.185.221.181:9539 | XWorm | AUTO-REG AUTO-STARTUP evasion RAT trojan XWorm | Neiki |
| 2026-02-14 15:23 | 155.117.44.130:1337 | XWorm | AUTO-REG AUTO-STARTUP execution persistence RAT trojan XWorm | Neiki |
| 2026-02-14 15:23 | 107.152.32.98:2557 | XWorm | defense_evasion RAT trojan XWorm | Neiki |
| 2026-02-14 15:23 | 141.227.129.198:14433 | XWorm | AUTO-REG AUTO-STARTUP BINDER defense_evasion discovery evasion execution generic XWorm | Neiki |
| 2026-02-14 15:23 | 147.185.221.29:34986 | XWorm | AUTO-REG AUTO-STARTUP evasion INNOSETUP RAT trojan XWorm | Neiki |
| 2026-02-14 15:23 | 198.244.201.139:3913 | XWorm | AUTO-REG AUTO-STARTUP crypter evasion PROTECTOR RAT trojan XWorm | Neiki |
| 2026-02-14 15:22 | 161.35.110.36:24598 | XWorm | defense_evasion execution RAT trojan XWorm | Neiki |
| 2026-02-14 15:01 | zjrhp8su2.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-02-14 14:29 | 147.185.221.29:3765 | XWorm | XWorm | dyingbreeds_ |
| 2026-02-14 12:01 | 45.151.236.233:3765 | XWorm | AS206257 c2 triage XWorm | DonPasci |
| 2026-02-14 08:50 | t72k-30675.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-02-14 08:50 | GGmenP120-43957.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-02-14 08:50 | odayrifaii-37201.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-02-14 03:01 | webxio1231-40781.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-02-14 03:01 | 7mgtwzocu.localto.net | XWorm | XWorm | dyingbreeds_ |
| 2026-02-13 19:02 | yassinekjdkfj-42734.portmap.host | XWorm | XWorm | dyingbreeds_ |
| 2026-02-13 18:00 | releases-scale.gl.at.ply.gg | XWorm | c2 domain triage XWorm | DonPasci |
| 2026-02-13 18:00 | 144.31.164.226:56778 | XWorm | AS215439 c2 triage XWorm | DonPasci |
| 2026-02-13 17:45 | truesir.duckdns.org | XWorm | XWorm | abuse_ch |
| 2026-02-13 15:02 | 213.14.185.201:1604 | XWorm | XWorm | dyingbreeds_ |
| 2026-02-13 10:04 | 46.203.233.102:1337 | XWorm | AUTO-REG AUTO-STARTUP execution INNOSETUP persistence RAT trojan XWorm | Neiki |