| 2024-09-11 08:02 | 163.53.216.199:80 | ERMAC | AS38186 c2 censys FTG-AS-AP |  DonPasci |
| 2024-09-11 08:02 | 116.212.120.131:80 | ERMAC | AS38186 c2 censys FTG-AS-AP | DonPasci |
| 2024-09-11 08:02 | ns570052.ip-51-161-12.net | Venom RAT | AS16276 c2 censys OVH RAT | DonPasci |
| 2024-09-11 08:02 | workspace.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | wwwrds.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.wwwwwwadmin.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.wwwwwwcnlenwwwofficevpn.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | wwwacceso.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.vdi.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | gmoeuwwwadmin.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | wwwclientesvpn.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | wkfhgwwwwebmail.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.m.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | wwwsecure.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.staging.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.chart.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | 194.233.94.252:8089 | Hook | AS141995 c2 CAPL-AS-AP censys HookBot | DonPasci |
| 2024-09-11 08:02 | www.lekjblabvirtual.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.wwwwwwgateway.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.wwwbackend.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.wwwwwwwwwvirtualstudent.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | wwwwwwwwwvirtualapps.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | wwwwwwwkfhgwwwwebmail.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.wwwqtvzudev.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | wwwlabvirtual.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | wwwanalytic.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.hocdvsitemaps.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | wwwqtvzudev.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | virtualapps.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.wwwapi.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.remoto.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.acceso.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.wwwworkspace.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | wwwwwwwwwapp.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.clayvwwwportalvpn.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | owa.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.wwwforum.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | wwwowa.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.wwwm.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.stats.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | kqivbwwwanyconnect.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | wwwwwwwww1.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.apps.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | reports.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.wwwofficevpn.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | gatewayrdweb.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.intra.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.analytics.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | acceso.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | www.wwwdesktopstudent.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | anyconnect.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | wp.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | admin.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 08:02 | 118.195.202.76:8888 | Unknown malware | AS45090 c2 censys Supershell TENCENT-NET-AP | DonPasci |
| 2024-09-11 08:01 | 41.216.188.178:2404 | Remcos | AS211138 c2 censys PRIVATEHOSTING-NET RAT | DonPasci |
| 2024-09-11 08:01 | 31.6.50.127:2404 | Remcos | AS49581 c2 censys FERDINANDZINK RAT | DonPasci |
| 2024-09-11 08:01 | 120.55.70.84:8080 | Cobalt Strike | ALIBABA-CN-NET AS37963 c2 censys CobaltStrike cs-watermark-305419896 | DonPasci |
| 2024-09-11 08:01 | 47.93.31.92:8989 | Cobalt Strike | ALIBABA-CN-NET AS37963 c2 censys CobaltStrike cs-watermark-305419896 | DonPasci |
| 2024-09-11 08:01 | 47.101.152.30:81 | Cobalt Strike | ALIBABA-CN-NET AS37963 c2 censys CobaltStrike cs-watermark-0 | DonPasci |
| 2024-09-11 08:01 | 139.159.247.207:80 | Cobalt Strike | AS55990 c2 censys CobaltStrike cs-watermark-666666666 HWCSNET | DonPasci |
| 2024-09-11 08:01 | 101.200.86.176:8443 | Cobalt Strike | ALIBABA-CN-NET AS37963 c2 censys CobaltStrike cs-watermark-666666666 | DonPasci |
| 2024-09-11 08:01 | 43.138.168.132:8088 | Cobalt Strike | AS45090 c2 censys CobaltStrike cs-watermark-391144938 TENCENT-NET-AP | DonPasci |
| 2024-09-11 08:01 | 23.224.61.52:443 | Cobalt Strike | AS40065 c2 censys CNSERVERS CobaltStrike cs-watermark-987654321 | DonPasci |
| 2024-09-11 07:25 | http://cn54248.tw1.ru/L1nc0In.php | DCRat | dcrat |  abuse_ch |
| 2024-09-11 05:00 | http://avoufshire.icu/cee6b323faaaf788.php | Stealc | Stealc | abuse_ch |
| 2024-09-11 04:55 | 78.70.235.238:1912 | RedLine Stealer | RedLineStealer | abuse_ch |
| 2024-09-11 04:02 | www.pacmanspiele-online.de | Unknown malware | AS24940 c2 censys HETZNER-AS panel UNAM | DonPasci |
| 2024-09-11 04:02 | 163.53.216.253:80 | ERMAC | AS38186 c2 censys FTG-AS-AP | DonPasci |
| 2024-09-11 04:02 | 142.93.236.252:443 | Havoc | AS14061 c2 censys DIGITALOCEAN-ASN | DonPasci |
| 2024-09-11 04:02 | 45.59.112.9:8089 | Hook | AS30823 AUROLOGIC c2 censys HookBot | DonPasci |
| 2024-09-11 04:02 | 194.233.94.252:80 | Hook | AS141995 c2 CAPL-AS-AP censys HookBot | DonPasci |
| 2024-09-11 04:02 | mechapeyachtclub.io | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 04:02 | 185.173.37.56:80 | Hook | AS212441 c2 censys CLOUDASSETS HookBot | DonPasci |
| 2024-09-11 04:01 | 38.55.193.219:31337 | Sliver | AS139659 c2 censys LUCID-AS-AP | DonPasci |
| 2024-09-11 04:01 | 64.95.10.93:53 | pupy | AS399629 BLNWX c2 censys RAT | DonPasci |
| 2024-09-11 04:01 | 122.51.175.93:80 | Cobalt Strike | AS45090 c2 censys CobaltStrike cs-watermark-987654321 TENCENT-NET-AP | DonPasci |
| 2024-09-11 01:40 | https://absentcurtaino.shop/api | Lumma Stealer | Lumma | abuse_ch |
| 2024-09-11 01:40 | http://idp.vn/wp-includes/js/crop/Panel/five/fre.php | Loki Password Stealer (PWS) | LokiBot | abuse_ch |
| 2024-09-11 01:25 | 5.226.137.132:4449 | AsyncRAT | asyncrat | abuse_ch |
| 2024-09-11 00:04 | 79.141.165.58:443 | Latrodectus | Latrodectus |  Rony |
| 2024-09-11 00:02 | 91.92.245.76:80 | Stealc | AS394711 c2 censys LIMENET stealer | DonPasci |
| 2024-09-11 00:02 | 38.132.122.190:5000 | Unknown malware | AS9009 botnet byob c2 censys M247 | DonPasci |
| 2024-09-11 00:02 | 46.246.12.5:5000 | DCRat | AS42708 c2 censys PORTLANE RAT | DonPasci |
| 2024-09-11 00:02 | 185.244.183.222:80 | Hook | AS212441 c2 censys CLOUDASSETS HookBot | DonPasci |
| 2024-09-11 00:02 | wwwmail.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 00:02 | 94.141.120.227:8089 | Hook | AS51396 c2 censys HookBot PFCLOUD | DonPasci |
| 2024-09-11 00:02 | 178.130.40.29:80 | Hook | AS216071 c2 censys HookBot VDSINA | DonPasci |
| 2024-09-11 00:02 | 194-233-94-252.cprapid.com | Hook | AS141995 c2 CAPL-AS-AP censys HookBot | DonPasci |
| 2024-09-11 00:02 | wwwgmoeuwwwadmin.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 00:02 | mechaapeyachtclub.io | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 00:02 | xn--wypacalnekasy-yhc.com | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-11 00:02 | 194.233.94.252:8082 | Hook | AS141995 c2 CAPL-AS-AP censys HookBot | DonPasci |
| 2024-09-11 00:02 | 165.232.118.207:7443 | Unknown malware | AS14061 c2 censys DIGITALOCEAN-ASN Mythic | DonPasci |
| 2024-09-11 00:02 | 88.90.159.162:7443 | Unknown malware | AS2119 c2 censys Mythic TELENOR-NEXTEL | DonPasci |
| 2024-09-11 00:02 | 185.125.101.221:7443 | Unknown malware | AEZA-AS AS210644 c2 censys Mythic | DonPasci |
| 2024-09-11 00:02 | 165.227.81.186:4444 | AsyncRAT | AS14061 c2 censys DIGITALOCEAN-ASN RAT | DonPasci |
| 2024-09-11 00:01 | 8.140.245.27:8088 | Cobalt Strike | ALIBABA-CN-NET AS37963 c2 censys CobaltStrike cs-watermark-391144938 | DonPasci |
| 2024-09-11 00:01 | 62.234.81.85:9999 | Cobalt Strike | AS45090 c2 censys CobaltStrike cs-watermark-987654321 TENCENT-NET-AP | DonPasci |
| 2024-09-11 00:01 | 43.240.221.100:8089 | Cobalt Strike | AS58519 c2 censys CHINATELECOM-CTCLOUD CobaltStrike cs-watermark-987654321 | DonPasci |
| 2024-09-11 00:00 | 3.124.142.205:11348 | NjRAT | njrat | abuse_ch |
| 2024-09-11 00:00 | 18.158.249.75:11348 | NjRAT | njrat | abuse_ch |
| 2024-09-11 00:00 | 3.125.209.94:11348 | NjRAT | njrat | abuse_ch |
| 2024-09-11 00:00 | 18.192.31.165:11348 | NjRAT | njrat | abuse_ch |
| 2024-09-11 00:00 | 3.125.102.39:11348 | NjRAT | njrat | abuse_ch |
| 2024-09-10 21:45 | 45.91.202.63:25415 | RedLine Stealer | RedLineStealer | abuse_ch |
| 2024-09-10 21:45 | 107.189.171.131:14307 | RedLine Stealer | RedLineStealer | abuse_ch |
| 2024-09-10 20:02 | 137.184.38.108:3333 | Unknown malware | AS14061 censys DIGITALOCEAN-ASN EvilGoPhish panel phishing | DonPasci |
| 2024-09-10 20:02 | www.urbanhomes.agency | Unknown malware | AS22612 c2 censys NAMECHEAP-NET panel UNAM | DonPasci |
| 2024-09-10 20:02 | ng.portableonline.online | Meduza Stealer | AS13335 c2 censys CLOUDFLARENET stealer | DonPasci |
| 2024-09-10 20:02 | togohop.xyz | XehookStealer | AS13335 c2 censys CLOUDFLARENET stealer | DonPasci |
| 2024-09-10 20:02 | 46.246.6.13:8000 | DCRat | AS42708 c2 censys PORTLANE RAT | DonPasci |
| 2024-09-10 20:02 | 158.69.41.120:8000 | Venom RAT | AS16276 c2 censys OVH RAT | DonPasci |
| 2024-09-10 20:02 | 146-70-113-183.cprapid.com | Quasar RAT | AS9009 c2 censys M247 RAT | DonPasci |
| 2024-09-10 20:02 | 181.22.146.21:4444 | Quasar RAT | AS22927 c2 censys RAT TELEFONICA | DonPasci |
| 2024-09-10 20:02 | wwwwwwdesktopstudent.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | wwwwwwwwwgatewayvpn.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | wwwanalyze.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | gryhazardowe.tech | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.wwwwwwonline.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.wwwwp.ethergases.app | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | rmyrsvpnssl.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.xmofxwwwpublicsecure.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | wwwonline.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | wwwwww1.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | wwwwwwwwwvdi.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.officevpn.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.wwwgateway.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.wwwvirtualstudent.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.wwwrds1.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | 154.216.17.81:8089 | Hook | AS215240 c2 censys HookBot NETRESEARCH | DonPasci |
| 2024-09-10 20:02 | www1.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.visual.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.wwwwww.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.wwwwwwvirtualstudent.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.2024.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.api.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.gatewayrdweb.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.staging.ethergases.app | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | online.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.wwwanalyze.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.wwwwwwwwwvdi.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.supersets.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.wwwwwwqtvzudev.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.desktopstudent.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | reporting.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | 154.216.20.7:8089 | Hook | AS215240 c2 censys HookBot NETRESEARCH | DonPasci |
| 2024-09-10 20:02 | wwwwwwvdi.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | www.webmail.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 20:02 | 101.200.63.188:8888 | Unknown malware | ALIBABA-CN-NET AS37963 c2 censys Supershell | DonPasci |
| 2024-09-10 20:01 | 50.114.5.134:443 | Sliver | AS396356 c2 censys LATITUDE-SH | DonPasci |
| 2024-09-10 20:01 | 104.248.113.150:31337 | Sliver | AS14061 c2 censys DIGITALOCEAN-ASN | DonPasci |
| 2024-09-10 20:01 | 146.70.24.188:2404 | Remcos | AS9009 c2 censys M247 RAT | DonPasci |
| 2024-09-10 20:01 | 46.246.12.210:9090 | Remcos | AS42708 c2 censys PORTLANE RAT | DonPasci |
| 2024-09-10 20:01 | www.hukumdarcraft.com | Unknown malware | AS13335 c2 censys CLOUDFLARENET panel Power stealer | DonPasci |
| 2024-09-10 20:01 | 120.27.231.62:8081 | Cobalt Strike | ALIBABA-CN-NET AS37963 c2 censys CobaltStrike cs-watermark-391144938 | DonPasci |
| 2024-09-10 20:01 | 122.51.212.130:20027 | Cobalt Strike | AS45090 c2 censys CobaltStrike cs-watermark-987654321 TENCENT-NET-AP | DonPasci |
| 2024-09-10 20:01 | 47.121.182.98:9000 | Cobalt Strike | ALIBABA-CN-NET AS37963 c2 censys CobaltStrike cs-watermark-987654321 | DonPasci |
| 2024-09-10 19:49 | 915cc233f5c3b36f2aa5a9a0aa2fcd28b8ee406e42c08b71177dab901c219d41 | Cobalt Strike | |  Grim |
| 2024-09-10 19:49 | fa332de9a0e7da5e975173ee47246172 | Cobalt Strike | | Grim |
| 2024-09-10 19:49 | c6e74c68a11a9d318137aba895f2bcde89d42f2b | Cobalt Strike | | Grim |
| 2024-09-10 19:49 | c92c541048de8be340a990db10e7cbab | Cobalt Strike | | Grim |
| 2024-09-10 19:49 | 31a89af6712da7bd56b1033952468302bd0838d48c6712c5499c60178f4d95a3 | Cobalt Strike | | Grim |
| 2024-09-10 19:49 | 50f7ef4239b9fd0358b10a8b3106871e2de1fd29 | Cobalt Strike | | Grim |
| 2024-09-10 19:49 | f9aeb179d19069e095454ea03855b3ff | Cobalt Strike | | Grim |
| 2024-09-10 19:49 | ec414af710e72be806347ee464d4c58e7ab624632f0c96cd1776cb05692e7c8b | Cobalt Strike | | Grim |
| 2024-09-10 19:49 | d30bb9df615a8d1661f843d426ff40eb | Agent Tesla | | Grim |
| 2024-09-10 19:49 | e3eef26af4da2e3678f9502b6e0fbf2fcb217100 | Cobalt Strike | | Grim |
| 2024-09-10 19:49 | b54ee7375e7ea979d16b76f183aaaccfa49681e2bd748ffca202fde9cf823346 | Agent Tesla | | Grim |
| 2024-09-10 19:48 | 0675a6d25449fba8a9a04fae80448789 | RedLine Stealer | | Grim |
| 2024-09-10 19:48 | 4344e695b5f65917dc68f241ecde4b99cf25d930 | Agent Tesla | | Grim |
| 2024-09-10 19:48 | 3ec49e14a495f9bdafb8944db9125c0e8f7f4258c285962df393c8918b0665dd | RedLine Stealer | | Grim |
| 2024-09-10 19:48 | 879d0ef272708db75cfec5cb88ec938fbe604466 | RedLine Stealer | | Grim |
| 2024-09-10 19:48 | da7b9cbb790c88972e25daee98481da6707144c1d517987a52e1a76f93f3a7ee | CryptBot | | Grim |
| 2024-09-10 19:48 | 688a3549e5ffed290bbc87989e4e6c84 | CryptBot | | Grim |
| 2024-09-10 19:48 | e2fe47640198927bc5429847e638e5c8052d40cf | CryptBot | | Grim |
| 2024-09-10 19:48 | 9624383d6ceb24015deaeac4576a474da6dc0c676d66e15dd11ec65429335bf8 | SigLoader | | Grim |
| 2024-09-10 19:48 | ed74af816d3d992bb737a5c618edeb40 | SigLoader | | Grim |
| 2024-09-10 19:48 | 88fa10ff069ca50565409920b0bc8faa8f22f72c | SigLoader | | Grim |
| 2024-09-10 19:48 | 42dcb6c7008cac068514bff4a01821a6 | SigLoader | | Grim |
| 2024-09-10 19:48 | 90176b56ed8521a1257ed014c5d406b2b9fad6409750f8110265e338530d37a2 | SigLoader | | Grim |
| 2024-09-10 19:48 | 68bfde44e74a38bcdeb509eff45ef784f63d9535 | SigLoader | | Grim |
| 2024-09-10 19:48 | 9957c2105ae2ec0fa4da4a09bef2bdef | SigLoader | | Grim |
| 2024-09-10 19:48 | f667f414b22b592184f4652594f6dd8ed8c13fbd078713afd2a2179f50ba23c1 | SigLoader | | Grim |
| 2024-09-10 19:48 | c175428713883e116066c5f710dcc72ebb219562 | SigLoader | | Grim |
| 2024-09-10 19:48 | 8cdf7e716de26cf91167752202a426e1ba52756ffff52d30a576b1a412da500f | Formbook | | Grim |
| 2024-09-10 19:48 | a65429f63b263bf8c9ff7e7fe8d5cd5b | Formbook | | Grim |
| 2024-09-10 19:48 | 6018abfd31f0d875772edcee830c74f8be0d24eb | Formbook | | Grim |
| 2024-09-10 19:48 | 365b8dab76c07e3c7ea3cd4a9d683265db5210b6b9a30e9dc520f358b829d30d | KrakenKeylogger | | Grim |
| 2024-09-10 19:48 | af2b325becf3f12462529b961699557a | KrakenKeylogger | | Grim |
| 2024-09-10 19:48 | 88da506a656c9ba9615e4134234084bd5c6c086f | KrakenKeylogger | | Grim |
| 2024-09-10 19:48 | 4e2c78a6bef2caef536cf00c467a54a7081adc8118e7741043e243c0eb4843d0 | Formbook | | Grim |
| 2024-09-10 19:48 | 1ac8fb5ee2cea350e46ecc78bf7d1c46 | Formbook | | Grim |
| 2024-09-10 19:48 | c055bb5046a718c9838a4c453e1e36d1c3941db2 | Formbook | | Grim |
| 2024-09-10 19:48 | ccedcbb26614bb915a8fe3be58019b0a | Formbook | | Grim |
| 2024-09-10 19:48 | 76fe69849ddbda008d54ff757bf77599f77c33245dd8f28d3b1c53e3940980f4 | Formbook | | Grim |
| 2024-09-10 19:48 | 5db36b02c61285cc0d1eaf279a1ac7e6 | RedLine Stealer | | Grim |
| 2024-09-10 19:48 | 98ab2287a70129f1e23d64aa8ef8929698833060 | Formbook | | Grim |
| 2024-09-10 19:48 | 7bfbcf807fd0a90ba6ab963cfae6a7921dbbc7482995d80fb316423ab3d67013 | RedLine Stealer | | Grim |
| 2024-09-10 19:48 | 6f605fd10c79ec475befda0cd232f38b | Agent Tesla | | Grim |
| 2024-09-10 19:48 | 94cb72ae9cf6aa482f6e2f2a9decae7866da3568 | RedLine Stealer | | Grim |
| 2024-09-10 19:48 | c41893463c861e8d6274f2d5f5335ba4d23dfe4c6d6d65d8bc08eec140b4890d | Agent Tesla | | Grim |
| 2024-09-10 19:48 | 352e299fc3f2327bfad5026b4a56b7cb | Cobalt Strike | | Grim |
| 2024-09-10 19:48 | 8b015776a4e0e1ba8495f89296b4eb5293faba33 | Agent Tesla | | Grim |
| 2024-09-10 19:48 | 66055934b163379c3ac488cfbcedc30387108193a2f283a6589b846b9041bc61 | Cobalt Strike | | Grim |
| 2024-09-10 19:48 | f158782ecf09b2962c1362c26807f998d8f0b943 | Cobalt Strike | | Grim |
| 2024-09-10 19:48 | 31c9a34ced5d2cb3c79279f8c75cfe42 | Formbook | | Grim |
| 2024-09-10 19:48 | 94c55903ef74aca098146433a27fd5c90f3cf3f92c661591f33eb422b77f6b73 | Formbook | | Grim |
| 2024-09-10 19:48 | d6d023cce8263695a22edccb9df164bb4336de94 | Formbook | | Grim |
| 2024-09-10 19:48 | fe0b55761362ad8def31ffb21a812836fe3c85df683861bf6baa260d5741cdd1 | Formbook | | Grim |
| 2024-09-10 19:48 | 0cd91b9ce5afaf9566b99b623dd9dfd6 | Formbook | | Grim |
| 2024-09-10 19:48 | 7e0614faf0bfc0f9e42942ab41a858f4fa9ea3e9 | Formbook | | Grim |
| 2024-09-10 19:48 | 3b2b055027ab684ff8477eb80090e9c1bbaf7ad07059ecdf73b2d5a0eca8530c | NjRAT | | Grim |
| 2024-09-10 19:48 | 426658a9b3bfd147a19141e1382b51b6 | NjRAT | | Grim |
| 2024-09-10 19:48 | 7e56370d1269af35ce2afbbf52386ecbdb5974d3 | NjRAT | | Grim |
| 2024-09-10 19:48 | e2f52ef7c3c86a697bf0c93e805c3e05 | Formbook | | Grim |
| 2024-09-10 19:48 | a65417bb26c953b74d02dae93127b44db0327f6170f151e2122ef671beb2e717 | Formbook | | Grim |
| 2024-09-10 19:48 | 5db9f3f1609f4cd4df6f627977d09fd7 | KrakenKeylogger | | Grim |
| 2024-09-10 19:48 | 92688f93265ca601d2c910381cf8d29afa7fb64f | Formbook | | Grim |
| 2024-09-10 19:48 | ea08961190b8399e21cfb503fcbb3caee0a5ab92294311bda03b7e511ece876b | KrakenKeylogger | | Grim |
| 2024-09-10 19:48 | 90bf0d85af20f8b712ea7e1fd9724e1ecb16589b | KrakenKeylogger | | Grim |
| 2024-09-10 19:47 | 3b318399e094b9024f2b6c8d92eff595a636b147b4bf240752e92a6bcd7b7fd8 | Agent Tesla | | Grim |
| 2024-09-10 19:47 | 999c2c940d0c49ab173cd107e6d5323c | Agent Tesla | | Grim |
| 2024-09-10 19:47 | 8e14d16e2a7ca0e253203fbb9c44814d7ed6b3f4 | Agent Tesla | | Grim |
| 2024-09-10 19:47 | 3dcad5a8e080c674141c41686629e4e7a598bb6856a9ba97584ef83ff0a37f02 | DanaBot | | Grim |
| 2024-09-10 19:47 | ed1f4a8bf32029bbbd60045ead0443d7 | DanaBot | | Grim |
| 2024-09-10 19:47 | 98c6b0e95988330486ddba066c608c489361bfbd | DanaBot | | Grim |
| 2024-09-10 19:10 | 179.60.149.252:443 | DanaBot | danabot | abuse_ch |
| 2024-09-10 19:10 | 89.45.4.113:443 | DanaBot | danabot | abuse_ch |
| 2024-09-10 19:10 | 46.226.163.80:443 | DanaBot | danabot | abuse_ch |
| 2024-09-10 18:59 | https://www.miracles.com.hk/wp-content/plugins/foxiplugin/detail.php | Unknown malware | DarkCracks |  Gi7w0rm |
| 2024-09-10 18:59 | http://152.67.11.54/wordpress//wp-admin/includes/sus.php | Unknown malware | DarkCracks | Gi7w0rm |
| 2024-09-10 18:59 | http://52.0.85.62/vendor/guzzlehttp/guzzle/src/Exception/detail.php | Unknown malware | DarkCracks | Gi7w0rm |
| 2024-09-10 18:59 | http://216.238.103.62:8013/vendor/guzzlehttp/guzzle/src/Exception/DNSException.php | Unknown malware | DarkCracks | Gi7w0rm |
| 2024-09-10 18:59 | http://64.227.0.146/vendor/guzzlehttp/guzzle/src/Handler/CurlSingleHandler.php | Unknown malware | DarkCracks | Gi7w0rm |
| 2024-09-10 18:59 | http://148.102.51.6/vendor/guzzlehttp/guzzle/src/Handler/CurlSingleHandler.php | Unknown malware | DarkCracks | Gi7w0rm |
| 2024-09-10 18:59 | http://158.177.2.191/vendor/guzzlehttp/guzzle/src/Handler/CurlSingleHandler.php | Unknown malware | DarkCracks | Gi7w0rm |
| 2024-09-10 18:59 | http://204.199.192.44/vendor/paragonie/sodium_compat/src/Core32/Poly25519.php | Unknown malware | DarkCracks | Gi7w0rm |
| 2024-09-10 18:59 | http://187.190.1.137/vendor/guzzlehttp/guzzle/src/Exception/detail.php | Unknown malware | DarkCracks | Gi7w0rm |
| 2024-09-10 18:59 | http://179.191.68.85:82/vendor/sebastian/diff/src/Exception/ | Unknown malware | DarkCracks | Gi7w0rm |
| 2024-09-10 18:59 | https://www.auntyaliceschool.site/wp-admin/maint/ | Unknown malware | DarkCracks | Gi7w0rm |
| 2024-09-10 18:59 | http://45.169.87.67/vendor/sabre/event/lib/Promise/ | Unknown malware | DarkCracks | Gi7w0rm |
| 2024-09-10 18:58 | 37.156.29.141:5511 | PoshC2 | |  lontze7 |
| 2024-09-10 18:58 | 82.153.138.39:8888 | Sliver | | lontze7 |
| 2024-09-10 18:58 | https://north-residence.com/cdn-vs/original.js | FAKEUPDATES | SmartApeSG |  monitorsg |
| 2024-09-10 18:58 | north-residence.com | FAKEUPDATES | SmartApeSG | monitorsg |
| 2024-09-10 18:58 | https://north-residence.com/cdn-vs/index.php | FAKEUPDATES | SmartApeSG | monitorsg |
| 2024-09-10 18:58 | https://north-residence.com/cdn-vs/update.php | FAKEUPDATES | SmartApeSG | monitorsg |
| 2024-09-10 18:58 | 185.196.9.106:7080 | Cobalt Strike | AS42624 c2 censys CobaltStrike |  sudous3r |
| 2024-09-10 18:58 | 185.196.9.106:8090 | Cobalt Strike | AS42624 c2 censys CobaltStrike | sudous3r |
| 2024-09-10 18:58 | 186.225.119.194:1442 | Cobalt Strike | AS28669 c2 censys CobaltStrike | sudous3r |
| 2024-09-10 18:58 | 186.225.119.194:1443 | Cobalt Strike | AS28669 c2 censys CobaltStrike | sudous3r |
| 2024-09-10 18:58 | 121.162.13.25:21 | ShadowPad | AS4766 c2 censys shadowpad | sudous3r |
| 2024-09-10 18:58 | 121.162.13.25:8022 | ShadowPad | AS4766 c2 censys shadowpad | sudous3r |
| 2024-09-10 18:58 | 121.162.13.25:9802 | Emotet | c2 censys emotet RAT | sudous3r |
| 2024-09-10 18:58 | 134.209.80.181:5432 | Sliver | c2 censys sliver | sudous3r |
| 2024-09-10 16:02 | 85.235.151.5:443 | BianLian | ARUBA-ASN AS31034 c2 censys | DonPasci |
| 2024-09-10 16:02 | 216.106.66.162:8443 | BianLian | AS4581 c2 censys SOCKET | DonPasci |
| 2024-09-10 16:02 | correos-ccl.shop | Unknown malware | AS13335 c2 censys CLOUDFLARENET panel UNAM | DonPasci |
| 2024-09-10 16:02 | 93.123.85.62:80 | MooBot | AS216240 c2 censys moobot MORTALSOFT | DonPasci |
| 2024-09-10 16:02 | order.fastfoodshopbot.biz | Meduza Stealer | AEZA-AS AS210644 c2 censys stealer | DonPasci |
| 2024-09-10 16:02 | 115.126.59.38:80 | ERMAC | AS38186 c2 censys FTG-AS-AP | DonPasci |
| 2024-09-10 16:02 | 115.126.59.126:80 | ERMAC | AS38186 c2 censys FTG-AS-AP | DonPasci |
| 2024-09-10 16:02 | 77.221.149.199:8443 | Brute Ratel C4 | AEZA-AS AS210644 c2 censys | DonPasci |
| 2024-09-10 16:02 | 39.50.160.221:6906 | DCRat | AS17557 c2 censys PKTELECOM-AS-PK RAT | DonPasci |
| 2024-09-10 16:02 | fauowwwwwwwwww1.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | www.wwwgmoeuwwwadmin.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | www.sitemaps.ethergases.app | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | admin.ethergases.app | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | www.wwwxmofxwwwpublicsecure.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | vbjxzaccess.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | www.owa.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | www.wwwapp.ethergases.app | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | wwwvirtualstudent.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | www.wwwzuakeportal.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | xmofxwwwpublicsecure.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | 91.92.242.15:8089 | Hook | AS394711 c2 censys HookBot LIMENET | DonPasci |
| 2024-09-10 16:02 | wwwowa.ethergases.app | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | www.wwwowa.ethergases.app | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | www.wwwsitemaps.ethergases.app | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | www.research.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | desktopstudent.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | access.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | www.wwwwwwapi.ethergases.app | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | www.sbqobsowgoowa.ethergases.app | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | intra.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | www.ssl.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | www.wwwadmin.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | clayvwwwportalvpn.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | wwwwwwclientesvpn.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | www.wwwcloudapp.pythr.net | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | wwwm.ethergases.org | Hook | AS57724 c2 censys DDOS-GUARD HookBot | DonPasci |
| 2024-09-10 16:02 | 206.188.196.66:7443 | Unknown malware | AS399629 BLNWX c2 censys Mythic | DonPasci |
| 2024-09-10 16:01 | 101.99.93.144:2404 | Remcos | AS45839 c2 censys RAT SHINJIRU-MY-AS-AP | DonPasci |
| 2024-09-10 16:01 | 47.239.242.141:2222 | Cobalt Strike | ALIBABA-CN-NET AS45102 c2 censys CobaltStrike cs-watermark-391144938 | DonPasci |
| 2024-09-10 16:01 | 142.171.119.216:80 | Cobalt Strike | AS35916 c2 censys CobaltStrike cs-watermark-987654321 MULTA-ASN1 | DonPasci |
| 2024-09-10 16:01 | 154.216.20.125:80 | Cobalt Strike | AS215240 c2 censys CobaltStrike cs-watermark-987654321 NETRESEARCH | DonPasci |
| 2024-09-10 16:01 | 103.72.57.203:80 | Cobalt Strike | AS150892 c2 censys CobaltStrike cs-watermark-987654321 THUTRANPC-VN | DonPasci |
| 2024-09-10 16:01 | 103.72.57.203:888 | Cobalt Strike | AS150892 c2 censys CobaltStrike cs-watermark-987654321 THUTRANPC-VN | DonPasci |
| 2024-09-10 16:01 | 38.6.184.120:80 | Cobalt Strike | AS40065 c2 censys CNSERVERS CobaltStrike cs-watermark-987654321 | DonPasci |
| 2024-09-10 16:01 | 8.148.26.227:80 | Cobalt Strike | ALIBABA-CN-NET AS37963 c2 censys CobaltStrike cs-watermark-987654321 | DonPasci |
| 2024-09-10 14:11 | 121.40.242.73:9999 | Cobalt Strike | CobaltStrike cs-watermark-391144938 | abuse_ch |
| 2024-09-10 14:11 | 43.143.251.194:90 | Cobalt Strike | CobaltStrike cs-watermark-987654321 | abuse_ch |
| 2024-09-10 14:11 | 142.171.138.160:4444 | Cobalt Strike | CobaltStrike cs-watermark-987654321 | abuse_ch |
| 2024-09-10 14:11 | 79.174.13.242:80 | Cobalt Strike | CobaltStrike cs-watermark-987654321 | abuse_ch |
| 2024-09-10 14:11 | 118.24.26.82:443 | Cobalt Strike | CobaltStrike cs-watermark-987654321 | abuse_ch |
| 2024-09-10 14:10 | 124.221.248.167:443 | Cobalt Strike | CobaltStrike cs-watermark-987654321 | abuse_ch |
| 2024-09-10 14:09 | 101.43.25.166:8086 | Cobalt Strike | CobaltStrike cs-watermark-391144938 | abuse_ch |
| 2024-09-10 14:09 | 20.173.74.203:8080 | Cobalt Strike | CobaltStrike cs-watermark-987654321 | abuse_ch |
| 2024-09-10 14:09 | 123.56.121.145:5555 | Cobalt Strike | CobaltStrike cs-watermark-666666666 | abuse_ch |
| 2024-09-10 14:08 | 119.45.104.118:8123 | Cobalt Strike | CobaltStrike cs-watermark-987654321 | abuse_ch |
| 2024-09-10 12:02 | 216.106.66.163:8443 | BianLian | AS4581 c2 censys SOCKET | DonPasci |
| 2024-09-10 12:02 | 172.98.22.185:80 | MooBot | AS152705 c2 censys GCTL-AS-AP moobot | DonPasci |
| 2024-09-10 12:02 | 129.211.211.51:8082 | Unknown malware | AS45090 c2 censys TENCENT-NET-AP Vshell | DonPasci |
| 2024-09-10 12:02 | 101.108.253.7:7443 | NetSupportManager RAT | AS23969 c2 censys RAT TOT-NET | DonPasci |
| 2024-09-10 12:02 | 172.214.182.168:8080 | Havoc | AS8075 c2 censys MICROSOFT-CORP-MSN-AS-BLOCK | DonPasci |
| 2024-09-10 12:02 | 137.74.197.73:443 | Havoc | AS16276 c2 censys OVH | DonPasci |
| 2024-09-10 12:02 | 198.167.199.251:19132 | Quasar RAT | ABSTRACT AS39287 c2 censys RAT | DonPasci |
| 2024-09-10 12:02 | 93.183.127.56:80 | Hook | AS216071 c2 censys HookBot VDSINA | DonPasci |
| 2024-09-10 12:02 | 93.183.127.56:2053 | Hook | AS216071 c2 censys HookBot VDSINA | DonPasci |
| 2024-09-10 12:02 | 162.0.224.38:8089 | Hook | AS22612 c2 censys HookBot NAMECHEAP-NET | DonPasci |
| 2024-09-10 12:02 | 31.177.108.45:80 | Hook | AS56694 c2 censys HookBot SMARTAPE | DonPasci |
| 2024-09-10 12:02 | 154.216.20.42:8089 | Hook | AS215240 c2 censys HookBot NETRESEARCH | DonPasci |
| 2024-09-10 12:02 | 51.145.156.236:443 | Unknown malware | AS8075 c2 censys MICROSOFT-CORP-MSN-AS-BLOCK Mythic | DonPasci |
| 2024-09-10 12:02 | 51.144.105.221:443 | Unknown malware | AS8075 c2 censys MICROSOFT-CORP-MSN-AS-BLOCK Mythic | DonPasci |
| 2024-09-10 12:02 | 104.243.34.3:2002 | AsyncRAT | AS23470 c2 censys RAT RELIABLESITE | DonPasci |
| 2024-09-10 12:02 | 103.198.26.95:8000 | AsyncRAT | AS132372 c2 censys GBNETWORK-AS-AP RAT | DonPasci |
| 2024-09-10 12:02 | 124.220.55.248:8888 | Unknown malware | AS45090 c2 censys Supershell TENCENT-NET-AP | DonPasci |
| 2024-09-10 12:02 | 154.31.221.203:8888 | Unknown malware | AS140224 c2 censys SGPL-AS-AP Supershell | DonPasci |
| 2024-09-10 12:02 | 65.20.74.235:443 | pupy | AS-CHOOPA AS20473 c2 censys RAT | DonPasci |
| 2024-09-10 12:02 | 185.196.11.65:443 | Latrodectus | Latrodectus | Rony |
| 2024-09-10 12:01 | 43.138.41.195:80 | Cobalt Strike | AS45090 c2 censys CobaltStrike cs-watermark-0 TENCENT-NET-AP | DonPasci |
| 2024-09-10 12:01 | 1.92.86.239:65534 | Cobalt Strike | AS55990 c2 censys CobaltStrike cs-watermark-1234567890 HWCSNET | DonPasci |
| 2024-09-10 12:01 | 18.188.42.187:443 | Cobalt Strike | AMAZON-02 AS16509 c2 censys CobaltStrike cs-watermark-100000 | DonPasci |
| 2024-09-10 12:01 | 47.92.71.219:443 | Cobalt Strike | ALIBABA-CN-NET AS37963 c2 censys CobaltStrike cs-watermark-391144938 | DonPasci |
| 2024-09-10 12:01 | 114.132.244.217:80 | Cobalt Strike | AS45090 c2 censys CobaltStrike cs-watermark-391144938 TENCENT-NET-AP | DonPasci |
| 2024-09-10 12:01 | 47.120.33.31:80 | Cobalt Strike | ALIBABA-CN-NET AS37963 c2 censys CobaltStrike cs-watermark-391144938 | DonPasci |
| 2024-09-10 12:01 | 101.200.135.5:80 | Cobalt Strike | ALIBABA-CN-NET AS37963 c2 censys CobaltStrike cs-watermark-391144938 | DonPasci |
| 2024-09-10 12:01 | 121.40.24.3:7000 | Cobalt Strike | ALIBABA-CN-NET AS37963 c2 censys CobaltStrike cs-watermark-391144938 | DonPasci |
| 2024-09-10 12:01 | 120.46.71.21:80 | Cobalt Strike | AS55990 c2 censys CobaltStrike cs-watermark-987654321 HWCSNET | DonPasci |
| 2024-09-10 12:01 | 154.64.255.251:443 | Cobalt Strike | AS979 c2 censys CobaltStrike cs-watermark-987654321 NETLAB-SDN | DonPasci |
| 2024-09-10 12:01 | 42.51.42.94:2222 | Cobalt Strike | AS56005 c2 censys CobaltStrike cs-watermark-987654321 FASTIDC | DonPasci |
| 2024-09-10 12:01 | 82.157.138.94:80 | Cobalt Strike | AS45090 c2 censys CobaltStrike cs-watermark-987654321 TENCENT-NET-AP | DonPasci |
| 2024-09-10 12:01 | 59.110.216.246:443 | Cobalt Strike | ALIBABA-CN-NET AS37963 c2 censys CobaltStrike cs-watermark-987654321 | DonPasci |
| 2024-09-10 12:01 | 79.137.206.217:8888 | Cobalt Strike | AEZA-AS AS210644 c2 censys CobaltStrike cs-watermark-987654321 | DonPasci |
| 2024-09-10 12:01 | 106.53.48.69:8080 | Cobalt Strike | AS45090 c2 censys CobaltStrike cs-watermark-987654321 TENCENT-NET-AP | DonPasci |