################################################################
# ThreatFox IOCs: recent ip-port - CSV format                  #
# Last updated: 2026-10-03 10:41:35 UTC                        #
#                                                              #
# Terms Of Use: https://threatfox.abuse.ch/faq/#tos            #
# For questions please contact threatfox [at] abuse.ch         #
################################################################
#
# "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter"
"2026-10-03 10:41:35", "1948454", "94.154.43.117:2222", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "", "bins.sh,botnet,ddos,golang,self-spread", "0", "redrabytes"
"2026-10-03 10:13:38", "1948398", "94.154.43.138:48101", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "mirai", "0", "redrabytes"
"2026-10-03 10:13:37", "1948443", "23.95.235.108:6667", "ip:port", "botnet_cc", "elf.perlbot", "ShellBot,DDoS Perl IrcBot", "PerlBot", "", "75", "False", "https://urlhaus.abuse.ch/url/3920026/", "cowrie,honeypot,IRC,perlbot,ShellBot", "0", "ksi_digital"
"2026-10-03 10:13:37", "1948445", "87.251.69.165:15987", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-03 10:13:37", "1948446", "217.60.102.5:22", "ip:port", "payload_delivery", "elf.redtail", "None", "RedTail", "", "75", "False", "https://urlhaus.abuse.ch/url/3927346/", "cowrie,honeypot,Loader,RedTail,scp,ssh", "0", "ksi_digital"
"2026-10-03 09:59:51", "1948444", "176.65.139.76:9111", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "False", "https://bazaar.abuse.ch/sample/9a3cdbde39449e66ea28e1913d5434f196813b11e63736d73591ff0b3727fc39/", "None", "0", "abuse_ch"
"2026-10-03 09:45:40", "1948399", "94.26.83.60:2398", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:49", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-10-03 09:45:20", "1948397", "62.210.87.233:40056", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:27", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-10-03 09:45:06", "1948396", "45.153.34.250:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-03 09:45:03", "1948395", "45.139.104.180:55005", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-03 09:44:51", "1948393", "31.56.209.82:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:55", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-03 09:44:51", "1948394", "31.56.209.82:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:55", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-03 09:44:41", "1948391", "217.60.102.47:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:45", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-03 09:44:41", "1948392", "217.60.102.47:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:45", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-03 09:44:04", "1948389", "189.141.46.66:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:05", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-10-03 09:44:04", "1948390", "190.255.80.136:8092", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:06", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-10-03 09:43:58", "1948388", "185.241.211.16:2021", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-03 09:43:45", "1948386", "164.90.190.203:8090", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:45", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-10-03 09:43:28", "1948385", "145.63.136.150:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:29", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-03 09:43:11", "1948384", "104.250.167.93:2704", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:11", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-10-03 09:43:10", "1948383", "104.239.66.182:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-03 09:39:53", "1948378", "172.252.224.194:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "False", "", "None", "1", "anonymous"
"2026-10-03 09:09:11", "1948359", "94.156.152.24:443", "ip:port", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "", "100", "False", "https://urlhaus.abuse.ch/host/nordertextil.de/", "ClickFix,DEU,FileFix", "0", "YoshmanSJ"
"2026-10-03 09:09:11", "1948360", "140.233.190.106:443", "ip:port", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "", "75", "False", "https://urlhaus.abuse.ch/host/nordertextil.de/", "ClickFix,DEU,FileFix", "0", "YoshmanSJ"
"2026-10-03 09:09:02", "1948375", "78.153.155.29:27651", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-03 09:09:02", "1948376", "87.251.69.165:32876", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-03 09:09:02", "1948377", "89.23.113.104:23789", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-03 09:05:07", "1948374", "160.179.238.25:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-10-03 09:05:05", "1948373", "153.80.242.105:8081", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-03 07:57:40", "1948297", "95.102.34.46:9090", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-10-03 07:57:34", "1948296", "191.124.5.229:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-10-03 07:05:07", "1947466", "120.79.22.70:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-03 07:05:07", "1947467", "207.57.121.71:54322", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-03 07:05:06", "1947465", "43.242.128.150:8083", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-03 07:05:05", "1947464", "103.115.49.124:8083", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-03 06:04:06", "1946051", "78.153.155.29:15987", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-03 06:04:05", "1946052", "151.244.228.91:50050", "ip:port", "payload_delivery", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "False", "", "None", "0", "Elijahmartin"
"2026-10-03 06:04:01", "1946187", "94.26.68.68:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:13:39", "100", "False", "None", "c2,Remcos,services", "0", "Bitsight"
"2026-10-03 06:04:00", "1946236", "147.45.116.124:15987", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-03 06:04:00", "1946238", "170.106.150.123:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-10-03 06:03:59", "1946240", "43.166.79.76:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-10-03 06:03:58", "1946239", "43.166.175.50:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-10-03 06:03:57", "1946241", "43.167.217.157:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-10-03 06:03:57", "1946242", "43.173.28.224:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-10-03 06:03:55", "1946293", "147.45.116.124:23789", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-03 06:03:50", "1947284", "45.39.33.92:8080", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "75", "False", "https://bazaar.abuse.ch/sample/03c77e109a9faa3e99b0f3e9b83eea4f5f7f030662c08c374cb37a04e92c74cc/", "arm,dns-txt,elf,mirai", "0", "wristhulk"
"2026-10-03 06:03:50", "1947285", "45.39.33.133:8080", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "75", "False", "https://bazaar.abuse.ch/sample/03c77e109a9faa3e99b0f3e9b83eea4f5f7f030662c08c374cb37a04e92c74cc/", "arm,dns-txt,elf,mirai", "0", "wristhulk"
"2026-10-03 06:03:50", "1947286", "45.39.33.140:8080", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "75", "False", "https://bazaar.abuse.ch/sample/03c77e109a9faa3e99b0f3e9b83eea4f5f7f030662c08c374cb37a04e92c74cc/", "arm,dns-txt,elf,mirai", "0", "wristhulk"
"2026-10-03 06:03:49", "1947287", "45.39.33.194:8080", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "75", "False", "https://bazaar.abuse.ch/sample/03c77e109a9faa3e99b0f3e9b83eea4f5f7f030662c08c374cb37a04e92c74cc/", "arm,dns-txt,elf,mirai", "0", "wristhulk"
"2026-10-03 06:03:48", "1947288", "45.39.33.195:8080", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "75", "False", "https://bazaar.abuse.ch/sample/03c77e109a9faa3e99b0f3e9b83eea4f5f7f030662c08c374cb37a04e92c74cc/", "arm,dns-txt,elf,mirai", "0", "wristhulk"
"2026-10-03 06:03:47", "1947294", "64.89.160.48:18129", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "75", "False", "https://bazaar.abuse.ch/sample/40b497bc232886341613fdcfd84adaf326aba1336bf42b2ad2cab26f8fc00d9d/", "arm,elf,mirai", "0", "wristhulk"
"2026-10-03 06:03:42", "1947343", "13.140.176.180:9176", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "False", "https://bazaar.abuse.ch/sample/b8747f6b6327c22f267b146fa7acaf29f221b70c2d1565e9d0fef6ce2b34d6d9/", "DDoSAgent,elf,x86-64", "0", "wristhulk"
"2026-10-03 06:03:41", "1947344", "64.227.117.205:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-10-03 06:03:40", "1947345", "13.140.176.180:9157", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "False", "https://bazaar.abuse.ch/sample/035a6840a15e6dcea0403627bb22f749e3aba785da74c839400d5209cccd5292/", "apex2,DDoSAgent,elf,x86-64", "0", "wristhulk"
"2026-10-03 06:03:40", "1947346", "13.140.176.180:9112", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "False", "https://bazaar.abuse.ch/sample/035a6840a15e6dcea0403627bb22f749e3aba785da74c839400d5209cccd5292/", "apex2,DDoSAgent,elf,x86-64", "0", "wristhulk"
"2026-10-03 06:03:40", "1947390", "147.45.116.125:15987", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-03 05:05:06", "1947340", "47.111.118.251:8443", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-03 05:05:05", "1947339", "45.42.40.55:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-03 03:05:05", "1946294", "191.124.5.50:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-03 02:05:05", "1946244", "191.124.5.50:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-03 02:05:05", "1946245", "191.124.5.50:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-03 01:05:05", "1946186", "23.132.164.72:8000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:50", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-10-03 01:05:04", "1946185", "128.90.112.243:8081", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-10-02 23:05:04", "1946055", "158.94.209.99:8088", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-02 23:05:04", "1946056", "51.79.220.125:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "mythic", "1", "anonymous"
"2026-10-02 23:05:03", "1946054", "148.66.17.126:60001", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-02 22:20:02", "1945998", "108.187.43.94:443", "ip:port", "botnet_cc", "win.valley_rat", "Winos", "ValleyRAT", "", "100", "False", "None", "RAT,ValleyRAT", "0", "abuse_ch"
"2026-10-02 22:05:07", "1945995", "153.80.242.105:25", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-02 22:05:06", "1945992", "154.92.252.60:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 22:05:06", "1945993", "154.92.252.61:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 22:05:06", "1945994", "153.80.242.105:22", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-02 21:24:22", "1945917", "34.237.159.252:11116", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "None", "IPWeb,p2p,proxyware", "0", "emilstahl"
"2026-10-02 21:24:14", "1945910", "147.45.116.124:38429", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 21:05:05", "1945914", "154.92.252.61:80", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 21:05:04", "1945913", "154.92.252.59:80", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 20:44:37", "1945620", "128.90.113.45:3000", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 23:15:25", "100", "False", "None", "c2,Remcos,Star-Baby-27", "0", "Bitsight"
"2026-10-02 20:44:35", "1945840", "147.45.116.124:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 20:44:34", "1945841", "147.45.116.125:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 20:44:34", "1945842", "78.153.155.29:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 20:44:33", "1945843", "89.23.113.104:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 20:15:08", "1945839", "154.89.152.200:3306", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "False", "None", "VShell", "0", "abuse_ch"
"2026-10-02 20:05:06", "1945830", "154.92.252.60:80", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 20:05:05", "1945829", "154.92.252.59:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 20:05:04", "1945828", "154.92.252.59:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 19:45:55", "1945782", "91.92.41.66:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-02 19:45:55", "1945783", "91.92.41.92:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-02 19:45:30", "1945781", "46.246.84.19:2703", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:20", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-02 19:45:16", "1945780", "40.160.135.244:9091", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 11:45:06", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-10-02 19:45:05", "1945779", "31.56.209.82:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:55", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-02 19:44:58", "1945778", "23.132.164.72:20", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:50", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-02 19:44:53", "1945777", "217.60.102.47:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:45", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-02 19:44:52", "1945776", "216.250.252.103:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-02 19:44:25", "1945775", "2.59.132.206:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-02 19:44:24", "1945774", "2.27.13.90:8686", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-02 19:43:48", "1945773", "160.179.238.25:5001", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-02 19:43:47", "1945772", "160.179.238.25:5000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-02 19:43:37", "1945771", "150.241.226.20:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-02 19:43:23", "1945770", "13.143.247.153:2021", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:20", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-02 19:43:17", "1945769", "109.199.114.141:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:15", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-10-02 19:43:11", "1945767", "104.239.66.182:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-02 19:43:11", "1945768", "104.239.66.182:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-02 19:05:06", "1945758", "141.255.166.178:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-02 18:10:07", "1945619", "49.235.134.179:8889", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "False", "None", "VShell", "0", "abuse_ch"
"2026-10-02 18:05:05", "1945612", "141.255.166.178:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-02 18:05:04", "1945610", "8.137.35.137:8085", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-02 18:05:04", "1945611", "23.132.164.72:1080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:50", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-10-02 17:05:07", "1945539", "102.117.170.218:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:03", "100", "True", "None", "mythic", "1", "anonymous"
"2026-10-02 17:05:06", "1945537", "124.221.179.152:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-02 17:05:06", "1945538", "153.80.242.105:8447", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-02 17:05:04", "1945536", "120.53.84.98:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-02 16:47:07", "1945518", "167.172.71.210:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-10-02 16:05:07", "1945513", "13.61.179.31:22", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "", "100", "True", "None", "havoc", "1", "anonymous"
"2026-10-02 16:05:07", "1945514", "186.169.33.226:6001", "ip:port", "botnet_cc", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "100", "True", "None", "quasarrat", "1", "anonymous"
"2026-10-02 16:05:07", "1945515", "124.222.21.29:22", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-10-02 16:05:06", "1945512", "153.80.242.105:8445", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-02 16:05:05", "1945511", "153.80.242.105:8008", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-02 15:54:52", "1945498", "180.93.125.137:2245", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 06:25:55", "100", "False", "None", "c2,Freshlogs.ddns,Remcos", "0", "Bitsight"
"2026-10-02 15:54:52", "1945499", "87.251.69.144:15987", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 15:05:08", "1945493", "41.142.103.28:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-10-02 15:05:06", "1945490", "198.13.47.210:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 15:05:06", "1945491", "198.13.47.210:80", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 15:05:06", "1945492", "198.13.47.210:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 14:46:32", "1945356", "185.236.203.101:62927", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:26:33", "100", "False", "None", "c2,EMBER 32,Remcos", "0", "Bitsight"
"2026-10-02 14:46:32", "1945357", "180.93.125.137:11225", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 05:22:12", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-10-02 14:46:31", "1945361", "87.251.69.145:15987", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 14:05:06", "1945353", "119.45.105.71:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 14:05:05", "1945351", "119.45.105.71:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 14:05:05", "1945352", "119.45.105.71:80", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 13:55:05", "1945306", "87.251.69.138:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 13:55:05", "1945307", "87.251.69.144:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 13:55:04", "1945308", "87.251.69.145:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 13:55:04", "1945313", "180.93.125.137:14645", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:14:19", "100", "False", "None", "c2,Friday,Remcos", "0", "Bitsight"
"2026-10-02 13:55:03", "1945309", "87.251.69.165:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 13:55:01", "1945322", "87.251.69.138:15987", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 13:55:01", "1945350", "5.181.2.72:27651", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 13:46:27", "1945349", "159.75.202.228:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:06", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-10-02 13:46:24", "1945348", "141.255.166.178:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:04", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-10-02 13:13:20", "1945344", "46.151.182.182:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "", "50", "False", "https://www.shodan.io/host/46.151.182.182#31337", "shodan,sliver", "0", "juroots"
"2026-10-02 13:13:16", "1945343", "159.89.28.205:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "", "50", "False", "https://www.shodan.io/host/159.89.28.205#31337", "shodan,sliver", "0", "juroots"
"2026-10-02 13:13:13", "1945342", "156.251.16.152:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "", "50", "False", "https://www.shodan.io/host/156.251.16.152#31337", "shodan,sliver", "0", "juroots"
"2026-10-02 13:13:10", "1945341", "154.219.114.14:8443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "", "50", "False", "https://www.shodan.io/host/154.219.114.14#8443", "shodan,sliver", "0", "juroots"
"2026-10-02 13:13:06", "1945340", "156.223.213.38:1177", "ip:port", "botnet_cc", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "50", "False", "https://www.shodan.io/host/156.223.213.38#1177", "njrat,shodan", "0", "juroots"
"2026-10-02 13:13:03", "1945339", "68.178.205.17:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:31", "50", "False", "https://www.shodan.io/host/68.178.205.17#443", "Havoc,shodan", "0", "juroots"
"2026-10-02 13:12:59", "1945338", "188.132.242.67:8731", "ip:port", "botnet_cc", "win.darkcomet", "Breut,Fynloski,klovbot", "DarkComet", "", "50", "False", "https://www.shodan.io/host/188.132.242.67#8731", "DarkComet,shodan", "0", "juroots"
"2026-10-02 13:12:56", "1945337", "47.95.201.24:9443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "50", "False", "https://www.shodan.io/host/47.95.201.24#9443", "cobaltstrike,cs-watermark-391144938,shodan", "0", "juroots"
"2026-10-02 13:12:53", "1945336", "47.113.98.42:50050", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "50", "False", "https://www.shodan.io/host/47.113.98.42#50050", "cobaltstrike,shodan", "0", "juroots"
"2026-10-02 13:12:49", "1945335", "223.109.142.7:50050", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-02 19:05:08", "50", "False", "https://www.shodan.io/host/223.109.142.7#50050", "cobaltstrike,shodan", "0", "juroots"
"2026-10-02 13:12:46", "1945334", "129.204.11.247:50050", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "50", "False", "https://www.shodan.io/host/129.204.11.247#50050", "cobaltstrike,shodan", "0", "juroots"
"2026-10-02 13:12:43", "1945333", "81.169.151.12:8888", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "https://www.shodan.io/host/81.169.151.12#8888", "shodan,supershell", "0", "juroots"
"2026-10-02 13:12:39", "1945332", "78.46.206.8:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "https://www.shodan.io/host/78.46.206.8#443", "gophish,shodan", "0", "juroots"
"2026-10-02 13:12:36", "1945331", "43.133.13.81:8412", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "https://www.shodan.io/host/43.133.13.81#8412", "gophish,shodan", "0", "juroots"
"2026-10-02 13:12:29", "1945330", "103.239.168.12:4443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "https://www.shodan.io/host/103.239.168.12#4443", "gophish,shodan", "0", "juroots"
"2026-10-02 13:05:07", "1945328", "82.25.12.111:80", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 13:05:07", "1945329", "82.25.12.111:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 13:05:05", "1945326", "45.142.31.82:80", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 13:05:05", "1945327", "82.25.12.111:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 12:05:05", "1945312", "45.202.1.16:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 12:05:04", "1945310", "45.202.1.16:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 12:05:04", "1945311", "45.202.1.16:80", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 11:31:54", "1945281", "212.192.14.31:27651", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 11:31:54", "1945294", "89.185.82.37:27651", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 11:05:05", "1945297", "45.142.31.82:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 11:05:04", "1945296", "45.142.31.82:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 10:05:05", "1945284", "43.160.225.40:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 10:05:04", "1945283", "109.74.144.151:80", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 09:45:49", "1945280", "92.51.46.35:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:46", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-10-02 09:45:37", "1945279", "78.17.25.46:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-02 09:45:31", "1945278", "64.177.45.143:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:27", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-10-02 09:45:22", "1945277", "45.93.95.212:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:18", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-10-02 09:45:13", "1945275", "45.135.119.121:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:09", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-10-02 09:45:13", "1945276", "45.139.104.199:55006", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-02 09:44:55", "1945274", "31.56.19.40:6666", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:54", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-10-02 09:44:46", "1945273", "217.60.184.45:8855", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:45", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-02 09:44:45", "1945272", "216.203.20.87:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:44", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-10-02 09:44:24", "1945269", "207.57.162.48:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:22", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-10-02 09:44:24", "1945270", "207.57.163.104:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:22", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-10-02 09:44:24", "1945271", "207.57.163.104:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:22", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-10-02 09:44:22", "1945268", "203.161.47.31:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:21", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-10-02 09:44:12", "1945267", "193.24.123.206:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:11", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-10-02 09:43:56", "1945266", "180.76.97.85:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:54", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-10-02 09:43:42", "1945265", "158.94.210.16:2853", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:41", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-10-02 09:43:33", "1945264", "149.88.76.74:444", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-02 09:43:32", "1945263", "149.202.227.107:7444", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:31", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-10-02 09:43:28", "1945262", "143.202.93.210:9001", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:27", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-10-02 09:43:18", "1945261", "120.79.146.35:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:17", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-10-02 09:24:36", "1945242", "89.185.82.38:27651", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 09:24:36", "1945243", "89.185.82.39:38429", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 09:20:46", "1945249", "43.157.108.39:9152", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "https://www.shodan.io/host/43.157.108.39#9152", "mythic,shodan", "0", "juroots"
"2026-10-02 09:05:05", "1945245", "43.160.225.40:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 09:05:04", "1945244", "43.160.225.40:80", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 08:24:45", "1945229", "144.172.85.64:8443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "False", "https://bazaar.abuse.ch/sample/aba6806c623c0624d573a164146cf6863bd2bd6f34a84d26be77d48f8c60eb97/", "None", "0", "abuse_ch"
"2026-10-02 08:05:06", "1945222", "109.74.144.151:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 08:05:05", "1945220", "153.80.242.105:3478", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-02 08:05:05", "1945221", "153.80.242.105:5349", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-02 08:05:04", "1945219", "153.80.242.105:2053", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-02 07:41:39", "1945212", "191.124.5.50:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 02:05:06", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-10-02 07:05:07", "1945203", "153.80.242.105:993", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-02 07:05:06", "1945202", "153.80.242.105:81", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-02 06:31:08", "1944905", "161.35.146.120:80", "ip:port", "botnet_cc", "osx.amos", "Atomic macOS Stealer", "AMOS", "", "90", "False", "https://www.virustotal.com/gui/file/6bfcdb4920383375b7e519918df7eb4db751b974b5571a15ce66b82478012620", "AccountsHelper,AMOS,ClickFix,Foxveil,macOS", "0", "c4ffeine"
"2026-10-02 06:31:04", "1944970", "45.146.91.241:34532", "ip:port", "botnet_cc", "elf.drifter", "Dongfeng", "Drifter", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/drifter", "android,botnet,ddos,dongfeng,drifter", "0", "deepfield"
"2026-10-02 06:31:03", "1944940", "45.146.91.241:32505", "ip:port", "botnet_cc", "elf.drifter", "Dongfeng", "Drifter", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/drifter", "android,botnet,ddos,dongfeng,drifter", "0", "deepfield"
"2026-10-02 06:31:03", "1944944", "72.60.189.171:6572", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-10-03 10:41:42", "100", "False", "None", "a6e35b22fe3b66b64d31d4856b5bea31,c2,remus", "0", "Bitsight"
"2026-10-02 06:31:02", "1944930", "185.215.151.9:8089", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 09:18:35", "100", "False", "None", "c2,New Social Security Statement 2026,Remcos", "0", "Bitsight"
"2026-10-02 06:30:59", "1944875", "172.236.132.235:23017", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "https://synthient.com/blog/ipweb-peering-from-within", "APSolo", "0", "synth"
"2026-10-02 06:30:58", "1944872", "52.36.201.99:16000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "False", "https://synthient.com/blog/ipweb-peering-from-within", "APSolo", "0", "synth"
"2026-10-02 06:30:58", "1944873", "172.236.129.220:23007", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "https://synthient.com/blog/ipweb-peering-from-within", "APSolo", "0", "synth"
"2026-10-02 06:30:58", "1944874", "172.236.132.235:23009", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "https://synthient.com/blog/ipweb-peering-from-within", "APSolo", "0", "synth"
"2026-10-02 06:30:55", "1944812", "159.223.24.190:34567", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-10-02 06:30:53", "1944795", "204.44.69.213:31883", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 14:17:30", "100", "False", "None", "c2,LEXUSS,Remcos", "0", "Bitsight"
"2026-10-02 06:30:52", "1944735", "93.113.180.149:3778", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "80", "False", "None", "mirai", "0", "seckle"
"2026-10-02 06:30:45", "1944144", "134.122.126.123:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 23:59:56", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-10-02 06:30:35", "1944114", "5.181.2.75:46852", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 06:30:34", "1944113", "212.192.14.31:32876", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 06:30:32", "1944028", "5.181.2.75:15987", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-02 06:30:31", "1944024", "128.90.106.115:3000", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-01 22:11:55", "100", "False", "None", "c2,Remcos,Star-Baby-27", "0", "Bitsight"
"2026-10-02 06:30:24", "1945187", "45.146.91.241:36275", "ip:port", "botnet_cc", "elf.drifter", "Dongfeng", "Drifter", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/drifter", "android,botnet,ddos,dongfeng,drifter", "0", "deepfield"
"2026-10-02 05:38:36", "1945019", "172.245.89.137:443", "ip:port", "botnet_cc", "js.magecart", "None", "magecart", "", "100", "False", "None", "None", "0", "LocalReporter"
"2026-10-02 05:38:30", "1945005", "217.144.185.101:443", "ip:port", "botnet_cc", "js.iclickfix", "None", "IClickFix", "", "100", "False", "None", "None", "0", "LocalReporter"
"2026-10-02 05:38:30", "1945006", "138.124.60.214:443", "ip:port", "botnet_cc", "js.iclickfix", "None", "IClickFix", "", "100", "False", "None", "None", "0", "LocalReporter"
"2026-10-02 05:38:30", "1945007", "193.233.201.114:443", "ip:port", "botnet_cc", "js.iclickfix", "None", "IClickFix", "", "100", "False", "None", "None", "0", "LocalReporter"
"2026-10-02 05:38:30", "1945008", "194.26.192.83:443", "ip:port", "botnet_cc", "js.iclickfix", "None", "IClickFix", "", "100", "False", "None", "None", "0", "LocalReporter"
"2026-10-02 05:38:30", "1945009", "185.196.8.142:443", "ip:port", "botnet_cc", "js.iclickfix", "None", "IClickFix", "", "100", "False", "None", "None", "0", "LocalReporter"
"2026-10-02 05:38:30", "1945010", "45.131.215.56:80", "ip:port", "botnet_cc", "js.iclickfix", "None", "IClickFix", "", "100", "False", "None", "None", "0", "LocalReporter"
"2026-10-02 05:05:06", "1944973", "203.88.118.26:80", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 05:05:06", "1944974", "203.88.118.26:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 05:05:05", "1944972", "203.88.118.26:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 05:05:04", "1944971", "185.33.86.141:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 04:48:14", "1944964", "45.130.167.184:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "", "50", "False", "https://www.shodan.io/host/45.130.167.184#31337", "shodan,sliver", "0", "juroots"
"2026-10-02 04:48:11", "1944963", "207.148.73.17:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "", "50", "False", "https://www.shodan.io/host/207.148.73.17#31337", "shodan,sliver", "0", "juroots"
"2026-10-02 04:48:08", "1944962", "196.251.121.120:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "", "50", "False", "https://www.shodan.io/host/196.251.121.120#31337", "shodan,sliver", "0", "juroots"
"2026-10-02 04:48:06", "1944961", "152.67.199.142:10443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "", "50", "False", "https://www.shodan.io/host/152.67.199.142#10443", "shodan,sliver", "0", "juroots"
"2026-10-02 04:48:03", "1944960", "137.184.126.9:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "", "50", "False", "https://www.shodan.io/host/137.184.126.9#31337", "shodan,sliver", "0", "juroots"
"2026-10-02 04:48:00", "1944959", "43.139.9.82:12340", "ip:port", "botnet_cc", "win.shadowpad", "POISONPLUG.SHADOW,XShellGhost", "ShadowPad", "", "50", "False", "https://www.shodan.io/host/43.139.9.82#12340", "shadowpad,shodan", "0", "juroots"
"2026-10-02 04:47:57", "1944958", "68.178.202.150:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:31", "50", "False", "https://www.shodan.io/host/68.178.202.150#443", "Havoc,shodan", "0", "juroots"
"2026-10-02 04:47:54", "1944957", "192.169.176.54:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "", "50", "False", "https://www.shodan.io/host/192.169.176.54#443", "Havoc,shodan", "0", "juroots"
"2026-10-02 04:47:52", "1944956", "82.156.242.28:82", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "50", "False", "https://www.shodan.io/host/82.156.242.28#82", "cobaltstrike,cs-watermark-391144938,shodan", "0", "juroots"
"2026-10-02 04:47:49", "1944955", "154.36.164.137:50050", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "50", "False", "https://www.shodan.io/host/154.36.164.137#50050", "cobaltstrike,shodan", "0", "juroots"
"2026-10-02 04:47:46", "1944954", "54.198.22.96:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "https://www.shodan.io/host/54.198.22.96#443", "gophish,shodan", "0", "juroots"
"2026-10-02 04:47:43", "1944953", "35.238.96.61:10443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "https://www.shodan.io/host/35.238.96.61#10443", "gophish,shodan", "0", "juroots"
"2026-10-02 04:47:40", "1944952", "34.116.242.54:3333", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "https://www.shodan.io/host/34.116.242.54#3333", "gophish,shodan", "0", "juroots"
"2026-10-02 04:47:38", "1944951", "20.96.136.97:3333", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "https://www.shodan.io/host/20.96.136.97#3333", "gophish,shodan", "0", "juroots"
"2026-10-02 04:47:35", "1944950", "172.178.123.238:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "https://www.shodan.io/host/172.178.123.238#443", "gophish,shodan", "0", "juroots"
"2026-10-02 04:05:08", "1944942", "185.33.86.141:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 04:05:08", "1944943", "185.33.86.141:80", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-10-02 04:05:05", "1944941", "111.170.148.132:15673", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "viper", "1", "anonymous"
"2026-10-02 03:05:04", "1944928", "111.170.148.132:15674", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "viper", "1", "anonymous"
"2026-10-02 03:05:04", "1944929", "111.170.148.132:15675", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "viper", "1", "anonymous"
"2026-10-02 03:05:03", "1944927", "111.170.148.132:5673", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "viper", "1", "anonymous"
"2026-10-02 02:05:07", "1944914", "148.66.17.125:60001", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-02 02:05:06", "1944912", "148.66.17.123:60001", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-02 02:05:06", "1944913", "148.66.17.124:60001", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-02 02:05:04", "1944911", "134.175.125.204:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-02 01:05:05", "1944892", "45.136.14.91:110", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-01 19:45:49", "1944190", "94.249.207.133:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-10-01 19:45:45", "1944189", "91.92.41.92:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-01 19:45:11", "1944188", "45.139.104.232:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-01 19:45:10", "1944187", "45.139.104.199:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-01 19:45:01", "1944186", "35.212.135.58:6688", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:59", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-10-01 19:45:00", "1944185", "34.22.149.111:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:59", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-10-01 19:44:54", "1944184", "23.94.212.126:8911", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:52", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-10-01 19:44:52", "1944183", "23.132.164.73:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:50", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-01 19:44:25", "1944182", "207.57.162.48:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:22", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-10-01 19:43:50", "1944180", "170.78.199.162:10443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:48", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-10-01 19:43:45", "1944179", "160.250.181.159:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:43", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-01 19:43:44", "1944178", "160.119.76.118:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:42", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-01 19:43:36", "1944177", "153.80.249.4:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:34", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-01 19:43:34", "1944175", "150.241.226.20:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-01 19:43:34", "1944176", "150.241.226.20:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-01 19:43:17", "1944173", "117.55.235.249:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:16", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-10-01 19:43:14", "1944172", "107.174.212.89:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-01 19:43:13", "1944171", "107.172.133.178:56002", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-01 19:05:05", "1944119", "178.16.53.91:2052", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-01 19:05:05", "1944120", "47.122.114.156:9090", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-01 19:05:04", "1944118", "2.50.170.145:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-10-01 17:35:05", "1944031", "142.54.180.138:80", "ip:port", "botnet_cc", "win.socks5_systemz", "ProxyBox", "Socks5Systemz", "", "100", "False", "None", "Socks5Systemz", "0", "abuse_ch"
"2026-10-01 16:28:07", "1943949", "5.181.2.72:23789", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-01 16:28:07", "1943950", "5.181.2.75:27651", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-01 16:10:31", "1943947", "185.236.203.99:62927", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/94933b78c619629d1195723465a47de5eb1d1fed39688b32c6455b09e984b5c2/", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-10-01 15:58:37", "1943933", "64.89.160.222:5487", "ip:port", "botnet_cc", "elf.tsunami", "Muhstik,Radiation,Amnesia", "Tsunami", "", "100", "False", "", "c2,mirai", "0", "redrabytes"
"2026-10-01 15:58:37", "1943934", "64.89.160.222:55487", "ip:port", "botnet_cc", "elf.tsunami", "Muhstik,Radiation,Amnesia", "Tsunami", "", "100", "False", "", "c2,mirai", "0", "redrabytes"
"2026-10-01 15:58:37", "1943936", "193.104.58.27:8765", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "False", "https://www.virustotal.com/gui/ip-address/193.104.58.27", "fakeblender,python-agent", "0", "Lenny3BO"
"2026-10-01 15:58:36", "1943937", "37.59.205.1:8443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "False", "https://www.virustotal.com/gui/ip-address/37.59.205.1", "fakeblender,stager-fetch", "0", "Lenny3BO"
"2026-10-01 15:45:12", "1943931", "111.229.148.135:443", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "False", "None", "VShell", "0", "abuse_ch"
"2026-10-01 15:09:12", "1943911", "155.103.69.190:7707", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/c943e2f47a072da49f5ee2a3c1c0d4c9282200bb4cb12e1dc72fb014e9904162/", "XWorm", "0", "abuse_ch"
"2026-10-01 15:00:34", "1943910", "102.220.163.27:3070", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/d5e69e9687ec029ed1adfb72317c848439b5948e3175b81db883190b4215919c/", "xworm", "0", "abuse_ch"
"2026-10-01 14:55:29", "1943908", "46.151.182.5:5050", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/3b8222be3f09075c7b0ee8cf3934a429c8621aace41d5ba1b26934910eb2b9a0/", "xworm", "0", "abuse_ch"
"2026-10-01 14:38:46", "1943895", "185.166.155.142:443", "ip:port", "botnet_cc", "win.salatstealer", "None", "SalatStealer", "", "75", "False", "https://bazaar.abuse.ch/sample/08f817d399bbad41fac3eee9a4df7c83b9eb30208b2aa55b69b05b0413c92ecc/", "SalatStealer", "0", "abuse_ch"
"2026-10-01 14:30:28", "1943889", "45.88.91.194:60508", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/4c62c64802dca499b6d26134503540478f82f7a179cfb921ffe79504f6beb932/", "remcos", "0", "abuse_ch"
"2026-10-01 14:30:28", "1943890", "45.88.91.194:60509", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/4c62c64802dca499b6d26134503540478f82f7a179cfb921ffe79504f6beb932/", "remcos", "0", "abuse_ch"
"2026-10-01 14:18:14", "1943885", "5.181.2.75:23789", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-10-01 14:08:18", "1943883", "104.219.238.12:8866", "ip:port", "botnet_cc", "win.noneuclid_rat", "LiberiumRAT,ShadowRoot,SheetRAT", "NonEuclid RAT", "", "75", "False", "https://bazaar.abuse.ch/sample/274ef738a146d4f472a1688c87affc57c64b0b79921a331c8e9261e27efc8b89/", "RAT,SheetRAT", "0", "abuse_ch"
"2026-10-01 14:05:06", "1943881", "1.94.219.96:53231", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-01 14:05:06", "1943882", "43.156.133.8:80", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-10-01 14:05:04", "1943880", "18.220.97.18:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "mythic", "1", "anonymous"
"2026-10-01 13:46:22", "1943873", "43.139.239.108:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:14", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-10-01 13:33:34", "1943854", "176.65.132.117:11225", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 04:14:00", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-10-01 13:33:33", "1943855", "31.77.219.112:6894", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:25:07", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-10-01 13:05:09", "1943852", "13.61.179.31:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "", "100", "True", "None", "havoc", "1", "anonymous"
"2026-10-01 13:05:07", "1943851", "13.61.179.31:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "", "100", "True", "None", "havoc", "1", "anonymous"
"2026-10-01 13:05:04", "1943850", "93.185.165.104:22", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-01 12:40:34", "1943833", "94.154.32.41:7004", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/089b48968118f4593d5841278a3b51d0aefe211ca0441d015a5b4664163e26a1/", "xworm", "0", "abuse_ch"
"2026-10-01 10:05:05", "1943746", "93.185.165.104:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 07:57:40", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-10-01 09:45:35", "1943744", "85.120.255.76:3000", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-10-03 11:45:40", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-10-01 09:45:26", "1943743", "67.205.131.19:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:30", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-10-01 09:45:07", "1943742", "45.139.104.232:55009", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-01 09:45:03", "1943741", "41.43.184.224:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-01 09:44:50", "1943740", "23.94.252.242:2052", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:52", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-10-01 09:44:48", "1943738", "23.132.164.73:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:50", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-01 09:44:48", "1943739", "23.132.164.73:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:50", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-01 09:44:20", "1943737", "201.79.51.29:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:20", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-10-01 09:44:00", "1943736", "185.241.211.167:8050", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-01 09:43:43", "1943735", "160.119.76.118:444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:42", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-01 09:43:30", "1943733", "144.31.251.6:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:43:28", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-10-01 09:43:28", "1943731", "143.198.176.61:33335", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:26", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-10-01 09:43:27", "1943729", "139.64.172.10:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-10-01 09:43:26", "1943726", "137.184.139.185:80", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-10-03 11:43:24", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-10-01 09:43:23", "1943723", "130.61.61.21:8443", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-10-03 11:43:22", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-10-01 09:43:13", "1943714", "105.137.170.202:5000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-01 09:43:13", "1943715", "105.137.170.202:5001", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-10-01 09:43:08", "1943713", "103.228.171.113:4322", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:07", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-10-01 09:11:07", "1943703", "104.248.155.168:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 14:31:30", "100", "False", "https://github.com/deepfield/public-research/blob/main/aisuru/README.md", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-10-01 08:14:20", "1943672", "217.64.148.147:64562", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 05:43:31", "100", "False", "None", "c2,Remcos,WINWIN", "0", "Bitsight"
"2026-10-01 08:14:20", "1943673", "172.94.53.99:65070", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 04:03:51", "100", "False", "None", "c2,Oct-1-2026,Remcos", "0", "Bitsight"
"2026-10-01 06:55:23", "1943641", "154.12.117.217:2408", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:20:55", "75", "False", "https://bazaar.abuse.ch/sample/e7de6197ad8312d8722b477d3ca988e196f17be5f5498eedc4b8d3c6c3791993/", "remcos", "0", "abuse_ch"
"2026-10-01 06:00:38", "1943602", "134.122.68.238:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 06:13:02", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-10-01 06:00:37", "1943603", "137.184.100.23:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 06:13:02", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-10-01 06:00:37", "1943604", "138.68.128.163:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 06:13:02", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-10-01 06:00:36", "1943605", "157.230.254.212:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 06:13:02", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-10-01 06:00:36", "1943606", "157.245.188.54:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 06:13:02", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-10-01 06:00:34", "1943607", "167.172.93.168:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 06:13:02", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-10-01 06:00:34", "1943608", "168.144.113.82:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 06:13:02", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-10-01 06:00:33", "1943609", "201.79.51.164:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 06:13:02", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-10-01 06:00:32", "1943610", "206.189.2.86:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 06:13:02", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-10-01 06:00:31", "1943611", "209.38.240.44:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 06:13:02", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-10-01 05:17:46", "1943365", "140.233.190.110:34567", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 03:40:45", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-10-01 05:17:45", "1943351", "140.233.190.114:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 04:29:28", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-10-01 03:46:17", "1943506", "156.254.20.48:5998", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:06", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-10-01 02:05:04", "1943459", "130.94.67.107:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:22", "100", "True", "None", "mythic", "1", "anonymous"
"2026-10-01 01:05:04", "1943431", "36.255.97.19:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 10:17:05", "100", "False", "None", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-09-30 19:46:25", "1943251", "93.185.167.211:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:47", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-30 19:46:08", "1943250", "77.241.196.163:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:33", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-09-30 19:45:57", "1943248", "51.20.9.206:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-10-03 11:45:23", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-09-30 19:45:57", "1943249", "52.196.90.106:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-10-03 11:45:24", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-09-30 19:45:48", "1943247", "45.225.135.166:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-30 19:45:42", "1943244", "45.146.91.83:1908", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:12", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-30 19:45:31", "1943243", "36.94.34.18:31845", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-10-03 11:45:00", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-09-30 19:45:27", "1943242", "31.6.11.79:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:57", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-30 19:44:42", "1943241", "202.146.222.156:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-30 19:44:41", "1943240", "202.146.222.156:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-30 19:44:28", "1943237", "192.253.229.23:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-30 19:44:28", "1943238", "192.253.229.23:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-30 19:44:24", "1943236", "192.142.10.165:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-30 19:43:30", "1943235", "130.61.61.21:80", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-10-03 11:43:22", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-09-30 19:43:08", "1943232", "103.114.216.59:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-30 19:43:08", "1943233", "103.114.216.59:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-30 19:43:08", "1943234", "103.114.216.59:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-30 19:00:46", "1943039", "45.146.91.234:7061", "ip:port", "botnet_cc", "elf.drifter", "Dongfeng", "Drifter", "2026-10-02 17:24:38", "100", "False", "https://github.com/deepfield/public-research/tree/main/drifter", "android,botnet,ddos,dongfeng,drifter", "0", "deepfield"
"2026-09-30 19:00:45", "1943038", "109.107.189.252:7061", "ip:port", "botnet_cc", "elf.drifter", "Dongfeng", "Drifter", "2026-10-02 17:24:38", "100", "False", "https://github.com/deepfield/public-research/tree/main/drifter", "android,botnet,ddos,dongfeng,drifter", "0", "deepfield"
"2026-09-30 19:00:45", "1943040", "45.146.91.241:7061", "ip:port", "botnet_cc", "elf.drifter", "Dongfeng", "Drifter", "2026-10-02 17:24:38", "100", "False", "https://github.com/deepfield/public-research/tree/main/drifter", "android,botnet,ddos,dongfeng,drifter", "0", "deepfield"
"2026-09-30 19:00:27", "1943175", "190.144.146.90:5510", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 20:14:35", "100", "False", "None", "AGOSTO 05 MUCHACHA 2026,c2,Remcos", "0", "Bitsight"
"2026-09-30 19:00:27", "1943177", "176.65.132.117:2245", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-01 19:19:04", "100", "False", "None", "c2,Freshlogs.ddns,Remcos", "0", "Bitsight"
"2026-09-30 19:00:26", "1943176", "135.148.70.131:9217", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-10-03 07:13:29", "100", "False", "None", "b52d1c3d7f8738c0a98953494ab0ccf7,c2,remus", "0", "Bitsight"
"2026-09-30 17:06:42", "1942970", "23.189.104.198:2445", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 09:24:29", "100", "False", "None", "c2,Remcos,Yok", "0", "Bitsight"
"2026-09-30 17:06:41", "1942979", "5.181.2.72:15987", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-02 22:53:49", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-30 17:06:40", "1942982", "104.248.155.168:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-01 18:45:01", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-30 16:49:47", "1943020", "147.50.252.47:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 06:05:06", "50", "False", "None", "asyncrat", "0", "juroots"
"2026-09-30 16:49:47", "1943021", "147.50.252.47:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 06:05:06", "50", "False", "None", "asyncrat", "0", "juroots"
"2026-09-30 16:49:47", "1943022", "147.50.252.47:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-01 13:05:05", "50", "False", "None", "asyncrat", "0", "juroots"
"2026-09-30 16:49:47", "1943023", "147.50.252.47:9977", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 07:05:05", "50", "False", "None", "asyncrat", "0", "juroots"
"2026-09-30 15:45:30", "1942964", "155.103.69.174:4981", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 02:22:15", "75", "False", "https://bazaar.abuse.ch/sample/9f0df64cc8a15b2c96e639a975acb9f54ff26721dc60a8035d4bbc65476485e7/", "remcos", "0", "abuse_ch"
"2026-09-30 15:14:06", "1942943", "5.181.2.75:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-03 01:51:04", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-30 14:49:39", "1942927", "91.92.41.39:2026", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 07:25:02", "100", "False", "None", "c2,Remcos,Remote", "0", "Bitsight"
"2026-09-30 13:01:04", "1942898", "217.64.148.139:56151", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 09:03:20", "75", "False", "https://bazaar.abuse.ch/sample/47628bf5d571084ccd174e03c02efb2e2211b69d88a12445829344b1cdeea945/", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-09-30 12:43:57", "1942885", "140.233.190.110:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 10:34:06", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-09-30 12:43:56", "1942886", "140.233.190.114:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 12:35:48", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-09-30 12:43:56", "1942887", "140.233.190.115:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 12:35:48", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-09-30 12:41:51", "1942890", "196.251.121.70:8080", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-01 16:12:30", "75", "False", "https://bazaar.abuse.ch/sample/4bcb28009c43cbbbcd17096f8363d7f756e5843bc36cb03f92f540f306a1fcf6/", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-09-30 12:21:48", "1942871", "72.61.149.25:9837", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-10-03 11:27:20", "100", "False", "None", "a8fad2c9b12a4c0cb3baf1bfbfc23e60,c2,remus", "0", "Bitsight"
"2026-09-30 09:57:03", "1942797", "143.244.155.53:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 17:18:14", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-30 09:45:42", "1942807", "65.20.107.184:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-30 09:45:39", "1942806", "62.113.106.171:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:26", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-30 09:45:29", "1942802", "45.88.91.165:3535", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:18", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-30 09:45:10", "1942799", "37.72.168.199:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:01", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-30 09:44:24", "1942798", "198.211.102.128:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:16", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-30 09:43:55", "1942796", "172.81.182.244:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-30 09:43:50", "1942795", "162.243.6.201:9443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-10-03 11:43:44", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-09-30 09:43:48", "1942794", "159.223.145.166:8443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-10-03 11:43:42", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-09-30 09:43:46", "1942791", "156.252.92.138:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:40", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-30 09:43:46", "1942792", "157.20.182.14:9997", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:40", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-30 09:43:46", "1942793", "157.20.182.15:2030", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:40", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-30 09:43:24", "1942790", "13.143.247.153:2010", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:20", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-30 09:43:21", "1942789", "128.90.135.200:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-30 09:43:17", "1942788", "116.213.43.169:29443", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:16", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-30 09:43:07", "1942787", "103.114.216.59:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-30 09:38:03", "1942781", "140.233.190.110:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 11:58:51", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-30 09:28:46", "1942769", "165.245.250.162:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 17:18:14", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-30 09:28:45", "1942770", "104.248.155.168:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 17:18:14", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-30 09:28:45", "1942771", "142.93.6.168:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 17:18:14", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-30 09:28:45", "1942772", "167.172.71.210:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 17:18:14", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-30 09:28:44", "1942773", "159.223.24.190:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 17:18:14", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-30 08:15:53", "1942761", "155.103.70.232:14444", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:26:57", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-30 08:06:59", "1942743", "140.233.190.108:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 11:24:46", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-30 06:02:45", "1942375", "109.74.144.151:44443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 08:05:05", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 06:02:42", "1942381", "119.45.105.71:9821", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 15:05:04", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 06:02:42", "1942383", "121.127.253.146:44344", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 00:05:04", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 06:02:28", "1942410", "154.92.252.60:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 22:05:04", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 06:02:27", "1942411", "154.92.252.61:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 21:05:05", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 06:02:27", "1942412", "158.94.209.12:8444", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:41", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 06:02:19", "1942428", "185.33.86.141:44499", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 04:05:07", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 06:02:15", "1942436", "198.13.47.210:4432", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 14:05:06", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 06:02:14", "1942441", "203.88.118.26:8822", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 05:05:05", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 06:02:10", "1942448", "209.99.188.193:11443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 06:05:05", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 06:02:10", "1942449", "209.99.188.193:4431", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 06:05:05", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 06:01:57", "1942474", "43.225.157.17:5566", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 10:05:10", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 06:01:52", "1942483", "45.142.31.82:5656", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 10:05:11", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 06:01:51", "1942486", "45.202.1.16:6901", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 12:05:04", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 06:01:47", "1942496", "5.180.20.26:15119", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 07:05:04", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 06:01:37", "1942517", "82.25.12.111:1337", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 13:05:05", "100", "False", "", "None", "0", "GAYINT_DOT_ORG"
"2026-09-30 05:49:49", "1942053", "102.220.163.160:10213", "ip:port", "botnet_cc", "apk.cecbot", "None", "CECbot", "2026-10-02 19:54:27", "100", "False", "https://github.com/deepfield/public-research/tree/main/cecbot", "android,botnet,cecbot,ddos", "0", "deepfield"
"2026-09-30 05:49:38", "1942166", "5.181.2.72:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-02 22:28:47", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-30 05:49:36", "1942168", "159.89.166.50:8531", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-10-03 11:52:57", "100", "False", "None", "5a4378fb90db39f09c7b18d1f314e645,c2,remus", "0", "Bitsight"
"2026-09-30 05:49:35", "1942169", "124.198.131.136:1000", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-01 19:20:27", "100", "False", "None", "c2,Remcos,svchot", "0", "Bitsight"
"2026-09-30 05:49:29", "1942203", "172.111.139.78:2301", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 07:39:52", "100", "False", "None", "c2,nuevos 07,Remcos", "0", "Bitsight"
"2026-09-30 05:49:12", "1942301", "140.233.190.114:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 11:55:00", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-30 05:49:11", "1942302", "187.127.178.97:9832", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-10-03 10:50:07", "100", "False", "None", "a6e35b22fe3b66b64d31d4856b5bea31,c2,remus", "0", "Bitsight"
"2026-09-30 05:49:06", "1942312", "130.94.107.174:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 02:05:43", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-30 05:49:05", "1942313", "130.94.17.15:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 02:05:43", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-30 05:49:04", "1942314", "38.60.238.109:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 02:05:43", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-30 05:48:52", "1942576", "140.233.190.108:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 12:35:48", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-30 03:46:41", "1942585", "8.166.128.186:50053", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:18", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-29 19:45:49", "1942076", "80.76.49.48:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-29 19:45:31", "1942070", "46.151.182.21:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-29 19:45:31", "1942071", "46.151.182.21:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-29 19:45:31", "1942073", "46.151.182.21:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-29 19:45:24", "1942066", "45.146.90.209:1996", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-29 19:45:24", "1942067", "45.146.90.210:1907", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:12", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-29 19:45:10", "1942065", "31.6.11.231:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:57", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-29 19:45:07", "1942063", "31.56.209.140:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-29 19:45:07", "1942064", "31.56.209.140:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:54", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-29 19:44:08", "1942061", "185.254.96.135:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:00", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-29 19:44:08", "1942062", "185.254.99.169:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:01", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-29 19:43:56", "1942059", "172.93.161.96:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-29 19:43:56", "1942060", "172.93.161.96:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-29 19:43:53", "1942058", "172.111.139.78:9991", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:48", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-29 19:43:32", "1942057", "144.31.6.23:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-29 19:43:31", "1942056", "144.126.155.182:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:27", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-29 19:05:04", "1942051", "104.219.238.196:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:10", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-29 16:36:51", "1941959", "89.185.82.37:23789", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-03 09:06:14", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-29 12:43:10", "1941740", "20.193.139.57:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:19", "50", "False", "https://www.shodan.io/host/20.193.139.57#7443", "mythic,shodan", "0", "juroots"
"2026-09-29 12:10:48", "1941622", "5.181.2.159:15987", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-02 11:11:55", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-29 09:46:01", "1941644", "85.17.92.21:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:40", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-29 09:45:56", "1941643", "80.76.49.48:5050", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-29 09:45:40", "1941642", "46.246.6.15:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:20", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-29 09:45:29", "1941641", "45.127.32.150:57781", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-29 09:45:21", "1941635", "36.255.97.47:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-29 09:45:14", "1941634", "31.56.209.140:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:54", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-29 09:45:11", "1941633", "23.227.202.127:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-29 09:44:33", "1941632", "20.93.144.149:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:20", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-29 09:44:32", "1941630", "20.71.162.59:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:20", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-29 09:44:32", "1941631", "20.71.167.123:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:20", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-29 09:43:44", "1941629", "156.252.91.25:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:39", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-29 09:43:39", "1941628", "154.193.159.139:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:35", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-29 09:43:22", "1941627", "128.90.106.56:9786", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:19", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-29 09:43:11", "1941626", "104.207.88.70:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:09", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-29 08:21:52", "1941605", "153.80.242.105:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 07:57:39", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-09-29 08:05:06", "1941597", "46.19.140.50:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:15", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-29 07:15:55", "1941561", "38.9.96.236:2707", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:34:52", "100", "False", "None", "c2,mkv V1 1new,Remcos", "0", "Bitsight"
"2026-09-29 07:05:07", "1941558", "51.54.125.210:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:24", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-29 07:05:05", "1941557", "187.145.62.206:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:04", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-29 07:05:04", "1941556", "102.117.165.210:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:03", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-29 06:28:54", "1941167", "167.99.67.141:6627", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-10-03 09:57:18", "100", "False", "None", "5a4378fb90db39f09c7b18d1f314e645,c2,remus", "0", "Bitsight"
"2026-09-29 06:28:53", "1941168", "166.1.88.195:4529", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-10-02 11:49:05", "100", "False", "None", "5a4378fb90db39f09c7b18d1f314e645,c2,remus", "0", "Bitsight"
"2026-09-29 06:28:39", "1941250", "94.154.40.119:4332", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:25:05", "100", "False", "None", "c2,Remcos,tor25t", "0", "Bitsight"
"2026-09-29 06:28:37", "1941253", "163.5.63.72:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:33:12", "50", "True", "", "rat,remcos", "1", "anonymous"
"2026-09-29 06:28:35", "1941256", "23.254.202.107:7528", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-10-03 08:04:01", "100", "False", "None", "0f81469cc7638ba7c82eaddbd6b3c20a,c2,remus", "0", "Bitsight"
"2026-09-29 06:28:31", "1941289", "140.233.190.115:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 11:57:03", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-29 06:28:28", "1941307", "196.251.121.249:10213", "ip:port", "botnet_cc", "apk.cecbot", "None", "CECbot", "2026-10-02 23:17:42", "100", "False", "https://github.com/deepfield/public-research/tree/main/cecbot", "android,botnet,cecbot,ddos", "0", "deepfield"
"2026-09-29 06:28:18", "1941401", "104.37.172.247:4489", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 05:36:32", "100", "False", "None", "c2,ONETOUCH,Remcos", "0", "Bitsight"
"2026-09-29 06:28:13", "1941422", "159.223.108.19:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 00:26:10", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-29 06:28:13", "1941426", "216.9.225.130:14644", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 17:18:33", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-28 19:46:56", "1941205", "94.154.32.44:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-28 19:46:55", "1941204", "94.130.72.248:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 11:45:47", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-09-28 19:46:52", "1941202", "91.92.41.40:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-28 19:46:52", "1941203", "91.92.41.40:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-28 19:46:51", "1941201", "91.92.41.40:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-28 19:46:34", "1941199", "72.51.59.132:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-28 19:46:34", "1941200", "72.51.59.132:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-28 19:46:31", "1941198", "64.94.85.173:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:29", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-28 19:46:28", "1941197", "62.60.155.33:1907", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-28 19:46:23", "1941196", "51.54.125.210:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:24", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-28 19:46:22", "1941195", "50.114.179.215:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-28 19:46:15", "1941194", "45.88.91.164:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-28 19:46:07", "1941193", "45.152.242.130:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:45:12", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-28 19:46:04", "1941192", "45.139.104.180:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-28 19:45:54", "1941191", "36.255.97.47:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:59", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-28 19:45:52", "1941190", "34.116.132.157:8444", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:58", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-28 19:44:56", "1941183", "20.234.176.98:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:19", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-28 19:44:56", "1941184", "20.93.144.28:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:20", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-28 19:44:55", "1941181", "20.160.224.10:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:19", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-28 19:44:55", "1941182", "20.160.224.11:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:19", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-28 19:44:16", "1941180", "177.22.117.0:9001", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:53", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-28 19:44:10", "1941179", "172.245.106.144:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 11:43:49", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-09-28 19:44:04", "1941178", "163.172.248.3:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:45", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-28 19:43:56", "1941177", "156.252.91.7:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:40", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-28 19:43:53", "1941176", "154.86.96.35:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:37", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-28 19:43:27", "1941175", "125.75.36.126:40213", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-28 19:43:04", "1941174", "102.117.164.35:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:02", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-28 18:39:13", "1941096", "45.133.180.18:2424", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 20:23:25", "100", "False", "None", "64Jul,c2,Remcos", "0", "Bitsight"
"2026-09-28 18:39:06", "1941120", "89.185.82.38:15987", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-02 14:36:20", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-28 15:59:51", "1941086", "216.9.225.130:14641", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 17:36:52", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-28 15:59:51", "1941089", "89.185.82.37:15987", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-02 08:49:05", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-28 15:34:41", "1941085", "216.9.225.130:14649", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 12:07:59", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-28 15:32:47", "1941062", "216.9.225.130:14642", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 17:12:18", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-28 15:32:46", "1941064", "216.9.225.130:14643", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 17:15:31", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-28 15:32:46", "1941079", "216.9.225.130:14645", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 11:55:28", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-28 15:32:46", "1941080", "216.9.225.130:14646", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 17:24:38", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-28 15:32:44", "1941082", "216.9.225.130:14647", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 17:27:42", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-28 15:32:44", "1941083", "216.9.225.130:14648", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 17:30:43", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-28 12:51:22", "1940951", "180.93.236.78:80", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 07:37:25", "100", "False", "None", "c2,Remcos,RemoteHost-64bit", "0", "Bitsight"
"2026-09-28 12:05:07", "1940949", "144.172.69.79:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:28", "100", "True", "None", "havoc", "1", "anonymous"
"2026-09-28 10:45:51", "1940925", "85.198.108.131:51227", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-10-03 11:45:40", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-09-28 10:45:49", "1940924", "83.136.210.2:6666", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:38", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-28 10:45:45", "1940923", "80.190.77.86:20400", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:35", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-28 10:45:35", "1940922", "52.197.194.156:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-28 10:45:12", "1940920", "36.248.232.190:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:59", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-28 10:45:12", "1940921", "36.255.97.47:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:59", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-28 10:44:57", "1940919", "217.60.195.193:56101", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-28 10:44:54", "1940918", "216.144.234.251:12897", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-10-03 11:44:43", "75", "False", "None", "drb-ra,NetSupport,RAT", "0", "abuse_ch"
"2026-09-28 10:44:31", "1940917", "206.209.210.6:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:22", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-28 10:43:56", "1940916", "172.86.80.239:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:50", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-28 10:43:40", "1940909", "154.193.158.158:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:35", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-28 10:43:40", "1940910", "154.193.158.159:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:35", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-28 10:43:40", "1940911", "154.193.158.160:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:35", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-28 10:43:40", "1940912", "154.193.158.239:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:35", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-28 10:43:40", "1940913", "154.193.158.38:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:35", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-28 10:43:40", "1940914", "154.193.160.246:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:35", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-28 10:43:40", "1940915", "154.193.160.247:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:35", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-28 10:43:37", "1940908", "15.152.249.154:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-28 10:27:52", "1940898", "147.90.182.42:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:35:54", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-28 09:59:09", "1940854", "43.157.228.92:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:08", "50", "False", "https://www.shodan.io/host/43.157.228.92#7443", "mythic,shodan", "0", "juroots"
"2026-09-28 09:58:54", "1940850", "78.17.93.159:8090", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:34", "50", "False", "https://www.shodan.io/host/78.17.93.159#8090", "Havoc,shodan", "0", "juroots"
"2026-09-28 09:12:42", "1940822", "203.202.232.117:2424", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 05:29:28", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-28 09:12:42", "1940824", "216.9.224.180:2444", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:33:47", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-28 07:30:52", "1940772", "74.115.172.254:24041", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 07:41:34", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-28 06:37:03", "1940741", "2.25.222.233:8887", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 20:29:35", "100", "False", "None", "c2,JUNIO777,Remcos", "0", "Bitsight"
"2026-09-28 06:08:39", "1939694", "165.245.184.215:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 08:08:29", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-27 19:45:39", "1939519", "82.25.12.111:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:37", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-27 19:45:03", "1939514", "31.77.138.10:6767", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:58", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-27 19:44:49", "1939512", "217.60.103.15:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-27 19:44:19", "1939509", "195.177.94.156:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-27 19:44:19", "1939510", "195.177.94.156:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-27 19:44:03", "1939508", "185.213.22.64:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:59", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-27 19:43:58", "1939507", "18.218.117.239:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-27 19:43:50", "1939506", "169.58.38.91:7755", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:47", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-27 19:43:49", "1939505", "168.100.8.8:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-27 19:43:41", "1939503", "156.252.90.169:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:39", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-27 19:43:41", "1939504", "156.252.90.238:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:39", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-27 19:43:38", "1939500", "154.30.3.135:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-27 19:43:38", "1939501", "154.30.3.135:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-27 19:43:38", "1939502", "154.30.3.135:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-27 19:43:22", "1939499", "128.90.135.219:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-27 18:16:31", "1939402", "188.166.246.245:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 11:33:06", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-27 15:41:14", "1939088", "46.101.96.230:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 10:53:35", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-27 14:05:18", "1938956", "212.192.14.31:23789", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-01 12:17:52", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-27 14:05:06", "1939018", "114.215.184.158:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 07:57:33", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-27 13:46:34", "1939016", "38.190.196.25:5638", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:12", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-27 13:46:24", "1939015", "14.225.212.124:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:03", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-27 09:45:55", "1938710", "89.125.66.231:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:42", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-27 09:45:49", "1938709", "80.76.49.48:7575", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-27 09:45:32", "1938708", "46.151.182.5:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-27 09:45:12", "1938707", "31.76.125.23:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-27 09:43:54", "1938706", "169.58.38.91:5552", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:47", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-27 09:43:53", "1938704", "169.58.38.91:3110", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:47", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-27 09:43:53", "1938705", "169.58.38.91:4466", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:47", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-27 09:43:44", "1938703", "156.238.233.131:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:39", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-27 09:43:14", "1938694", "94.154.40.106:1413", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:32:25", "100", "False", "None", "c2,Remcos,tor05g", "0", "Bitsight"
"2026-09-27 07:05:05", "1935835", "64.188.59.224:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:27", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-27 06:43:52", "1935074", "134.122.126.123:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 11:55:14", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "None", "0", "deepfield"
"2026-09-27 06:43:51", "1935078", "159.223.108.19:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 11:55:56", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-09-27 06:43:51", "1935079", "165.245.184.215:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 11:56:20", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-09-27 06:43:50", "1935080", "188.166.246.245:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 11:56:33", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-09-27 06:43:50", "1935081", "46.101.96.230:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 11:56:46", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-09-27 06:43:49", "1935082", "64.227.117.205:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 11:55:26", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-09-27 06:43:38", "1935772", "196.251.107.252:22064", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:44:50", "100", "False", "None", "c2", "0", "Bitsight"
"2026-09-26 19:56:52", "1935033", "64.89.161.92:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:29", "75", "False", "None", "None", "0", "abuse_ch"
"2026-09-26 19:54:07", "1935032", "31.56.209.161:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:55", "75", "False", "None", "None", "0", "abuse_ch"
"2026-09-26 19:51:33", "1935031", "217.60.77.60:56004", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:48", "75", "False", "None", "None", "0", "abuse_ch"
"2026-09-26 19:48:07", "1935030", "213.252.232.182:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:25", "75", "False", "None", "None", "0", "abuse_ch"
"2026-09-26 19:46:11", "1935029", "195.177.94.227:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:15", "75", "False", "None", "None", "0", "abuse_ch"
"2026-09-26 19:45:50", "1935028", "185.94.29.158:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:03", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-26 19:45:46", "1935027", "185.254.99.169:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:00", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-26 19:45:32", "1935026", "176.149.202.136:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:52", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-26 19:44:20", "1935024", "173.249.56.221:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:51", "75", "False", "None", "None", "0", "abuse_ch"
"2026-09-26 19:43:55", "1935023", "154.18.239.166:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:34", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-26 19:43:54", "1935022", "153.75.251.188:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:34", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-26 19:43:06", "1935017", "102.117.161.224:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:02", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-26 15:11:58", "1934812", "143.244.190.5:5621", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-10-03 11:42:01", "75", "False", "", "RemusStealer", "0", "abuse_ch"
"2026-09-26 15:06:17", "1934788", "45.95.233.131:15987", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-02 09:50:01", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-26 14:36:13", "1934792", "39.98.120.223:8082", "ip:port", "botnet_cc", "vbs.vbrevshell", "None", "VBREVSHELL", "2026-10-03 12:00:04", "50", "False", "https://tracker.viriback.com/index.php?q=39.98.120.223", "ViriBack,Vshell", "0", "abuse_ch"
"2026-09-26 14:36:13", "1934793", "8.133.234.121:8082", "ip:port", "botnet_cc", "vbs.vbrevshell", "None", "VBREVSHELL", "2026-10-03 12:00:04", "50", "False", "https://tracker.viriback.com/index.php?q=8.133.234.121", "ViriBack,Vshell", "0", "abuse_ch"
"2026-09-26 14:36:02", "1934791", "47.105.68.108:8082", "ip:port", "botnet_cc", "vbs.vbrevshell", "None", "VBREVSHELL", "2026-10-03 12:00:04", "50", "False", "https://tracker.viriback.com/index.php?q=47.105.68.108", "ViriBack,Vshell", "0", "abuse_ch"
"2026-09-26 14:12:02", "1934785", "23.160.168.51:5173", "ip:port", "botnet_cc", "win.overlord", "None", "Overlord RAT", "2026-10-03 12:00:05", "50", "False", "https://tracker.viriback.com/index.php?q=23.160.168.51", "Overlord,ViriBack", "0", "abuse_ch"
"2026-09-26 13:47:02", "1934778", "23.238.82.42:3388", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-26 13:46:54", "1934777", "150.158.102.111:1235", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:04", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-26 13:35:59", "1934765", "212.192.14.31:15987", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-01 13:21:14", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-26 12:46:43", "1934756", "91.228.153.116:6886", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:44", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-26 12:46:41", "1934755", "89.106.83.214:4443", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:45:41", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-09-26 12:46:27", "1934754", "57.182.163.105:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-10-03 11:45:26", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-09-26 12:46:20", "1934753", "46.151.182.5:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-26 12:45:00", "1934752", "209.126.103.97:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 11:44:23", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-09-26 12:44:45", "1934751", "193.161.193.99:63938", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-26 12:44:22", "1934750", "169.58.39.189:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:47", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-26 12:44:00", "1934749", "154.81.34.26:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:37", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-26 12:43:58", "1934748", "153.75.251.188:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:34", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-26 12:43:50", "1934747", "143.246.223.246:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:27", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-26 12:43:42", "1934746", "128.90.59.225:7070", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:20", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-26 12:43:29", "1934745", "103.48.84.225:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-26 12:43:08", "1934744", "102.220.163.36:7008", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-26 08:05:21", "1934534", "46.250.228.119:1337", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:15", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-09-26 08:05:13", "1934533", "209.38.82.85:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 07:57:33", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-09-26 06:20:49", "1932841", "172.94.46.114:1014", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 02:39:47", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-26 06:20:37", "1934170", "171.22.130.121:7061", "ip:port", "botnet_cc", "elf.drifter", "Dongfeng", "Drifter", "2026-10-02 18:00:38", "100", "False", "https://github.com/deepfield/public-research/tree/main/drifter", "android,botnet,ddos,dongfeng,drifter", "0", "deepfield"
"2026-09-26 06:20:36", "1934173", "93.152.221.232:7061", "ip:port", "botnet_cc", "elf.drifter", "Dongfeng", "Drifter", "2026-10-02 18:00:38", "100", "False", "https://github.com/deepfield/public-research/tree/main/drifter", "android,botnet,ddos,dongfeng,drifter", "0", "deepfield"
"2026-09-26 06:20:34", "1934175", "212.192.14.31:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-03 05:59:12", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-26 06:20:33", "1934177", "45.95.233.131:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-02 21:46:54", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-26 06:20:32", "1934178", "5.181.2.159:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-02 23:13:59", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-26 06:20:32", "1934179", "89.185.82.37:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-02 17:17:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-26 06:20:32", "1934180", "89.185.82.38:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-02 17:17:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-26 06:20:31", "1934181", "89.185.82.39:7193", "ip:port", "botnet_cc", "elf.potassium", "None", "Potassium", "2026-10-02 18:23:49", "100", "False", "https://github.com/deepfield/public-research/tree/main/potassium", "botnet,ddos,mirai,potassium,woof", "0", "deepfield"
"2026-09-26 06:20:26", "1934260", "2.25.246.239:2466", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 20:41:56", "100", "False", "None", "c2,COLPro,Remcos", "0", "Bitsight"
"2026-09-26 03:47:05", "1934500", "178.253.31.5:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-25 19:47:04", "1934348", "84.21.189.110:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:39", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-25 19:46:33", "1934347", "45.59.170.162:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:17", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-25 19:46:32", "1934346", "45.254.246.140:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:17", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-25 19:46:15", "1934344", "38.240.49.89:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-25 19:46:10", "1934343", "34.51.203.250:8444", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:59", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-25 19:46:01", "1934341", "31.56.209.161:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-25 19:46:01", "1934342", "31.56.209.161:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-25 19:46:00", "1934340", "31.56.209.161:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-25 19:45:13", "1934331", "212.86.125.129:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-25 19:45:13", "1934332", "212.86.125.129:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-25 19:44:42", "1934330", "192.227.153.89:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:07", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-25 19:44:20", "1934329", "177.22.116.3:9001", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:53", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-25 19:44:01", "1934328", "158.94.210.177:2006", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-25 19:43:56", "1934327", "156.236.76.31:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:38", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-25 19:43:55", "1934326", "154.92.252.62:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:37", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-25 19:43:04", "1934325", "102.117.165.95:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:03", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-25 14:10:10", "1932839", "15.204.253.8:8239", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-10-03 11:57:27", "100", "False", "None", "RemusStealer", "0", "abuse_ch"
"2026-09-25 11:47:16", "1932798", "137.184.203.169:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 12:17:03", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-09-25 11:47:15", "1932799", "164.92.197.127:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 12:17:03", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-09-25 11:47:15", "1932801", "168.144.138.211:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 12:17:03", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-09-25 11:47:14", "1932800", "167.172.143.46:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 12:17:03", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-09-25 11:47:12", "1932802", "188.166.232.100:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 12:17:03", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-09-25 11:47:12", "1932803", "209.38.236.109:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 12:17:03", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-09-25 09:47:29", "1932772", "99.92.203.162:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:51", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-25 09:46:27", "1932771", "45.128.156.112:56565", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-25 09:45:19", "1932770", "212.87.212.117:8080", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:24", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-25 09:44:45", "1932769", "189.128.156.178:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:05", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-25 09:44:28", "1932768", "18.167.103.90:8089", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:43:54", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-09-25 09:44:10", "1932766", "160.250.5.251:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:43", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-25 09:44:10", "1932767", "161.248.179.92:111", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-25 09:43:49", "1932765", "145.63.135.23:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:29", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-25 09:43:33", "1932764", "129.146.241.3:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:20", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-25 09:43:27", "1932763", "116.213.43.239:7891", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:16", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-25 09:43:25", "1932761", "109.238.86.106:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-25 09:43:25", "1932762", "109.238.86.106:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-25 09:43:22", "1932760", "107.173.59.118:8580", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:13", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-25 09:43:17", "1932759", "104.243.248.63:3601", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-25 09:43:10", "1932758", "102.220.163.36:7007", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-25 09:05:04", "1932749", "23.132.164.72:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:50", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-25 08:05:06", "1932720", "103.48.84.225:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:08", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-25 06:28:10", "1932506", "176.126.114.42:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:17:53", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-25 06:05:10", "1932689", "103.48.84.225:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:08", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-25 06:05:10", "1932690", "103.48.84.225:3306", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:08", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-25 05:47:58", "1932682", "42.51.44.173:18888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:13", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-25 03:47:23", "1932661", "45.227.253.132:56225", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:15", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-25 03:47:21", "1932660", "43.136.69.37:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:13", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-25 03:47:20", "1932659", "42.51.44.173:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:13", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-25 03:47:07", "1932658", "139.196.50.117:8839", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:03", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-24 19:47:38", "1932432", "94.154.32.44:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:47:35", "1932431", "93.152.214.199:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:46", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-24 19:47:32", "1932427", "91.92.40.117:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:47:32", "1932428", "91.92.40.117:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:47:32", "1932429", "91.92.40.117:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:47:32", "1932430", "91.92.40.117:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:47:28", "1932426", "89.127.235.142:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:42", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-24 19:47:15", "1932425", "77.239.107.93:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:47:14", "1932424", "74.204.158.81:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:32", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-24 19:46:57", "1932423", "5.175.169.212:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:22", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-24 19:46:12", "1932422", "23.132.164.72:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:50", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-24 19:45:27", "1932421", "209.87.166.139:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:45:24", "1932420", "207.211.189.214:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:44:22", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-24 19:45:18", "1932418", "2.59.134.119:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:45:18", "1932419", "2.59.134.119:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:44:33", "1932414", "181.215.242.58:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:44:33", "1932415", "181.215.242.58:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:44:33", "1932416", "181.215.242.58:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:44:33", "1932417", "181.215.242.58:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:44:29", "1932413", "177.22.119.68:9001", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:53", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-24 19:44:09", "1932412", "158.94.210.177:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-24 19:44:05", "1932410", "156.236.76.31:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:38", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:44:05", "1932411", "156.236.76.31:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:38", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:43:55", "1932409", "15.235.149.212:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:43:50", "1932408", "146.190.120.19:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:29", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-24 19:43:43", "1932407", "139.64.164.252:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 19:43:26", "1932406", "109.238.86.106:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-24 19:43:12", "1932405", "103.38.236.70:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 16:15:43", "1932292", "155.103.69.85:14642", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 09:10:31", "100", "False", "None", "c2,GTrade,Remcos", "0", "Bitsight"
"2026-09-24 16:15:41", "1932297", "94.183.235.142:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 14:56:34", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-24 13:48:51", "1932290", "82.156.186.185:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:18", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-24 13:48:35", "1932289", "209.38.82.85:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-24 13:05:06", "1932270", "23.132.164.72:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:50", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-24 12:35:43", "1932247", "84.38.133.167:7474", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 04:05:02", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-24 11:50:28", "1932230", "155.103.69.85:14648", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 05:08:17", "100", "False", "None", "c2,Remcos,RemHost", "0", "Bitsight"
"2026-09-24 09:46:44", "1932226", "66.179.29.5:8080", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 09:46:25", "1932225", "45.207.211.207:4322", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:16", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-24 09:46:11", "1932224", "39.105.16.200:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:06", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-24 09:46:00", "1932223", "31.76.45.234:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:57", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-09-24 09:44:56", "1932221", "2.27.160.141:61712", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-24 09:44:37", "1932220", "188.212.158.203:1145", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-24 09:44:24", "1932219", "185.127.94.179:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:56", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-24 09:44:23", "1932217", "185.112.59.102:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:56", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-24 09:44:23", "1932218", "185.112.59.102:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:56", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-24 09:43:38", "1932215", "138.124.14.35:9091", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:24", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-24 09:43:38", "1932216", "138.197.31.70:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:25", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-24 09:43:15", "1932214", "104.243.248.63:3606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:11", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-24 09:43:08", "1932213", "102.220.163.36:2505", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-24 09:11:11", "1932208", "196.251.107.252:22063", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 09:22:32", "100", "False", "None", "22063,c2,Remcos", "0", "Bitsight"
"2026-09-24 09:11:10", "1932209", "155.103.71.242:14643", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 09:04:27", "100", "False", "None", "c2,Dragxcall00,Remcos", "0", "Bitsight"
"2026-09-24 08:07:23", "1931310", "155.103.69.57:14646", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 07:09:47", "100", "False", "None", "c2,NewTrollxz,Remcos", "0", "Bitsight"
"2026-09-24 07:05:08", "1931305", "102.117.173.122:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:04", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-24 07:05:05", "1931302", "85.11.182.104:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:19", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-24 06:42:25", "1931293", "142.202.205.224:74", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 07:45:18", "75", "False", "https://bazaar.abuse.ch/sample/58ae4ed1e457c9df93df8d171b242af4da235c381ff698198b5cb29175675a2e/", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-09-24 04:58:55", "1931073", "185.215.151.9:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-01 19:51:45", "100", "False", "None", "c2,New Social Security Statement 2026,Remcos", "0", "Bitsight"
"2026-09-24 03:48:00", "1931246", "82.158.89.214:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:18", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-24 03:47:41", "1931244", "156.254.20.47:5996", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:06", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-24 03:47:41", "1931245", "156.254.20.48:5996", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:06", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-24 03:47:34", "1931243", "120.27.20.98:55801", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:01", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-23 19:47:35", "1931057", "91.92.241.149:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-23 19:47:27", "1931056", "84.247.187.47:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:39", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-23 19:47:26", "1931055", "82.47.101.16:7000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:38", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-23 19:47:18", "1931054", "74.208.146.77:2244", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:33", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-23 19:46:28", "1931053", "37.244.231.39:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:45:00", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-23 19:46:25", "1931052", "31.77.220.78:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:58", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-23 19:46:12", "1931051", "23.160.168.167:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-23 19:45:19", "1931050", "202.146.222.156:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-23 19:45:17", "1931049", "2.59.134.119:56005", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-23 19:45:15", "1931048", "2.26.29.7:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:17", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-09-23 19:45:08", "1931047", "195.177.94.29:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-23 19:45:07", "1931046", "195.177.94.29:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-23 19:45:06", "1931045", "195.177.94.16:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-23 19:44:54", "1931044", "192.253.229.23:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-23 19:44:52", "1931043", "192.177.26.195:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-23 19:44:50", "1931042", "192.159.99.211:1996", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-23 19:44:40", "1931041", "185.241.211.244:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:00", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-23 19:44:33", "1931040", "184.75.208.66:46048", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:56", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-23 19:44:28", "1931039", "177.22.117.74:9001", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:53", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-23 19:43:37", "1931037", "130.61.85.204:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:22", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-23 19:43:34", "1931036", "128.90.59.124:7070", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:20", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-23 19:43:32", "1931035", "128.90.112.84:8081", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-23 17:20:36", "1930802", "31.56.209.155:2407", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:44:59", "100", "False", "None", "c2,Remcos,RIOTMEDIC2026CRYPTOSCREENSHOT", "0", "Bitsight"
"2026-09-23 15:47:48", "1929821", "155.103.69.239:4551", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:53:27", "100", "False", "None", "c2,jardon,Remcos", "0", "Bitsight"
"2026-09-23 15:47:47", "1929824", "155.103.69.239:4553", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:56:29", "100", "False", "None", "c2,jardon,Remcos", "0", "Bitsight"
"2026-09-23 15:39:53", "1930319", "46.151.182.5:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:19", "75", "False", "https://bazaar.abuse.ch/sample/441519d53ac8fdea7b02de1941497c88aa7a3c6a23808ac1f985ce5155ded831/", "AsyncRAT,RAT", "0", "abuse_ch"
"2026-09-23 15:05:07", "1929815", "35.213.187.40:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:12", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-23 14:05:07", "1929666", "102.117.167.58:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:03", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-23 13:51:59", "1929656", "185.137.122.215:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 15:45:59", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-23 13:48:14", "1929660", "82.158.89.75:2053", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:19", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-23 13:48:10", "1929659", "47.86.184.71:10443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:16", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-23 13:48:01", "1929658", "23.27.143.19:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-23 13:47:54", "1929657", "167.17.47.252:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-23 10:53:01", "1929601", "155.103.69.239:4550", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:39:35", "100", "False", "None", "c2,jardon,Remcos", "0", "Bitsight"
"2026-09-23 09:46:57", "1929595", "8.137.111.232:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-23 09:46:48", "1929594", "64.227.178.198:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:28", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-23 09:46:41", "1929593", "51.159.21.191:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:23", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-23 09:46:37", "1929592", "47.243.96.54:4322", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:21", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-23 09:44:20", "1929589", "178.16.54.35:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:53", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-23 09:44:02", "1929588", "16.208.130.160:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:42", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-23 09:43:41", "1929586", "143.246.43.117:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:27", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-23 09:43:38", "1929584", "139.64.164.252:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-23 09:43:38", "1929585", "139.64.164.252:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-23 09:43:31", "1929582", "13.143.247.125:1458", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:20", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-23 09:43:31", "1929583", "13.143.247.125:1996", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-23 09:43:27", "1929580", "120.27.155.171:50010", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-23 09:43:27", "1929581", "121.127.233.190:7891", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:17", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-23 09:43:17", "1929579", "104.250.167.93:8080", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:11", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-23 09:43:15", "1929578", "104.243.248.63:3603", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-23 09:05:11", "1929554", "144.126.198.39:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 09:30:14", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-23 09:05:11", "1929555", "152.42.196.145:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 09:30:14", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-23 09:05:10", "1929556", "165.245.246.201:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 09:30:14", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-23 09:05:10", "1929557", "178.62.233.227:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 09:30:14", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-23 09:02:39", "1929568", "172.111.150.134:37690", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:35:48", "75", "False", "https://bazaar.abuse.ch/sample/03928b404506908d14a05afbfdd11cc4eae0b2ce3e093cd6d9da5687453793c4/", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-09-23 08:40:30", "1929549", "130.12.182.185:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 07:23:43", "75", "False", "https://bazaar.abuse.ch/sample/243962c3e965fa6f4c96b5128db81e49123da3d49f6ca85cb4f14b9f3314a3ec/", "remcos", "0", "abuse_ch"
"2026-09-23 08:40:29", "1929548", "102.220.161.74:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:29:05", "75", "False", "https://bazaar.abuse.ch/sample/3777b367f30cef0c901d35fc92d7dd09405c8c3c4dcd26df35931583411a996d/", "remcos", "0", "abuse_ch"
"2026-09-23 06:38:13", "1927695", "196.251.121.250:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 02:27:49", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-23 06:35:27", "1927968", "91.92.240.170:7770", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 19:03:37", "100", "False", "None", "c2,Remcos,TAREA", "0", "Bitsight"
"2026-09-23 06:35:23", "1928086", "31.56.209.155:443", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:57:09", "100", "False", "None", "c2,Remcos,RIOTMEDIC2026CRYPTOSCREENSHOT", "0", "Bitsight"
"2026-09-23 06:35:21", "1928087", "31.56.209.155:2405", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 09:00:13", "100", "False", "None", "c2,Remcos,RIOTMEDIC2026CRYPTOSCREENSHOT", "0", "Bitsight"
"2026-09-23 06:34:13", "1928408", "31.56.209.155:9987", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:54:07", "100", "False", "None", "c2,Remcos,RIOTMEDIC2026CRYPTOSCREENSHOT", "0", "Bitsight"
"2026-09-23 03:47:37", "1928356", "114.66.27.110:60010", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-22 22:05:07", "1928043", "142.93.126.132:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:26", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-22 22:05:07", "1928044", "143.244.135.17:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:27", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-22 21:47:45", "1928030", "88.119.174.86:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:19", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-22 21:05:07", "1928009", "175.124.145.102:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:07", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-22 19:47:10", "1927932", "93.152.214.28:7222", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 19:46:30", "1927930", "45.88.91.54:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 19:46:04", "1927929", "31.77.220.78:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:58", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 19:45:43", "1927928", "216.250.253.197:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 19:45:00", "1927927", "20.93.144.148:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:20", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-22 19:44:39", "1927922", "191.223.34.61:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 19:44:38", "1927919", "191.107.92.58:5012", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-22 19:44:38", "1927920", "191.223.33.20:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 19:44:38", "1927921", "191.223.34.57:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 19:44:20", "1927918", "178.94.25.230:8902", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:54", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-22 19:44:16", "1927917", "172.94.9.194:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:51", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-22 19:44:15", "1927916", "172.93.161.96:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 19:44:13", "1927913", "172.252.225.151:12688", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:49", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-22 19:44:13", "1927914", "172.252.225.152:12688", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:49", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-22 19:44:13", "1927915", "172.252.225.153:12688", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:49", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-22 19:44:08", "1927912", "167.94.47.130:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 19:44:05", "1927911", "162.33.177.101:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:44", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-22 19:44:03", "1927910", "160.250.181.159:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:43", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 19:44:01", "1927909", "160.250.181.159:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:43", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 19:43:32", "1927907", "130.61.146.214:443", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-10-03 11:43:22", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-09-22 19:43:32", "1927908", "130.61.146.214:80", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-10-03 11:43:22", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-09-22 19:43:30", "1927905", "13.127.122.166:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:20", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-22 19:43:30", "1927906", "13.143.247.124:1881", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 19:43:23", "1927904", "109.74.144.151:46321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:15", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-22 19:43:17", "1927903", "104.37.174.61:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 19:43:13", "1927902", "104.131.163.233:8080", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:09", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-22 19:43:08", "1927901", "102.220.163.36:7005", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-22 19:43:03", "1927900", "102.117.163.135:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:02", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-22 19:05:06", "1927873", "146.190.111.53:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:29", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-22 17:37:53", "1927644", "31.56.209.155:2406", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:47:59", "100", "False", "None", "c2,Remcos,RIOTMEDIC2026CRYPTOSCREENSHOT", "0", "Bitsight"
"2026-09-22 17:37:53", "1927647", "31.56.209.155:3398", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:51:02", "100", "False", "None", "c2,Remcos,RIOTMEDIC2026CRYPTOSCREENSHOT", "0", "Bitsight"
"2026-09-22 17:29:25", "1927640", "31.56.209.155:2409", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:41:37", "100", "False", "None", "c2,Remcos,RIOTMEDIC2026CRYPTOSCREENSHOT", "0", "Bitsight"
"2026-09-22 17:21:35", "1927631", "45.225.135.115:4356", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 09:05:36", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-22 15:48:08", "1927492", "60.217.23.146:7789", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:17", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-22 15:05:07", "1927476", "45.203.213.168:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 07:57:34", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-22 13:48:28", "1927376", "91.92.47.99:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:19", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-22 13:48:08", "1927375", "175.124.145.102:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-22 13:48:02", "1927374", "141.255.162.236:37422", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:04", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-22 13:47:59", "1927373", "123.207.214.140:6322", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-22 13:47:58", "1927372", "123.207.214.140:6321", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-22 11:18:31", "1927320", "154.12.117.217:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:10:51", "100", "False", "None", "ASPARAGUS,c2,Remcos", "0", "Bitsight"
"2026-09-22 09:47:17", "1927301", "84.200.91.170:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:38", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 09:46:52", "1927300", "5.175.169.148:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:22", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 09:46:50", "1927299", "46.40.193.169:1723", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-22 09:46:49", "1927298", "46.246.84.6:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:20", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-22 09:46:27", "1927297", "41.68.226.249:5554", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:06", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-22 09:46:19", "1927295", "34.87.129.214:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:59", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-22 09:46:19", "1927296", "36.248.232.160:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:59", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-22 09:46:00", "1927291", "217.60.195.60:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 09:46:00", "1927292", "217.60.195.60:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 09:46:00", "1927293", "217.60.195.60:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 09:46:00", "1927294", "217.60.195.60:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 09:44:45", "1927290", "193.143.1.247:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:10", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-22 09:44:40", "1927289", "192.142.10.165:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-22 09:44:39", "1927288", "188.48.121.249:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:05", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-22 09:44:38", "1927287", "188.137.227.133:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-22 09:43:31", "1927286", "13.143.247.204:4810", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 09:43:27", "1927285", "121.41.70.79:9966", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-22 09:43:14", "1927284", "104.168.148.29:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-22 08:35:13", "1927264", "1.12.59.176:81", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-02 07:41:45", "100", "False", "None", "CobaltStrike,cs-watermark-1234567890", "0", "abuse_ch"
"2026-09-22 08:30:54", "1927254", "46.183.223.30:465", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 09:07:08", "100", "False", "None", "c2,Host,Remcos", "0", "Bitsight"
"2026-09-22 08:05:05", "1927250", "111.230.37.219:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 07:57:33", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-22 06:05:07", "1927211", "149.88.73.83:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 07:57:39", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-22 05:00:32", "1926817", "130.78.189.71:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 08:39:54", "100", "False", "https://github.com/deepfield/public-research/tree/main/aisuru", "airashi,aisuru,botnet,ddos,mirai", "0", "deepfield"
"2026-09-22 05:00:06", "1926843", "2.27.62.228:60201", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 09:19:05", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-22 03:48:15", "1927119", "60.217.23.146:7788", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:17", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-21 19:46:55", "1926809", "84.32.41.19:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:40", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-21 19:46:45", "1926808", "72.83.221.122:2284", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:32", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-21 19:46:42", "1926807", "66.179.29.5:6000", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-21 19:46:27", "1926806", "46.151.182.67:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-21 19:46:09", "1926805", "38.60.136.202:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:06", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-21 19:45:55", "1926803", "31.56.209.139:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-21 19:45:55", "1926804", "31.56.209.139:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-21 19:44:42", "1926801", "193.112.254.32:8989", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:10", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-21 19:44:36", "1926800", "188.120.255.247:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-21 19:44:18", "1926799", "177.5.67.246:55443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:53", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-21 19:43:47", "1926798", "149.56.206.68:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 11:43:32", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-09-21 19:43:46", "1926796", "147.93.191.75:40100", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:31", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-21 19:43:46", "1926797", "149.104.78.139:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:31", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-21 19:43:34", "1926794", "134.19.177.62:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-21 19:43:34", "1926795", "134.19.177.62:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-21 19:43:30", "1926793", "13.140.145.33:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:20", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-21 19:43:28", "1926792", "128.90.135.172:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-21 19:43:16", "1926791", "104.64.208.123:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-21 13:48:25", "1926491", "78.17.212.127:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:17", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-21 13:48:21", "1926490", "45.227.253.132:56223", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:15", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-21 09:47:07", "1926393", "88.119.169.135:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:41", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-21 09:46:43", "1926392", "54.244.240.205:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:45:25", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-09-21 09:46:42", "1926390", "52.47.77.229:1999", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:24", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-21 09:46:42", "1926391", "52.47.77.229:6000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:24", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-21 09:46:32", "1926389", "45.86.229.111:40062", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:18", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-21 09:46:29", "1926388", "45.202.1.16:14501", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:16", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-21 09:46:23", "1926387", "45.152.242.129:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:45:12", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-21 09:46:09", "1926386", "37.220.31.123:443", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-10-03 11:45:00", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-09-21 09:46:06", "1926385", "31.77.12.106:443", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-10-03 11:44:58", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-09-21 09:45:54", "1926384", "23.158.24.65:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:50", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-21 09:44:49", "1926383", "194.49.68.166:2030", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:13", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-21 09:44:44", "1926382", "192.236.166.73:8443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:08", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-21 09:44:30", "1926381", "185.212.128.89:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-21 09:43:49", "1926380", "15.235.149.212:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-21 09:43:31", "1926379", "13.232.187.232:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:21", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-21 07:10:38", "1926291", "102.220.163.40:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 07:18:18", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-21 05:10:23", "1926300", "91.92.41.153:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 13:12:46", "75", "False", "https://bazaar.abuse.ch/sample/832f4c6ca7b9b61b3a8063355c71f96e5b18e1bfd209df3cd3570b55e5144b4f/", "remcos", "0", "abuse_ch"
"2026-09-21 00:36:02", "1926157", "193.178.158.107:80", "ip:port", "botnet_cc", "win.amadey", "None", "Amadey", "2026-10-03 12:00:05", "50", "False", "https://tracker.viriback.com/index.php?q=193.178.158.107", "Amadey,ViriBack", "0", "abuse_ch"
"2026-09-21 00:05:05", "1926149", "81.70.21.163:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:18", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-20 19:47:28", "1926022", "95.182.91.142:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:50", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-20 19:47:28", "1926023", "96.126.176.243:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-20 19:46:49", "1926021", "52.47.77.229:2000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:24", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-20 19:46:46", "1926020", "5.180.20.26:13213", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-20 19:46:45", "1926019", "5.175.169.199:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:22", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-20 19:46:41", "1926018", "46.151.182.67:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-20 19:43:56", "1926017", "154.86.105.20:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:37", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-20 19:43:34", "1926016", "130.94.66.253:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:22", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-20 19:43:08", "1926015", "102.220.163.36:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-20 19:43:04", "1926014", "102.117.165.17:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:03", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-20 14:52:16", "1924862", "92.119.158.39:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 12:22:29", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-20 14:52:16", "1924863", "94.183.235.11:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 02:12:02", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-20 14:52:16", "1924864", "94.183.235.159:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 00:57:29", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-20 14:52:15", "1924865", "94.183.235.249:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 14:56:34", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-20 13:48:14", "1924904", "62.164.177.14:22235", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:17", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-20 13:48:03", "1924903", "209.99.186.180:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-20 09:47:32", "1924840", "89.153.179.188:24996", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:42", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-20 09:46:57", "1924839", "46.36.40.185:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:21", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-20 09:46:53", "1924837", "45.88.91.165:7590", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-20 09:46:40", "1924836", "45.139.104.26:55012", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-20 09:46:27", "1924833", "36.248.232.184:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:59", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-20 09:44:56", "1924832", "194.26.192.153:2002", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-20 09:44:45", "1924831", "185.34.147.35:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-20 09:44:44", "1924830", "185.34.147.34:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-20 09:44:43", "1924829", "185.34.147.33:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-20 09:44:42", "1924828", "185.34.147.32:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-20 09:44:41", "1924826", "185.34.147.31:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-20 09:44:41", "1924827", "185.34.147.32:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-20 09:44:40", "1924825", "185.34.147.31:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-20 09:43:37", "1924824", "132.226.198.241:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:22", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-20 09:43:33", "1924823", "128.90.59.115:7070", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:20", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-20 09:43:31", "1924822", "128.241.244.7:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:18", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-20 09:43:03", "1924821", "101.42.33.156:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:02", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-20 08:29:11", "1924810", "47.116.130.234:82", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 07:57:34", "100", "False", "None", "CobaltStrike,cs-watermark-1234567890", "0", "abuse_ch"
"2026-09-20 08:29:10", "1924809", "116.62.174.16:81", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 07:57:34", "100", "False", "None", "CobaltStrike,cs-watermark-1234567890", "0", "abuse_ch"
"2026-09-20 06:16:54", "1924776", "36.255.97.37:10213", "ip:port", "botnet_cc", "apk.cecbot", "None", "CECbot", "2026-10-03 06:20:20", "100", "False", "https://github.com/deepfield/public-research/tree/main/cecbot", "android,botnet,cecbot,ddos", "0", "deepfield"
"2026-09-20 05:32:54", "1924685", "161.248.179.24:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:24:03", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-20 03:47:59", "1924763", "81.70.21.163:8091", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:18", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-19 19:48:17", "1924672", "94.154.32.189:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 19:48:16", "1924670", "94.154.32.189:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 19:48:16", "1924671", "94.154.32.189:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 19:48:08", "1924669", "91.92.241.149:90", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-19 19:48:04", "1924666", "89.106.83.225:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:42", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 19:48:04", "1924667", "89.106.83.225:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:42", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 19:48:04", "1924668", "89.106.83.225:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:42", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 19:47:44", "1924665", "67.43.56.25:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:30", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-19 19:47:40", "1924664", "64.89.161.92:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 19:47:30", "1924663", "51.222.87.92:8089", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:24", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-19 19:47:28", "1924662", "5.230.155.140:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:22", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 19:47:21", "1924661", "45.88.91.165:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 19:47:07", "1924660", "45.139.104.26:56016", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 19:47:01", "1924658", "43.135.26.173:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 19:47:01", "1924659", "43.135.26.173:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 19:46:42", "1924657", "31.56.209.53:5353", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 19:46:41", "1924655", "31.56.209.139:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 19:46:41", "1924656", "31.56.209.139:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 19:45:19", "1924654", "194.32.114.69:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:44:12", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-19 19:44:59", "1924653", "186.244.214.231:56672", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:04", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-19 19:44:39", "1924652", "176.149.202.136:8807", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:52", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-19 19:43:36", "1924651", "128.90.112.200:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:19", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-19 19:43:18", "1924650", "104.243.248.63:3604", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-19 19:43:16", "1924649", "104.207.132.238:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:09", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-19 17:48:49", "1924620", "42.193.238.29:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:13", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-19 15:48:38", "1924589", "154.219.101.56:8085", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:05", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-19 15:47:21", "1924434", "43.166.252.222:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-03 11:39:55", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-19 13:48:22", "1924506", "177.5.67.37:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-19 13:48:20", "1924505", "156.238.233.131:50022", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:06", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-19 13:48:07", "1924504", "106.53.168.218:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-19 09:47:56", "1924425", "42.193.169.176:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:13", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-19 09:47:12", "1924423", "91.92.241.149:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-19 09:47:12", "1924424", "91.92.241.149:9090", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-19 09:46:50", "1924422", "64.84.56.233:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:45:28", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-19 09:45:53", "1924420", "217.60.195.193:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 09:45:53", "1924421", "217.60.195.193:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 09:45:52", "1924419", "217.60.195.193:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-19 09:45:09", "1924418", "209.38.224.48:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:23", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-19 09:44:37", "1924417", "188.137.227.133:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-19 09:44:23", "1924416", "181.206.118.219:5118", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:55", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-19 09:43:54", "1924415", "154.86.14.17:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:37", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-19 09:43:53", "1924414", "154.216.139.17:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:36", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-19 09:43:43", "1924413", "146.70.51.74:2512", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:29", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-19 09:43:36", "1924412", "138.0.191.215:9001", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:24", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-19 09:43:35", "1924411", "137.184.139.185:8080", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-10-03 11:43:24", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-09-19 09:43:28", "1924408", "128.241.244.3:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:18", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-19 09:43:28", "1924409", "128.241.244.3:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:18", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-19 09:43:28", "1924410", "128.241.244.7:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:18", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-19 09:43:06", "1924407", "102.220.160.198:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-19 09:19:03", "1924399", "101.34.208.175:8081", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 07:57:39", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-09-19 09:18:59", "1924396", "123.57.146.34:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:02", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-09-19 03:47:32", "1924323", "167.179.67.162:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-18 19:47:06", "1924215", "94.154.43.211:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 11:45:48", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-09-18 19:47:01", "1924214", "92.118.126.165:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 19:46:57", "1924213", "91.219.239.100:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 19:46:45", "1924212", "80.190.77.86:1003", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:34", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-18 19:46:38", "1924211", "64.89.161.92:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 19:46:35", "1924210", "62.233.51.136:7222", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:27", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 19:46:23", "1924209", "45.88.186.207:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 19:46:16", "1924207", "45.192.211.126:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 19:46:16", "1924208", "45.192.211.126:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 19:46:12", "1924205", "45.139.104.26:55010", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 19:46:12", "1924206", "45.139.104.29:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 19:45:48", "1924204", "23.94.197.13:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:52", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-18 19:44:57", "1924203", "209.74.86.250:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:23", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-18 19:44:38", "1924201", "193.25.215.83:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 19:44:38", "1924202", "193.26.115.5:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 19:44:21", "1924200", "185.212.128.32:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-18 19:44:14", "1924199", "176.65.132.207:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 11:43:52", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-09-18 19:44:10", "1924198", "172.86.85.185:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:50", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-18 19:44:02", "1924197", "167.99.174.8:65000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:46", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-18 19:43:53", "1924196", "157.230.7.115:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:40", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-18 19:43:43", "1924195", "149.88.76.74:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 19:43:41", "1924194", "147.124.214.219:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:31", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 19:43:27", "1924193", "13.193.175.186:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-10-03 11:43:21", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-09-18 18:19:57", "1924109", "82.29.92.60:35121", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:34:02", "100", "False", "https://tria.ge/260918-sh2cvage92", "Remcos", "0", "dyingbreeds_"
"2026-09-18 13:48:42", "1923959", "36.255.97.162:4045", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:12", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-18 13:17:45", "1923917", "206.123.137.132:57484", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:02:52", "100", "False", "None", "c2,Port$$,Remcos", "0", "Bitsight"
"2026-09-18 13:17:38", "1923944", "62.60.226.173:10213", "ip:port", "botnet_cc", "apk.cecbot", "None", "CECbot", "2026-10-02 13:12:02", "100", "False", "https://github.com/deepfield/public-research/tree/main/cecbot", "android,botnet,cecbot,ddos", "0", "deepfield"
"2026-09-18 09:57:46", "1923886", "80.76.49.209:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 09:57:14", "1923885", "5.163.239.119:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:22", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-18 09:57:09", "1923884", "46.246.6.18:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:20", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-18 09:56:59", "1923882", "45.202.0.48:8443", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:16", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-18 09:56:59", "1923883", "45.202.0.55:8443", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:16", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-18 09:56:47", "1923880", "45.139.104.222:55006", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 09:56:47", "1923881", "45.139.104.26:55011", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 09:56:46", "1923879", "45.139.104.222:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-18 09:56:36", "1923878", "38.242.209.29:8080", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:04", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-18 09:44:48", "1923876", "2.56.97.65:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:18", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-18 09:44:29", "1923875", "191.107.92.58:9002", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:06", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-18 09:43:38", "1923874", "144.31.148.132:45051", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-10-03 11:43:28", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-09-18 09:43:22", "1923872", "109.205.212.241:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:15", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-18 08:03:15", "1923853", "81.70.21.163:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:18", "100", "False", "None", "CobaltStrike,cs-watermark-305419896", "0", "abuse_ch"
"2026-09-17 19:47:17", "1923463", "92.118.126.165:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:47:17", "1923464", "92.118.126.165:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:47:17", "1923465", "92.118.126.165:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:47:11", "1923461", "89.126.221.170:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:42", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-17 19:47:11", "1923462", "89.126.221.216:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:42", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-17 19:46:30", "1923460", "45.156.87.134:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:46:05", "1923459", "23.94.197.128:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:52", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-17 19:45:58", "1923457", "217.60.195.50:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:45:58", "1923458", "217.60.195.50:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:45:56", "1923456", "217.60.195.160:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:45:53", "1923454", "217.156.66.203:50604", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:45:53", "1923455", "217.216.34.133:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:44", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-17 19:45:12", "1923453", "20.175.26.173:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:19", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-17 19:44:47", "1923452", "192.162.199.188:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:44:39", "1923451", "185.247.211.21:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:00", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:44:26", "1923449", "176.96.137.11:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:44:26", "1923450", "176.96.137.11:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:44:16", "1923447", "172.169.251.53:6160", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:48", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-17 19:43:49", "1923446", "149.88.76.74:8899", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:43:47", "1923444", "147.124.199.248:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:43:47", "1923445", "147.224.179.31:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:31", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-17 19:43:46", "1923441", "147.124.199.248:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:43:46", "1923442", "147.124.199.248:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:43:46", "1923443", "147.124.199.248:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:43:35", "1923439", "132.243.221.34:6767", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:22", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 19:43:31", "1923438", "128.90.136.246:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-17 19:43:24", "1923437", "109.205.212.241:45600", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:15", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-17 19:43:08", "1923436", "102.220.163.36:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-17 19:43:03", "1923435", "102.117.163.68:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:02", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-17 16:05:06", "1923322", "188.166.254.199:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:05", "100", "True", "None", "havoc", "1", "anonymous"
"2026-09-17 16:05:05", "1923320", "189.141.53.203:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:05", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-17 13:50:39", "1923186", "49.232.21.222:8081", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:17", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-17 13:50:16", "1923185", "154.219.101.56:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:05", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-17 13:50:09", "1923184", "119.29.98.15:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:01", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-17 12:49:55", "1923169", "43.156.82.233:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 13:14:05", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-17 12:42:06", "1923156", "129.226.82.94:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 13:14:05", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-17 12:42:05", "1923157", "43.130.251.228:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 13:14:05", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-17 12:42:05", "1923159", "43.156.47.240:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 13:14:05", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-17 12:42:04", "1923160", "43.157.142.78:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 13:14:05", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-17 12:42:04", "1923161", "43.157.181.156:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 13:14:05", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-17 12:42:04", "1923162", "43.157.198.200:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 13:14:05", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-17 12:42:03", "1923164", "43.166.153.58:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 13:14:05", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-17 12:42:02", "1923163", "43.157.78.243:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 13:14:05", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-17 12:42:02", "1923165", "43.166.68.17:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 13:14:05", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-17 12:42:02", "1923166", "43.173.124.27:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 13:14:05", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-17 09:48:49", "1923082", "94.183.235.121:5000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-17 09:48:45", "1923081", "93.186.38.135:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:45:47", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-09-17 09:48:11", "1923080", "64.181.194.179:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:45:27", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-17 09:47:45", "1923079", "45.207.241.47:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:16", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-17 09:47:32", "1923078", "45.112.206.54:55005", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-17 09:47:28", "1923077", "4.231.16.194:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:06", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-17 09:47:09", "1923076", "31.56.209.53:1111", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 09:46:50", "1923075", "217.156.66.203:3609", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 09:46:04", "1923074", "209.99.188.193:4322", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:23", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-17 09:46:01", "1923073", "209.38.100.69:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:23", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-17 09:45:34", "1923072", "194.26.192.153:2001", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-17 09:44:39", "1923070", "172.86.91.14:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 09:44:39", "1923071", "172.86.91.14:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 09:44:31", "1923069", "172.111.139.65:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:48", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-17 09:44:19", "1923068", "159.198.32.64:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:41", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-17 09:43:59", "1923067", "15.235.149.212:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 09:43:56", "1923065", "147.124.202.216:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:30", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-17 09:43:56", "1923066", "147.124.202.216:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:30", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-17 09:43:37", "1923064", "128.90.105.123:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:18", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-17 09:43:36", "1923062", "122.51.212.92:39904", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-10-03 11:43:18", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-09-17 09:43:36", "1923063", "124.198.131.60:4782", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-17 09:43:30", "1923061", "109.205.212.241:4444", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:15", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-17 09:43:19", "1923060", "104.243.248.63:407", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:11", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-17 09:43:09", "1923059", "102.220.163.36:2504", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-17 09:43:06", "1923058", "102.188.200.238:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:04", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-17 08:14:19", "1922592", "117.72.202.154:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:01", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-09-17 05:42:12", "1921265", "196.251.107.252:22062", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 02:01:30", "100", "False", "None", "22062,c2,Remcos", "0", "Bitsight"
"2026-09-17 05:41:55", "1921389", "103.67.163.201:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:19:12", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-17 05:41:44", "1921417", "94.154.43.235:10213", "ip:port", "botnet_cc", "apk.cecbot", "None", "CECbot", "2026-10-03 02:06:35", "100", "False", "https://github.com/deepfield/public-research/tree/main/cecbot", "android,botnet,cecbot,ddos", "0", "deepfield"
"2026-09-17 03:48:22", "1921458", "45.192.248.45:4431", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:14", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-17 03:48:21", "1921457", "45.192.248.45:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:14", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-17 03:48:19", "1921456", "43.138.153.161:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:13", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-16 20:05:07", "1921323", "102.220.163.36:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:05", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-16 19:47:36", "1921318", "89.147.108.137:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:42", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-16 19:47:20", "1921317", "68.64.177.24:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:31", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-16 19:46:54", "1921316", "45.202.0.111:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:15", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 19:46:49", "1921315", "45.150.109.209:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:12", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-16 19:46:29", "1921314", "31.76.125.14:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:46:27", "1921312", "31.57.38.139:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:56", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:46:27", "1921313", "31.57.38.139:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:56", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:46:18", "1921309", "23.171.176.253:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:46:18", "1921310", "23.171.176.253:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:46:18", "1921311", "23.171.176.253:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:46:09", "1921307", "217.156.66.203:3607", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:46:09", "1921308", "217.156.66.203:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:44:40", "1921305", "185.212.128.32:80", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-16 19:44:27", "1921304", "172.94.18.103:78", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 19:44:26", "1921302", "172.86.91.14:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:44:26", "1921303", "172.86.91.14:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:44:24", "1921301", "172.86.112.104:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:49", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 19:43:58", "1921300", "154.18.238.18:8660", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:34", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 19:43:54", "1921299", "150.241.203.12:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:43:48", "1921297", "144.31.25.62:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:43:48", "1921298", "144.31.25.62:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:43:45", "1921296", "143.20.185.213:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 11:43:26", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-09-16 19:43:35", "1921295", "128.90.141.49:1110", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 19:43:25", "1921292", "108.187.4.123:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:43:25", "1921293", "108.187.4.123:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:43:25", "1921294", "108.187.4.123:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:43:17", "1921291", "104.243.248.63:3605", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 19:43:14", "1921290", "103.97.131.179:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:43:09", "1921289", "102.220.163.36:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:43:08", "1921287", "102.220.163.36:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:43:08", "1921288", "102.220.163.36:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 19:43:04", "1921286", "102.117.165.131:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:03", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-16 19:05:05", "1921276", "102.220.163.36:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:06", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-16 11:47:10", "1921082", "103.83.86.147:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:08:49", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-16 09:48:22", "1920986", "95.158.131.149:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:50", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-16 09:47:44", "1920985", "66.29.134.188:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:30", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-16 09:47:31", "1920984", "5.56.25.180:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 09:47:26", "1920983", "46.225.119.0:8090", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:20", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-16 09:47:20", "1920982", "45.249.89.172:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-16 09:47:19", "1920980", "45.202.0.111:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:15", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 09:47:19", "1920981", "45.202.0.116:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:15", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 09:46:38", "1920978", "217.60.76.250:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 09:46:38", "1920979", "217.60.76.250:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 09:45:44", "1920977", "206.206.103.203:29578", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-16 09:44:35", "1920976", "172.94.18.103:74", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 09:44:33", "1920975", "172.86.112.104:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:49", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 09:44:32", "1920974", "172.86.112.104:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:49", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 09:44:06", "1920972", "154.36.161.180:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:36", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-16 09:43:53", "1920971", "144.91.78.57:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 09:43:45", "1920970", "139.180.153.29:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-16 09:43:33", "1920969", "121.200.216.74:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:17", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 09:43:09", "1920968", "102.220.163.36:7006", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 09:43:07", "1920967", "102.220.160.198:56003", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-16 06:24:42", "1920841", "156.239.224.131:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:06", "50", "False", "None", "984,c2,censys,cobalt strike", "0", "sojubear"
"2026-09-16 03:47:45", "1920870", "45.61.170.191:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:15", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-16 03:47:45", "1920871", "45.61.170.191:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:15", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-16 03:47:43", "1920869", "42.193.239.217:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:13", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-16 03:05:06", "1920860", "175.43.223.203:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:52", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-15 19:47:26", "1920493", "95.158.131.141:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:50", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-15 19:47:26", "1920494", "95.158.131.142:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:50", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-15 19:47:26", "1920495", "95.158.131.147:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:50", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-15 19:47:25", "1920490", "94.26.81.135:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-15 19:47:25", "1920491", "95.158.131.135:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:49", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-15 19:47:25", "1920492", "95.158.131.139:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:50", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-15 19:47:20", "1920489", "93.152.224.238:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:45:47", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-09-15 19:47:10", "1920487", "85.137.252.195:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:40", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-15 19:47:10", "1920488", "85.239.149.73:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:45:40", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-09-15 19:47:07", "1920486", "82.26.66.136:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:38", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-15 19:47:05", "1920485", "82.146.37.83:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:36", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-15 19:47:04", "1920483", "80.76.49.129:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-15 19:47:04", "1920484", "80.76.49.129:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-15 19:47:00", "1920482", "77.90.14.60:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 11:45:33", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-09-15 19:46:56", "1920481", "67.205.148.159:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:30", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-15 19:46:34", "1920480", "45.202.0.116:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:15", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-15 19:46:09", "1920477", "31.76.125.3:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-15 19:46:09", "1920478", "31.76.125.3:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-15 19:46:09", "1920479", "31.76.125.3:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-15 19:46:05", "1920476", "31.57.147.246:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-15 19:45:17", "1920475", "213.111.149.141:3125", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:24", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-15 19:45:14", "1920474", "208.84.103.159:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:23", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-15 19:44:56", "1920473", "195.177.94.94:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-15 19:44:55", "1920471", "195.177.94.4:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-15 19:44:55", "1920472", "195.177.94.4:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-15 19:44:49", "1920470", "193.25.215.83:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-15 19:43:27", "1920469", "121.200.216.74:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:17", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-15 19:43:25", "1920467", "118.107.1.203:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-15 19:43:25", "1920468", "118.107.1.203:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-15 19:43:07", "1920466", "102.220.163.36:2502", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-15 19:43:03", "1920465", "102.117.167.205:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:03", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-15 17:05:06", "1920429", "8.146.227.247:8090", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 07:57:33", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-15 15:18:03", "1920390", "217.60.195.246:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 03:44:57", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-15 13:48:28", "1920378", "130.94.29.101:8091", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-15 13:00:57", "1920355", "23.132.164.3:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:16:14", "75", "False", "https://bazaar.abuse.ch/sample/5213e701e9eef93b8d11c54334592c272a299c057bbc73db6741fdd2dd718262/", "remcos", "0", "abuse_ch"
"2026-09-15 12:24:53", "1920336", "95.182.87.134:443", "ip:port", "botnet_cc", "elf.jackskid", "RCtea", "Jackskid", "2026-10-02 13:14:05", "100", "False", "https://github.com/deepfield/public-research/tree/main/jackskid", "botnet,ddos,jackskid,mirai,rctea", "0", "deepfield"
"2026-09-15 09:47:15", "1920314", "95.158.131.144:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:50", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-15 09:47:15", "1920315", "95.158.131.151:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:50", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-15 09:47:11", "1920313", "94.154.32.104:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-15 09:46:56", "1920312", "82.26.66.136:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:38", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-15 09:46:40", "1920311", "57.154.15.252:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:26", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-15 09:46:33", "1920310", "46.40.228.158:1723", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-15 09:46:26", "1920308", "45.207.241.27:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:16", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-15 09:46:26", "1920309", "45.207.241.47:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:16", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-15 09:46:18", "1920307", "45.127.35.199:18080", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-10-03 11:45:09", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-09-15 09:46:13", "1920306", "38.54.88.188:65432", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:06", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-15 09:45:52", "1920305", "217.60.195.50:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:47", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-15 09:45:51", "1920303", "217.60.195.50:1313", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:47", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-15 09:45:51", "1920304", "217.60.195.50:1453", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:47", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-15 09:45:14", "1920302", "212.224.107.183:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-15 09:44:50", "1920301", "194.26.192.153:4441", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-15 09:44:34", "1920300", "185.249.199.108:1178", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-15 09:44:28", "1920299", "185.164.57.60:4999", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:56", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-15 09:44:00", "1920298", "158.247.202.60:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:41", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-15 09:43:58", "1920297", "157.173.195.214:80", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:40", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-15 09:43:44", "1920296", "144.91.78.57:4810", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-15 09:43:39", "1920295", "141.148.194.147:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:26", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-15 09:43:30", "1920294", "128.90.105.59:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:18", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-15 09:43:24", "1920293", "109.227.48.165:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:15", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-15 06:04:33", "1918315", "13.192.33.5:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-10-03 11:43:21", "50", "False", "None", "16509,brute ratel,c2,censys", "0", "sojubear"
"2026-09-15 03:47:38", "1918344", "223.109.142.7:8088", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-14 19:47:42", "1918021", "82.26.66.179:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:38", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-14 19:47:08", "1918020", "45.192.214.54:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-14 19:46:31", "1918019", "217.60.76.250:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-14 19:45:42", "1918018", "207.89.17.5:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:22", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-14 19:45:31", "1918017", "198.44.167.14:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:44:17", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-14 19:45:06", "1918016", "188.212.158.203:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-14 19:44:51", "1918015", "185.212.129.79:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-14 19:43:50", "1918014", "137.220.194.12:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-14 19:43:47", "1918013", "135.136.147.238:50", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:23", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-14 19:43:37", "1918012", "118.107.1.203:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-14 18:06:48", "1917934", "102.220.160.198:5555", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:04", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-14 13:57:57", "1917783", "31.57.184.6:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 08:55:09", "100", "False", "https://tria.ge/260914-qg3s6sdj5y", "Remcos", "0", "dyingbreeds_"
"2026-09-14 13:47:58", "1917781", "180.184.46.116:10074", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-14 13:47:51", "1917780", "120.53.19.157:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:01", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-14 13:47:42", "1917779", "101.201.103.158:8066", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-14 12:05:08", "1917700", "139.196.174.152:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 07:57:34", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-14 12:03:48", "1917324", "192.162.199.242:5000", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:52:02", "100", "False", "None", "5000,c2,Remcos", "0", "Bitsight"
"2026-09-14 11:19:22", "1917603", "102.117.165.202:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:03", "50", "False", "https://www.shodan.io/host/102.117.165.202#7443", "c2,mythic,shodan", "0", "juroots"
"2026-09-14 11:18:36", "1917599", "31.156.181.5:9002", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-10-03 11:44:54", "50", "False", "https://www.shodan.io/host/31.156.181.5#9002", "bruteratel,c2,shodan", "0", "juroots"
"2026-09-14 11:12:50", "1917395", "155.94.154.152:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:46:05", "50", "False", "https://www.shodan.io/host/155.94.154.152#80", "c2,gophish,phishing,shodan", "0", "juroots"
"2026-09-14 11:11:39", "1917326", "167.17.47.252:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:07", "50", "False", "https://www.shodan.io/host/167.17.47.252#443", "c2,cobaltstrike,shodan", "0", "juroots"
"2026-09-14 09:47:28", "1917313", "82.26.66.179:55555", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:38", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-14 09:46:52", "1917312", "45.207.241.27:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:16", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-14 09:44:55", "1917311", "193.8.187.10:80", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-10-03 11:44:12", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-09-14 09:44:47", "1917309", "192.162.199.179:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:07", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-14 09:44:47", "1917310", "192.169.176.54:40056", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:44:07", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-09-14 09:44:42", "1917308", "185.34.147.34:8443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-14 09:44:41", "1917307", "185.34.147.33:8443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-14 09:44:40", "1917306", "185.34.147.32:8443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-14 09:44:39", "1917305", "185.34.147.31:8443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-14 09:44:09", "1917304", "161.248.179.92:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-14 09:43:55", "1917303", "154.214.2.223:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:36", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-14 09:43:48", "1917302", "149.30.222.243:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:31", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-14 09:43:43", "1917301", "144.172.106.62:2030", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:27", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-14 09:43:36", "1917300", "135.136.147.238:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:23", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-14 09:43:34", "1917299", "130.94.42.202:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-14 09:43:13", "1917298", "104.164.46.36:10443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:09", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-14 09:43:06", "1917297", "102.220.160.198:6666", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-14 08:01:55", "1917163", "157.245.76.251:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-10-03 10:02:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/kimwolf", "botnet,ddos,kimwolf,proxy", "0", "deepfield"
"2026-09-14 08:01:55", "1917164", "164.92.152.141:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-10-03 10:02:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/kimwolf", "botnet,ddos,kimwolf,proxy", "0", "deepfield"
"2026-09-14 08:01:54", "1917165", "167.172.32.113:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-10-03 10:02:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/kimwolf", "botnet,ddos,kimwolf,proxy", "0", "deepfield"
"2026-09-14 08:01:54", "1917166", "167.172.45.217:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-10-03 10:02:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/kimwolf", "botnet,ddos,kimwolf,proxy", "0", "deepfield"
"2026-09-14 08:01:53", "1917167", "167.99.219.230:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-10-03 10:02:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/kimwolf", "botnet,ddos,kimwolf,proxy", "0", "deepfield"
"2026-09-14 08:01:53", "1917168", "178.62.244.142:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-10-03 10:02:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/kimwolf", "botnet,ddos,kimwolf,proxy", "0", "deepfield"
"2026-09-14 08:01:52", "1917169", "188.166.100.18:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-10-03 10:02:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/kimwolf", "botnet,ddos,kimwolf,proxy", "0", "deepfield"
"2026-09-14 08:01:52", "1917170", "188.166.35.43:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-10-03 10:02:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/kimwolf", "botnet,ddos,kimwolf,proxy", "0", "deepfield"
"2026-09-14 08:01:52", "1917171", "206.189.111.119:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-10-03 10:02:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/kimwolf", "botnet,ddos,kimwolf,proxy", "0", "deepfield"
"2026-09-14 08:01:51", "1917172", "209.38.37.114:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-10-03 10:02:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/kimwolf", "botnet,ddos,kimwolf,proxy", "0", "deepfield"
"2026-09-14 08:01:51", "1917173", "212.193.31.145:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-10-03 10:02:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/kimwolf", "botnet,ddos,kimwolf,proxy", "0", "deepfield"
"2026-09-14 08:01:50", "1917174", "85.234.91.247:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-10-03 10:02:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/kimwolf", "botnet,ddos,kimwolf,proxy", "0", "deepfield"
"2026-09-14 08:01:50", "1917175", "89.19.223.49:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-10-03 10:02:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/kimwolf", "botnet,ddos,kimwolf,proxy", "0", "deepfield"
"2026-09-14 08:01:43", "1917176", "91.224.92.203:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-10-03 10:02:45", "100", "False", "https://github.com/deepfield/public-research/tree/main/kimwolf", "botnet,ddos,kimwolf,proxy", "0", "deepfield"
"2026-09-14 07:47:18", "1917130", "74.201.173.189:15702", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:01:22", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-14 07:25:19", "1917134", "46.151.182.237:9090", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 07:16:00", "75", "False", "https://bazaar.abuse.ch/sample/9ffcc473076a03e3b8e0c839e73276c7ab71d9acdf6d4c76968472cbf7391d4f/", "remcos", "0", "abuse_ch"
"2026-09-14 06:10:45", "1917118", "172.245.209.188:2556", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:53:26", "100", "False", "None", "c2,monipro,Remcos", "0", "Bitsight"
"2026-09-14 03:47:32", "1917085", "137.220.205.193:5566", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:03", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-14 03:05:21", "1917076", "46.151.182.6:9090", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 01:45:16", "75", "False", "https://bazaar.abuse.ch/sample/604495eeedb9f4124706a35b0907213716f43af17e7662e15e8c15eb41c13c46/", "remcos", "0", "abuse_ch"
"2026-09-13 20:05:08", "1916965", "104.248.156.16:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:11", "100", "True", "None", "havoc", "1", "anonymous"
"2026-09-13 19:46:52", "1916958", "94.237.62.102:80", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:49", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-13 19:46:50", "1916957", "94.154.32.24:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:46:38", "1916956", "84.247.187.47:6660", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:39", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-13 19:46:26", "1916955", "66.179.29.5:9000", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:45:58", "1916954", "45.139.104.26:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:45:52", "1916952", "38.54.13.48:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:05", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-13 19:45:52", "1916953", "38.54.13.48:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:05", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-13 19:45:51", "1916950", "38.180.146.89:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:45:51", "1916951", "38.180.146.89:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:45:50", "1916949", "38.180.146.89:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:45:46", "1916948", "34.222.23.196:60000", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:44:59", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-09-13 19:45:41", "1916947", "31.56.209.53:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:45:33", "1916945", "217.60.195.25:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:45:33", "1916946", "217.60.77.60:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:45:32", "1916943", "217.60.195.25:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:45:32", "1916944", "217.60.195.25:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:45:31", "1916941", "217.60.195.160:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:45:31", "1916942", "217.60.195.160:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:45:29", "1916940", "217.217.97.65:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:44:42", "1916938", "195.177.94.23:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:44:42", "1916939", "195.177.94.23:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:44:31", "1916937", "192.162.199.179:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:07", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-13 19:43:50", "1916936", "155.2.192.251:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:38", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:43:45", "1916934", "153.56.180.134:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:34", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:43:45", "1916935", "153.56.180.134:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:34", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 19:43:05", "1916933", "102.117.168.128:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:03", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-13 13:47:06", "1916628", "183.60.226.2:38080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-13 13:46:59", "1916626", "137.220.205.181:5566", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:03", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-13 13:46:59", "1916627", "137.220.205.196:5566", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:03", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-13 13:46:58", "1916625", "121.43.152.104:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-13 12:35:02", "1916607", "43.228.157.171:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:16:33", "100", "False", "None", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-09-13 11:45:55", "1916263", "130.12.181.199:10213", "ip:port", "botnet_cc", "apk.cecbot", "None", "CECbot", "2026-10-02 12:55:58", "100", "False", "https://github.com/deepfield/public-research/tree/main/cecbot", "android,botnet,cecbot,ddos", "0", "deepfield"
"2026-09-13 09:47:33", "1916185", "93.82.31.87:8000", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:45:47", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-09-13 09:47:19", "1916184", "84.247.187.47:4546", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:39", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-13 09:46:36", "1916183", "45.139.104.26:56013", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 09:46:29", "1916182", "38.180.146.89:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:03", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 09:46:17", "1916181", "31.56.209.63:8080", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 09:45:13", "1916180", "196.251.121.238:5173", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-13 09:44:54", "1916179", "192.238.177.18:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:08", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-13 09:44:53", "1916177", "192.238.177.14:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:08", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-13 09:44:53", "1916178", "192.238.177.14:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:08", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-13 09:44:14", "1916176", "167.233.243.9:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:46", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-13 09:44:11", "1916175", "162.35.107.168:8080", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:45", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-13 09:44:09", "1916173", "160.191.88.70:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-13 09:44:09", "1916174", "160.191.88.70:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-13 09:43:43", "1916172", "144.172.106.62:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:27", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-13 09:43:32", "1916171", "128.90.112.54:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:19", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-13 09:43:05", "1916170", "102.220.160.198:1505", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-13 06:33:54", "1916053", "156.254.20.46:5996", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:06", "50", "False", "None", "400619,c2,censys,cobalt strike", "0", "sojubear"
"2026-09-13 06:33:54", "1916054", "156.254.20.46:5998", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:06", "50", "False", "None", "400619,c2,censys,cobalt strike", "0", "sojubear"
"2026-09-13 04:49:06", "1916119", "49.233.202.218:7878", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:17", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-13 04:49:06", "1916120", "5.104.86.108:8089", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:17", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-12 19:46:40", "1915968", "52.141.89.123:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:24", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-12 19:46:28", "1915967", "45.192.226.20:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-12 19:46:25", "1915965", "45.192.169.57:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:13", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-12 19:46:25", "1915966", "45.192.169.58:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:13", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-12 19:46:24", "1915964", "45.192.169.186:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:13", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-12 19:46:05", "1915963", "31.57.51.110:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:57", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-12 19:46:03", "1915962", "31.56.209.63:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-12 19:45:56", "1915961", "23.226.57.95:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:51", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-12 19:45:18", "1915959", "213.209.159.91:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-12 19:44:50", "1915957", "194.9.6.125:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-12 19:44:50", "1915958", "194.9.6.125:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-12 19:44:46", "1915955", "193.25.215.37:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-12 19:44:46", "1915956", "193.25.215.37:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-12 19:44:43", "1915954", "192.238.177.18:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:09", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-12 19:44:40", "1915953", "192.177.26.195:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-12 19:43:48", "1915951", "151.242.63.126:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-12 19:43:39", "1915950", "141.98.11.227:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:26", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-12 19:43:04", "1915949", "102.117.165.85:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:03", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-12 13:48:33", "1915671", "49.51.230.17:53001", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:17", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-12 13:48:26", "1915670", "38.76.183.197:8806", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:12", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-12 13:48:18", "1915669", "165.154.68.30:4433", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-12 09:47:52", "1915617", "94.26.248.76:50050", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:49", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-12 09:47:36", "1915616", "84.247.141.236:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:39", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-12 09:47:25", "1915613", "66.94.113.10:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-12 09:47:25", "1915614", "68.178.202.150:40056", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:31", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-09-12 09:47:25", "1915615", "68.178.205.17:40056", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:31", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-09-12 09:47:23", "1915612", "65.108.13.44:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:29", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-12 09:47:08", "1915611", "46.246.4.10:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:20", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-12 09:46:41", "1915610", "37.244.232.113:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:45:01", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-12 09:45:36", "1915609", "208.167.253.21:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:22", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-12 09:45:12", "1915608", "194.110.172.193:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:12", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-12 09:44:55", "1915607", "187.145.61.38:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:04", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-12 09:44:19", "1915606", "166.1.249.50:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:46", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-12 09:43:38", "1915605", "13.251.42.119:8088", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:21", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-12 09:43:34", "1915604", "128.90.105.161:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:18", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-12 09:43:22", "1915603", "107.172.232.71:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-12 09:43:06", "1915602", "102.220.160.198:2026", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-12 07:55:31", "1915577", "31.70.103.174:8000", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:11", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-09-12 03:47:34", "1915526", "23.227.196.108:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-12 03:47:27", "1915525", "162.35.122.126:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-12 03:47:24", "1915524", "139.199.160.80:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:03", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-11 19:47:26", "1912782", "84.247.187.47:8818", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:39", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-11 19:46:57", "1912781", "5.175.222.230:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 11:45:22", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-09-11 19:46:12", "1912779", "217.60.195.40:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-11 19:46:12", "1912780", "217.60.195.40:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-11 19:46:08", "1912778", "217.217.97.90:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-11 19:45:27", "1912777", "204.0.56.147:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:21", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-11 19:45:16", "1912776", "198.13.158.57:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:16", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-11 19:45:15", "1912775", "196.251.121.124:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-11 19:45:09", "1912773", "195.177.94.100:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-11 19:45:09", "1912774", "195.177.94.100:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-11 19:45:08", "1912772", "195.177.94.100:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-11 19:45:01", "1912771", "194.32.142.225:22222", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:12", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-11 19:44:56", "1912770", "192.252.187.56:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-11 19:44:52", "1912769", "191.93.113.119:1000", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:06", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-11 19:44:20", "1912768", "172.111.198.212:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-11 19:44:09", "1912767", "158.94.209.209:3009", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-11 19:43:48", "1912766", "144.31.6.37:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-11 19:43:29", "1912764", "118.107.16.32:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-11 19:43:19", "1912763", "105.101.131.181:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-11 19:43:04", "1912762", "102.117.163.149:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:02", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-11 15:48:12", "1912321", "100.87.53.0:7443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-11 13:51:07", "1912261", "193.112.95.1:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-11 13:38:17", "1912255", "191.93.113.119:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 20:33:10", "100", "False", "None", "c2,PASA,Remcos", "0", "Bitsight"
"2026-09-11 09:47:38", "1912193", "93.82.26.11:8000", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:45:47", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-09-11 09:47:36", "1912192", "92.223.85.43:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:46", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-11 09:47:29", "1912190", "88.223.43.37:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:45:41", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-11 09:47:29", "1912191", "89.124.108.211:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:42", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-11 09:47:28", "1912189", "88.223.43.216:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:45:41", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-11 09:47:25", "1912188", "84.247.187.47:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:39", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-11 09:47:18", "1912187", "78.17.93.96:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-11 09:47:15", "1912186", "69.10.49.136:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:32", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-11 09:47:08", "1912185", "61.158.61.184:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:26", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-11 09:46:49", "1912182", "45.202.0.24:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:15", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-11 09:46:49", "1912183", "45.202.0.25:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:16", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-11 09:46:49", "1912184", "45.202.0.25:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:16", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-11 09:46:43", "1912181", "45.145.171.151:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:45:11", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-09-11 09:46:41", "1912180", "45.13.239.249:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-11 09:46:14", "1912179", "223.130.11.38:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:49", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-11 09:45:14", "1912176", "198.199.82.231:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:16", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-11 09:44:54", "1912174", "193.111.77.180:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:10", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-11 09:44:54", "1912175", "193.111.77.180:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:10", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-11 09:44:09", "1912173", "162.35.100.184:1104", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-11 09:44:08", "1912172", "162.141.69.37:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:44", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-11 09:44:06", "1912171", "16.5.7.159:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:42", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-11 09:43:55", "1912170", "154.205.175.206:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:36", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-11 09:43:44", "1912169", "144.126.218.78:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:27", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-11 09:43:16", "1912168", "104.248.156.16:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:11", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-11 07:33:02", "1912134", "147.182.203.222:9932", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-10-03 11:55:26", "100", "False", "None", "5a4378fb90db39f09c7b18d1f314e645,c2,remus", "0", "Bitsight"
"2026-09-11 03:48:17", "1911853", "45.144.136.97:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:14", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-11 03:47:54", "1911852", "114.132.180.69:3389", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-11 03:47:53", "1911851", "111.228.5.127:5435", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-10 21:47:09", "1911432", "72.14.136.90:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-10 21:46:40", "1911431", "45.192.211.126:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-10 21:45:02", "1911430", "195.177.94.98:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-10 21:44:53", "1911429", "193.168.175.69:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-10 21:44:34", "1911428", "185.174.102.5:55555", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-10 21:44:10", "1911427", "163.5.210.247:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-10 21:43:53", "1911426", "153.56.180.134:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:34", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-10 21:43:17", "1911423", "104.249.10.118:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-10 21:43:17", "1911424", "104.249.10.118:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-10 21:43:17", "1911425", "104.249.10.118:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-10 19:47:26", "1910838", "84.247.187.47:6661", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:39", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 19:47:26", "1910839", "84.247.187.47:8115", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:39", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 19:47:06", "1910837", "62.171.148.175:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:26", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 19:46:48", "1910836", "45.202.0.24:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:15", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 19:46:20", "1910835", "31.56.209.245:443", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-10-03 11:44:55", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-09-10 19:44:56", "1910834", "193.233.131.97:1907", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:10", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 19:44:04", "1910833", "158.158.17.236:8443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-10 19:43:58", "1910832", "154.46.30.12:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:37", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-10 19:43:48", "1910831", "146.70.87.218:42445", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:30", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-10 19:43:34", "1910830", "129.153.57.179:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:20", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-10 19:43:33", "1910829", "128.90.167.181:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 19:43:32", "1910828", "128.90.105.231:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:18", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 19:43:06", "1910827", "102.220.160.198:3500", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 19:43:05", "1910826", "102.117.168.34:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:03", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-10 17:55:53", "1910561", "31.40.204.52:2444", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 01:34:16", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-10 17:55:42", "1910586", "104.129.171.63:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:55:12", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-10 13:48:51", "1907181", "38.76.190.209:8090", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:12", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-10 13:48:48", "1907179", "209.200.246.80:26513", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-10 13:48:48", "1907180", "209.200.246.80:4444", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-10 13:24:15", "1907156", "216.9.225.150:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:35:33", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-10 11:08:00", "1907083", "193.160.223.238:31896", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-01 22:16:10", "100", "False", "None", "c2,FAKE,Remcos", "0", "Bitsight"
"2026-09-10 09:47:49", "1907070", "98.89.43.158:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-10 09:47:48", "1907068", "95.31.213.79:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:50", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-10 09:47:48", "1907069", "96.9.226.22:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 09:47:25", "1907067", "80.96.108.225:65432", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-10 09:47:23", "1907066", "80.190.77.86:2002", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:35", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 09:47:19", "1907065", "69.48.229.91:65500", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:32", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-10 09:47:12", "1907063", "62.171.148.175:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:27", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 09:47:12", "1907064", "62.171.148.175:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:27", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 09:46:39", "1907061", "38.54.97.169:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:06", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-10 09:45:29", "1907060", "206.123.132.166:3002", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:22", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 09:45:16", "1907059", "195.2.80.76:8081", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-10-03 11:44:15", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-09-10 09:45:07", "1907058", "194.26.192.153:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 09:44:46", "1907057", "185.242.3.250:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 09:44:42", "1907056", "185.212.128.237:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:57", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-10 09:44:38", "1907055", "184.176.151.16:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:43:56", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-09-10 09:44:34", "1907054", "18.142.104.108:8088", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:54", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-10 09:44:27", "1907052", "172.86.74.104:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:49", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 09:44:27", "1907053", "172.86.74.104:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:49", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 09:43:58", "1907051", "154.13.7.196:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-10 09:43:48", "1907050", "144.172.65.54:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:28", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-10 09:43:46", "1907049", "143.246.217.103:25729", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:27", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-10 09:43:43", "1907048", "138.16.178.77:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:25", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 09:43:34", "1907046", "128.90.135.53:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 09:43:32", "1907045", "124.156.108.12:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-10 09:43:21", "1907044", "107.172.134.37:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-10 09:43:08", "1907043", "103.108.66.160:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-10 05:13:50", "1906811", "111.228.49.20:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:59", "50", "False", "None", "c2,censys,cobalt strike", "0", "sojubear"
"2026-09-10 03:48:54", "1906864", "38.190.198.56:23251", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:12", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-10 03:48:29", "1906863", "100.87.53.0:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-10 02:40:03", "1906837", "102.220.161.94:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:05", "100", "False", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2026-09-09 19:47:44", "1906424", "96.9.226.22:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:50", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-09 19:47:25", "1906422", "84.247.187.47:4445", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:39", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-09 19:47:25", "1906423", "84.247.187.47:9918", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:39", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-09 19:47:23", "1906421", "82.22.7.20:50604", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:37", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-09 19:47:17", "1906420", "79.76.35.195:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:45:34", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-09 19:47:12", "1906419", "65.87.7.11:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:29", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-09 19:46:33", "1906418", "38.247.165.127:9990", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-09 19:46:24", "1906417", "31.76.103.200:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-09 19:46:09", "1906416", "217.60.195.139:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-09 19:45:32", "1906415", "212.43.153.205:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:24", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-09 19:45:24", "1906414", "202.162.99.199:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-09 19:44:56", "1906413", "192.241.151.6:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:09", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-09 19:44:50", "1906412", "187.145.125.245:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:04", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-09 19:44:49", "1906410", "186.240.202.85:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:03", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-09 19:44:49", "1906411", "186.240.202.89:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-09 19:44:21", "1906409", "172.234.71.84:9443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:48", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-09 19:43:54", "1906408", "150.40.98.51:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:33", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-09 19:43:50", "1906407", "146.70.79.45:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:43:30", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-09-09 19:43:47", "1906406", "144.172.112.126:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:27", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-09 19:43:43", "1906404", "137.220.194.12:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-09 19:43:43", "1906405", "138.16.178.77:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:25", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-09 19:43:42", "1906403", "137.220.194.12:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-09 19:43:31", "1906402", "118.107.16.32:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-09 19:43:22", "1906401", "107.172.134.37:6677", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-09 19:43:09", "1906400", "103.108.66.160:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-09 19:43:05", "1906399", "102.117.161.77:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:02", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-09 18:25:36", "1906367", "108.165.185.197:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:32:12", "75", "False", "https://bazaar.abuse.ch/sample/ae7c6d24e74f7e254351b83312907dc10c253ae381953d859bcc6a0a8ae71a2b/", "remcos", "0", "abuse_ch"
"2026-09-09 18:20:41", "1906366", "102.220.161.52:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:30:55", "75", "False", "https://bazaar.abuse.ch/sample/4e0b6d046fee5e9a00860aa8575c5de748cc8830c96d8978318377f53bb72004/", "remcos", "0", "abuse_ch"
"2026-09-09 18:20:40", "1906364", "102.220.161.73:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:03:43", "75", "False", "https://bazaar.abuse.ch/sample/781a90261c1d55c798832a2dac722d5791865731efcf96ef4791e9a2d942cfe2/", "remcos", "0", "abuse_ch"
"2026-09-09 18:05:05", "1906353", "15.235.204.60:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:33", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-09 15:26:29", "1906273", "31.13.190.58:32635", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 01:26:23", "100", "False", "None", "c2,Remcos,Yakuze Crypter Sep 2026", "0", "Bitsight"
"2026-09-09 15:26:28", "1906279", "93.127.160.86:9559", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:45:46", "100", "False", "None", "c2,Remcos,Yakuze Crypter Sep 2026", "0", "Bitsight"
"2026-09-09 15:18:19", "1906271", "31.13.190.58:9441", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-01 20:07:20", "100", "False", "None", "c2,Remcos,Yakuze Crypter Sep 2026", "0", "Bitsight"
"2026-09-09 15:18:18", "1906269", "31.13.190.58:9442", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 01:20:18", "100", "False", "None", "c2,Remcos,Yakuze Crypter Sep 2026", "0", "Bitsight"
"2026-09-09 12:05:05", "1906134", "152.136.253.101:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:04", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-09 09:47:20", "1906076", "46.246.84.8:2003", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:20", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-09 09:47:20", "1906077", "46.246.84.8:6490", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:20", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-09 09:46:58", "1906075", "43.198.116.85:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:08", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-09 09:46:57", "1906074", "43.143.57.45:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:08", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-09 09:46:47", "1906073", "34.73.4.161:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:59", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-09 09:46:38", "1906072", "3.6.16.126:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:54", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-09 09:46:34", "1906070", "23.94.206.113:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:44:52", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-09-09 09:46:34", "1906071", "23.94.206.113:50014", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:44:52", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-09-09 09:44:36", "1906069", "182.92.227.226:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:55", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-09 09:44:35", "1906068", "181.206.158.19:9000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:55", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-09 09:44:19", "1906067", "171.113.115.5:8001", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:48", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-09 09:44:00", "1906066", "154.37.218.235:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:37", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-09 09:43:56", "1906065", "153.142.13.183:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-09 09:43:48", "1906064", "144.172.118.114:51956", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:28", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-09 03:47:41", "1905789", "42.193.123.90:16631", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:13", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-09 03:47:24", "1905788", "113.250.188.15:6784", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-08 19:47:49", "1905628", "94.183.151.139:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:48", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-08 19:47:42", "1905627", "91.92.243.114:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:47:41", "1905625", "91.92.243.114:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:47:41", "1905626", "91.92.243.114:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:47:38", "1905624", "91.124.98.6:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 11:45:43", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-09-08 19:47:20", "1905623", "66.78.40.93:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:30", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-08 19:47:16", "1905622", "64.81.30.27:444", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:46:57", "1905621", "45.74.15.196:55012", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:46:54", "1905618", "45.192.214.55:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:46:54", "1905619", "45.192.226.20:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:46:54", "1905620", "45.192.226.20:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:46:53", "1905614", "45.192.214.54:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:46:53", "1905615", "45.192.214.54:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:46:53", "1905616", "45.192.214.55:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:46:53", "1905617", "45.192.214.55:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:46:51", "1905612", "45.192.211.116:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:46:51", "1905613", "45.192.211.116:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:46:36", "1905611", "37.72.168.163:42554", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:01", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-08 19:46:35", "1905610", "37.16.74.19:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 11:45:00", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-09-08 19:46:20", "1905609", "23.171.177.13:7222", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:46:15", "1905608", "217.60.195.139:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:45:26", "1905607", "202.162.99.199:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:45:21", "1905606", "2.56.222.17:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-08 19:45:00", "1905605", "194.59.30.123:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:44:59", "1905604", "194.59.30.123:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:44:48", "1905601", "186.240.202.85:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:44:48", "1905602", "186.240.202.89:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:44:48", "1905603", "186.240.202.89:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:44:29", "1905600", "178.16.55.134:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:44:27", "1905599", "176.65.139.154:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 11:43:52", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-09-08 19:44:16", "1905598", "170.64.183.242:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:48", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-08 19:44:08", "1905596", "160.179.226.78:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:42", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:44:08", "1905597", "160.179.226.78:5000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:42", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-08 19:43:48", "1905595", "147.124.214.219:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:31", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:43:47", "1905594", "147.124.214.219:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:31", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:43:33", "1905593", "128.90.105.61:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:19", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-08 19:43:25", "1905592", "109.227.42.108:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:15", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-08 19:43:19", "1905591", "107.150.72.199:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:43:15", "1905589", "104.239.66.26:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:43:15", "1905590", "104.239.66.26:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-08 19:43:05", "1905588", "102.117.170.76:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:03", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-08 09:47:17", "1905438", "86.54.29.65:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:41", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-08 09:47:11", "1905437", "82.115.16.4:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-08 09:47:09", "1905436", "80.190.77.86:1010", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:35", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-08 09:47:07", "1905435", "78.39.51.23:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:34", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-08 09:46:50", "1905434", "50.60.157.152:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:23", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-08 09:46:49", "1905433", "5.175.188.199:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:22", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-08 09:46:31", "1905432", "45.142.30.100:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:11", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-08 09:46:17", "1905431", "34.134.117.89:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:58", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-08 09:46:16", "1905430", "31.77.161.250:5667", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:58", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-08 09:46:03", "1905428", "220.154.128.196:8766", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:49", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-08 09:46:03", "1905429", "220.154.128.196:9003", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:49", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-08 09:46:00", "1905427", "217.60.198.81:7744", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-08 09:44:51", "1905425", "193.233.49.79:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:11", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-08 09:44:51", "1905426", "193.239.237.120:50091", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:11", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-08 09:44:21", "1905424", "175.43.223.201:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:52", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-08 05:04:48", "1904072", "42.194.241.92:8181", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:13", "50", "False", "None", "45090,c2,censys,cobalt strike", "0", "sojubear"
"2026-09-08 03:47:24", "1904111", "175.178.224.39:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-08 03:47:11", "1904110", "106.52.127.131:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-07 19:47:48", "1903910", "209.200.246.194:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-07 19:47:18", "1903907", "94.250.191.120:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:45:49", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-07 19:47:17", "1903906", "94.154.43.38:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 11:45:48", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-09-07 19:47:03", "1903905", "84.200.77.29:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:38", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-07 19:46:58", "1903904", "80.190.77.86:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:35", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-07 19:46:30", "1903903", "45.192.211.116:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-07 19:46:22", "1903902", "43.135.26.173:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-07 19:46:15", "1903901", "37.120.222.88:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:00", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-07 19:46:14", "1903900", "37.120.222.88:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:00", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-07 19:46:09", "1903899", "31.70.81.171:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:57", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-07 19:46:08", "1903896", "31.57.38.195:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:56", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-07 19:46:08", "1903897", "31.57.38.195:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:56", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-07 19:46:08", "1903898", "31.57.38.195:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:56", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-07 19:45:08", "1903895", "206.238.123.77:60443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-07 19:45:00", "1903894", "20.118.221.53:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:19", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-07 19:44:49", "1903893", "194.9.6.95:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-07 19:44:47", "1903892", "194.59.30.123:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-07 19:44:09", "1903891", "172.111.201.220:3020", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:48", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-07 19:43:59", "1903889", "160.179.230.137:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:43", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-07 19:43:59", "1903890", "160.179.230.137:5000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-07 19:43:57", "1903888", "159.194.232.217:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:41", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-07 19:43:18", "1903887", "107.149.8.58:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-07 19:43:06", "1903886", "102.220.160.198:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-07 13:48:28", "1903726", "45.195.8.27:43001", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:15", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-07 13:48:04", "1903725", "103.204.174.212:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-07 09:47:09", "1903571", "85.9.199.115:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:41", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-07 09:47:09", "1903572", "85.9.199.115:8888", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:41", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-07 09:46:56", "1903570", "66.179.30.218:65432", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:30", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-07 09:46:04", "1903569", "23.148.212.254:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:50", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-07 09:45:23", "1903568", "213.209.159.36:1879", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:24", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-07 09:44:49", "1903567", "192.253.226.10:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-07 09:44:36", "1903566", "185.242.3.250:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-07 09:44:11", "1903565", "171.113.113.19:8001", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:48", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-07 09:43:33", "1903563", "128.90.136.115:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-07 08:10:55", "1903521", "31.57.184.17:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:13:45", "75", "False", "https://bazaar.abuse.ch/sample/54ce00fda0f5fe115248769f7fc8b8a1f01300c4c15b70d0d56159d51966e8bd/", "remcos", "0", "abuse_ch"
"2026-09-07 07:21:03", "1903432", "102.220.161.59:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 18:11:02", "75", "False", "https://bazaar.abuse.ch/sample/df4f272237a303b761a826b210a1b2f2260287fc7c4f3ec7f8c6c9ff812e7eca/", "remcos", "0", "abuse_ch"
"2026-09-07 07:16:03", "1903424", "43.228.157.194:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:16:46", "75", "False", "https://bazaar.abuse.ch/sample/1b9e2a4309c507d427e3c69fb81adce25b768ac3e252cf4c1f5fbea72e43c90f/", "remcos", "0", "abuse_ch"
"2026-09-07 06:15:22", "1903390", "206.123.137.132:56090", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:29:47", "100", "False", "None", "c2,Remcos,septguops", "0", "Bitsight"
"2026-09-06 23:20:38", "1903142", "130.12.182.211:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 08:30:05", "75", "False", "https://bazaar.abuse.ch/sample/e801f57192dae98fac7cefc90bc5da6332bc668a5a2d9addbf135427ccd0c8d0/", "remcos", "0", "abuse_ch"
"2026-09-06 19:46:56", "1903050", "91.219.239.100:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:46:19", "1903049", "45.139.104.226:49001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:46:09", "1903048", "36.255.97.175:4445", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:59", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-06 19:46:04", "1903047", "31.57.38.7:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:56", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:45:12", "1903046", "202.162.99.199:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:44:55", "1903045", "194.9.6.125:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:44:51", "1903044", "192.252.187.56:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:44:28", "1903043", "185.254.99.217:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:01", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:44:27", "1903042", "185.242.3.250:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-06 19:44:26", "1903039", "185.227.83.169:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:59", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:44:26", "1903040", "185.227.83.169:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:59", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:44:26", "1903041", "185.227.83.169:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:59", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:44:19", "1903038", "183.90.187.2:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:44:18", "1903037", "180.93.115.26:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 11:43:54", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-09-06 19:44:17", "1903036", "179.43.169.8:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:43:54", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-09-06 19:43:51", "1903035", "156.247.62.115:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:39", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-06 19:43:35", "1903034", "136.248.112.114:8080", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:43:24", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:43:25", "1903033", "118.107.16.32:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:43:16", "1903031", "107.149.8.58:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:43:16", "1903032", "107.149.8.58:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:43:08", "1903028", "103.45.66.107:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:43:08", "1903029", "103.45.66.107:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:43:08", "1903030", "103.45.66.107:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 19:43:02", "1903027", "1.69.201.81:9003", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:01", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-06 13:47:16", "1902203", "192.9.157.200:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-06 13:17:30", "1902183", "141.98.10.154:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:33:50", "100", "False", "None", "c2,MicrosoftOutlook,Remcos", "0", "Bitsight"
"2026-09-06 09:47:09", "1902149", "91.92.241.187:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:44", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-06 09:47:08", "1902148", "91.92.241.184:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:44", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-06 09:46:59", "1902147", "82.22.7.20:5069", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:37", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 09:46:55", "1902146", "80.190.77.86:2025", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:35", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-06 09:46:32", "1902145", "45.77.203.212:50442", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-06 09:46:24", "1902144", "45.141.21.177:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:11", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-06 09:44:41", "1902143", "191.252.184.198:1080", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:06", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-06 09:44:31", "1902142", "185.227.152.231:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:59", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-06 09:43:21", "1902139", "108.187.43.137:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 09:43:21", "1902140", "108.187.43.144:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-06 09:43:21", "1902141", "109.123.245.205:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:14", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-06 09:43:10", "1902138", "103.79.76.207:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:08", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-06 08:20:29", "1902106", "45.141.21.177:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:11", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-09-06 08:20:29", "1902112", "156.247.62.115:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:39", "75", "False", "", "DarkCrystal RAT,DCRat", "0", "whoamix302"
"2026-09-06 07:54:15", "1902049", "156.240.108.46:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:39", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-09-06 07:54:14", "1902050", "156.240.108.46:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:39", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-09-06 07:54:13", "1902051", "156.240.108.46:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:39", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-09-06 07:54:13", "1902052", "179.236.107.22:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:54", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-09-06 07:54:10", "1902056", "179.236.107.40:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:54", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-09-06 07:54:10", "1902057", "179.236.107.40:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:54", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-09-05 19:46:57", "1901535", "94.154.32.101:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:45:48", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-09-05 19:46:44", "1901534", "83.136.211.230:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:38", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-05 19:46:18", "1901533", "45.81.115.197:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:18", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-05 19:46:15", "1901532", "45.225.135.90:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-05 19:46:10", "1901531", "45.139.104.226:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-05 19:46:09", "1901529", "45.11.230.111:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-05 19:46:09", "1901530", "45.11.230.111:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-05 19:45:55", "1901528", "31.70.81.171:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:57", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-05 19:45:54", "1901527", "31.59.118.107:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:57", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-05 19:44:47", "1901526", "196.81.251.114:5001", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:16", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-05 19:44:46", "1901525", "195.66.213.23:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:16", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-09-05 19:44:23", "1901524", "185.212.128.233:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:57", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-05 19:44:20", "1901523", "185.157.46.242:1337", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:56", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-05 19:44:19", "1901522", "183.90.187.73:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:56", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-05 19:44:12", "1901521", "173.249.197.20:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-05 19:43:56", "1901520", "160.191.88.70:44556", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-05 19:43:43", "1901519", "15.168.12.234:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:32", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-05 19:43:35", "1901518", "136.118.7.65:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:24", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-05 19:43:05", "1901517", "102.220.160.198:56002", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-05 19:43:04", "1901516", "102.117.165.66:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:03", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-05 13:48:00", "1901367", "209.200.246.194:45126", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-05 13:47:53", "1901366", "154.197.141.252:12443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:04", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-05 13:47:52", "1901365", "154.197.141.246:12443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:04", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-05 13:47:44", "1901364", "111.230.185.183:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-05 13:47:41", "1901363", "103.212.186.85:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-05 11:35:04", "1901247", "37.120.222.88:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:00", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-09-05 09:47:20", "1901286", "82.23.246.148:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:37", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-05 09:47:16", "1901285", "80.190.77.86:1009", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:34", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-05 09:46:55", "1901284", "47.239.61.167:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:21", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-05 09:46:47", "1901283", "45.56.165.197:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-05 09:46:29", "1901282", "37.244.231.231:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:45:00", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-05 09:46:07", "1901281", "216.126.225.87:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:43", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-05 09:45:31", "1901280", "212.43.153.129:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:24", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-05 09:45:24", "1901279", "203.88.118.26:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:21", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-05 09:45:11", "1901278", "196.81.251.114:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-05 09:44:57", "1901277", "194.113.73.246:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:12", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-05 09:44:39", "1901276", "185.233.164.109:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:59", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-05 09:44:16", "1901275", "172.111.232.18:7784", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-05 09:43:58", "1901274", "156.238.120.12:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:38", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-05 09:43:49", "1901273", "149.56.12.202:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:32", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-05 09:43:39", "1901272", "137.175.107.110:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:24", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-05 09:43:05", "1901271", "102.220.160.117:80", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:04", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-04 19:47:51", "1894479", "188.227.14.105:541", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-04 19:47:22", "1894477", "94.154.32.8:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:47:22", "1894478", "94.154.32.8:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:47:08", "1894476", "84.200.77.29:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:38", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:47:07", "1894475", "82.23.246.148:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:37", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-04 19:47:05", "1894474", "80.97.160.38:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:46:59", "1894473", "77.237.102.203:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:45:33", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-04 19:46:21", "1894472", "38.247.165.127:8091", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-04 19:44:59", "1894471", "196.251.121.124:6767", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:44:56", "1894469", "195.177.94.11:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:44:56", "1894470", "195.177.94.11:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:44:36", "1894468", "185.227.152.231:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:59", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-04 19:44:29", "1894466", "183.90.187.2:2025", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:44:29", "1894467", "183.90.187.73:2025", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:56", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:44:28", "1894465", "183.90.187.111:2025", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:44:18", "1894464", "172.86.80.201:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:50", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-04 19:44:17", "1894463", "172.81.132.156:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:43:57", "1894462", "156.238.120.12:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:39", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-04 19:43:56", "1894461", "155.138.215.87:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:38", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-04 19:43:52", "1894460", "153.75.95.181:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:34", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:43:51", "1894459", "153.75.95.181:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:34", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:43:49", "1894458", "150.241.66.55:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:43:48", "1894456", "150.241.66.55:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:43:48", "1894457", "150.241.66.55:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 19:43:42", "1894455", "143.202.93.183:9001", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:43:27", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-04 19:43:30", "1894454", "122.51.212.92:39902", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-10-03 11:43:18", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-09-04 17:47:55", "1894383", "223.109.142.7:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-04 15:48:32", "1894355", "8.219.134.47:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:18", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-04 15:48:28", "1894354", "47.95.201.24:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:17", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-04 15:48:18", "1894353", "202.182.112.157:6666", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-04 15:48:12", "1894352", "154.37.218.73:13580", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:05", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-04 09:48:50", "1894258", "94.103.1.61:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-04 09:48:49", "1894256", "93.233.109.96:51125", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:47", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-04 09:48:49", "1894257", "93.66.148.17:9002", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-10-03 11:45:47", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-09-04 09:48:36", "1894255", "85.9.198.7:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:41", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-04 09:48:16", "1894254", "62.60.155.33:1458", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-04 09:47:31", "1894253", "34.122.131.42:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-04 09:47:29", "1894252", "31.77.161.250:2911", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:58", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-04 09:45:35", "1894250", "190.102.41.198:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-04 09:44:57", "1894249", "178.128.171.71:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:53", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-04 09:44:24", "1894248", "158.94.209.209:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-04 09:44:15", "1894247", "154.36.165.171:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:37", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-04 09:44:14", "1894246", "154.211.89.86:8443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-04 09:43:06", "1894245", "102.220.160.198:2600", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 23:47:28", "1894034", "124.222.57.34:8099", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-03 21:05:05", "1894001", "43.155.9.112:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:14", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-03 20:17:38", "1893891", "89.185.84.164:23189", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-01 18:12:16", "100", "False", "None", "c2,J06082026uyasd,Remcos", "0", "Bitsight"
"2026-09-03 19:47:07", "1893985", "93.233.109.96:51123", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:47", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 19:46:47", "1893984", "76.164.192.173:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-03 19:46:42", "1893983", "64.83.47.231:40057", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:28", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-03 19:46:10", "1893982", "38.255.52.49:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:05", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-03 19:46:09", "1893980", "38.255.52.49:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:05", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-03 19:46:09", "1893981", "38.255.52.49:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:05", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-03 19:45:45", "1893979", "216.250.249.97:22208", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 19:45:13", "1893978", "212.43.153.129:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:24", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 19:44:54", "1893977", "198.23.237.142:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:17", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-03 19:44:50", "1893976", "195.177.94.233:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-03 19:44:42", "1893975", "192.253.226.78:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-03 19:44:38", "1893973", "190.102.41.198:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 19:44:38", "1893974", "190.102.41.198:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 19:44:24", "1893972", "185.112.144.177:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:56", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-03 19:44:15", "1893970", "172.94.58.29:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:51", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 19:44:15", "1893971", "173.249.197.20:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-03 19:44:06", "1893969", "169.58.150.161:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:47", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-03 19:43:57", "1893968", "158.94.211.158:1996", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:41", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-03 19:43:54", "1893967", "157.20.182.21:1995", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:40", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 19:43:44", "1893966", "147.182.220.95:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:31", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-03 19:43:42", "1893965", "143.92.61.232:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 19:43:41", "1893963", "143.92.61.144:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 19:43:41", "1893964", "143.92.61.231:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 19:43:32", "1893962", "128.90.59.90:7070", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:20", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 19:43:20", "1893961", "107.174.30.61:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-03 19:43:12", "1893960", "104.200.72.154:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-03 19:43:05", "1893959", "102.220.160.117:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:04", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 16:05:07", "1893924", "102.220.160.198:8888", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:05", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-03 15:05:07", "1893903", "46.151.182.190:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:15", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-03 11:48:34", "1893806", "47.113.206.140:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:15", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-03 11:48:32", "1893805", "43.155.9.112:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:14", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-03 11:48:21", "1893803", "154.94.224.35:2095", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:05", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-03 11:48:21", "1893804", "154.94.224.35:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:05", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-03 10:13:22", "1893782", "217.60.195.34:18631", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:30:57", "100", "False", "None", "c2,Remcos,WhiteRemote32", "0", "Bitsight"
"2026-09-03 09:47:31", "1893774", "93.114.183.130:9090", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-03 09:46:39", "1893773", "45.154.98.38:2004", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 09:46:11", "1893772", "23.175.48.78:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-03 09:46:02", "1893771", "216.250.249.97:22207", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 09:46:01", "1893770", "216.250.249.97:22206", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 09:44:01", "1893768", "158.94.211.158:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:41", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-03 09:43:43", "1893767", "144.31.51.6:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:28", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-03 09:43:41", "1893766", "142.93.49.30:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:26", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-03 09:43:32", "1893765", "129.212.163.157:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:20", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-03 09:43:31", "1893764", "128.90.169.101:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-03 05:39:23", "1893634", "217.60.195.210:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:46:38", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-02 23:47:27", "1893627", "165.99.43.101:4445", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-02 23:47:15", "1893626", "103.119.47.222:35203", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-02 19:47:25", "1893505", "54.87.15.178:8082", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 08:45:20", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-02 19:46:58", "1893504", "38.247.165.127:4655", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 08:44:59", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-02 19:46:47", "1893502", "31.57.147.200:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 08:44:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-02 19:46:47", "1893503", "31.57.147.200:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 08:44:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-02 19:46:34", "1893501", "217.60.102.3:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 08:44:42", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-02 19:45:46", "1893499", "20.2.140.201:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:19", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-02 19:45:00", "1893498", "185.212.128.169:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:57", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-02 19:44:45", "1893497", "172.94.14.210:55011", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 08:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-02 19:44:34", "1893496", "167.17.47.69:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:43:46", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-09-02 19:44:33", "1893495", "164.132.104.177:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 08:43:45", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-02 19:44:24", "1893494", "157.20.182.22:1996", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:40", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-02 19:44:17", "1893493", "153.52.177.141:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 08:43:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-02 19:44:14", "1893492", "15.235.97.50:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 08:43:32", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-02 19:44:04", "1893491", "135.84.210.197:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-02 19:43:32", "1893490", "104.143.46.142:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-02 19:43:25", "1893489", "103.237.92.116:8338", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:07", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-02 19:43:17", "1893488", "102.220.160.198:2025", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 18:43:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-02 19:43:14", "1893487", "102.117.166.237:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 08:43:03", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-02 15:23:44", "1893215", "45.11.230.111:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:09", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-09-02 15:23:44", "1893216", "178.16.55.134:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 08:43:53", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-09-02 13:05:09", "1893185", "2.59.218.73:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:19", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-02 13:05:07", "1893184", "194.32.149.129:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:13", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-02 13:05:06", "1893183", "23.148.212.176:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:11", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-02 11:48:22", "1893170", "180.76.250.42:1996", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-02 09:47:09", "1893153", "91.92.47.214:6666", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 18:45:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-02 09:47:09", "1893154", "93.114.183.130:8711", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 18:45:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-02 09:46:57", "1893152", "85.120.216.8:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 18:45:48", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-02 09:46:41", "1893151", "56.69.248.141:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:26", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-02 09:46:40", "1893150", "56.69.232.66:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-02 09:46:36", "1893149", "5.21.239.104:1723", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 18:45:30", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-02 09:46:24", "1893148", "45.158.116.86:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-02 18:45:20", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-02 09:46:21", "1893147", "45.139.104.204:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-02 09:46:17", "1893146", "43.133.164.200:9090", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:07", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-02 09:44:39", "1893145", "189.141.23.165:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-02 18:44:10", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-02 09:44:28", "1893144", "185.212.128.168:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:57", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-02 09:44:01", "1893143", "162.35.161.206:2850", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-02 18:43:48", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-02 09:43:56", "1893142", "158.69.213.104:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:41", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-02 09:43:47", "1893141", "153.75.235.15:2850", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:34", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-09-02 09:43:27", "1893140", "122.51.212.92:39903", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-10-02 08:43:18", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-09-02 09:43:07", "1893139", "103.237.92.116:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 18:43:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-02 08:18:14", "1893032", "208.64.33.69:2088", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:22:27", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-02 07:10:50", "1893019", "45.139.104.204:55009", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:10", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-09-02 07:10:50", "1893020", "172.94.14.210:56013", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 18:43:54", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-09-02 06:05:06", "1892955", "158.158.18.61:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:40", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-02 05:49:54", "1892874", "54.37.128.55:5000", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 09:04:43", "100", "False", "None", "5000,c2,Remcos", "0", "Bitsight"
"2026-09-01 21:05:08", "1892681", "102.220.160.198:2027", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:04", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-01 21:05:06", "1892680", "2.91.182.143:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:19", "100", "True", "None", "havoc", "1", "anonymous"
"2026-09-01 20:05:07", "1892666", "195.177.94.101:995", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:14", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-01 19:46:44", "1892661", "94.250.178.40:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-02 08:45:47", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-09-01 19:46:40", "1892659", "91.92.47.203:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 08:45:43", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-01 19:46:40", "1892660", "91.92.47.214:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 08:45:43", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-01 19:46:27", "1892658", "80.190.77.86:1001", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-01 18:45:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 19:46:26", "1892657", "77.83.39.141:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-01 19:46:20", "1892655", "64.225.112.113:65000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-02 08:45:26", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-01 19:46:20", "1892656", "64.227.59.213:65000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-02 08:45:26", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-01 19:46:10", "1892654", "46.246.12.27:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:20", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 19:45:46", "1892653", "31.76.125.10:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-01 19:44:54", "1892651", "207.56.7.37:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-02 08:44:22", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 19:44:54", "1892652", "207.56.7.53:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-02 08:44:22", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 19:44:41", "1892648", "196.251.121.124:2008", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-01 19:44:41", "1892649", "196.64.147.116:5000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 08:44:16", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 19:44:41", "1892650", "196.64.147.116:5001", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 08:44:16", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 19:44:40", "1892646", "195.20.115.166:52202", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 08:44:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 19:44:40", "1892647", "195.20.115.166:52203", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 08:44:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 19:44:38", "1892644", "195.177.94.101:88", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 19:44:38", "1892645", "195.177.94.188:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 08:44:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-01 19:44:37", "1892643", "194.9.6.35:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-01 19:44:32", "1892641", "192.253.226.78:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-01 19:44:32", "1892642", "192.253.226.78:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-01 19:43:49", "1892640", "158.62.198.77:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:41", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-09-01 19:43:37", "1892639", "144.31.6.6:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-01 19:43:36", "1892638", "144.31.6.0:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 08:43:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-01 19:43:19", "1892637", "108.59.244.106:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 08:43:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-01 19:43:04", "1892636", "102.220.160.198:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-01 18:43:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 19:05:04", "1892622", "114.66.27.110:8088", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:00", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-01 14:05:07", "1892548", "64.177.41.198:8888", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 08:45:25", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-01 14:05:07", "1892549", "89.147.111.64:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 08:45:36", "100", "True", "None", "mythic", "1", "anonymous"
"2026-09-01 14:05:06", "1892547", "102.220.160.198:5444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:04", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-01 13:38:46", "1892499", "68.178.202.150:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:31", "100", "False", "", "None", "0", "orlof_v"
"2026-09-01 13:05:07", "1892527", "23.148.212.176:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:11", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-01 11:47:47", "1892469", "107.174.14.102:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-01 11:47:47", "1892470", "107.174.14.102:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-02 16:46:27", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-09-01 10:05:08", "1892439", "195.177.94.101:110", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:14", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-01 09:47:48", "1892429", "88.119.169.216:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-01 18:45:48", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-01 09:47:48", "1892430", "88.119.169.216:9090", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-01 18:45:48", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-09-01 09:47:35", "1892427", "69.167.41.16:7000", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-01 18:45:38", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 09:47:29", "1892426", "64.177.41.198:6666", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-01 18:45:34", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 09:46:29", "1892425", "217.217.97.164:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-01 18:44:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 09:46:28", "1892424", "217.217.97.164:53", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-01 18:44:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 09:45:42", "1892422", "207.56.7.37:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-02 18:44:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 09:45:42", "1892423", "207.56.7.53:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-02 18:44:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 09:45:07", "1892421", "194.58.47.81:5025", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:44:13", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 09:43:47", "1892420", "144.31.6.0:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-09-01 09:43:35", "1892419", "128.90.135.59:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-01 18:43:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 09:43:25", "1892418", "109.172.89.209:40016", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-10-03 11:43:15", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-09-01 09:43:19", "1892416", "105.158.184.163:5000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-01 18:43:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 09:43:19", "1892417", "105.158.184.163:5001", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-01 18:43:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 09:43:13", "1892415", "104.207.93.167:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-09-01 09:43:05", "1892414", "102.220.160.198:5333", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-09-01 07:22:54", "1892358", "104.254.90.162:28471", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:11", "50", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-09-01 06:05:10", "1892311", "195.177.94.101:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 08:44:14", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-01 06:05:08", "1892310", "102.220.160.198:5222", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:04", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-09-01 04:05:06", "1892262", "62.72.42.58:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-02 16:46:47", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 23:46:43", "1892057", "1.94.65.9:2147", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-02 08:45:54", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-31 20:05:07", "1891998", "195.177.94.101:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:14", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-31 19:46:32", "1891991", "5.175.182.184:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:22", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-31 19:46:18", "1891989", "45.142.31.82:52125", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:11", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-31 19:44:53", "1891987", "199.231.191.3:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 08:44:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-31 19:44:47", "1891986", "195.177.94.101:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-31 19:43:37", "1891983", "136.0.213.135:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 08:43:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-31 19:43:37", "1891984", "136.0.213.135:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 08:43:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-31 19:43:13", "1891981", "104.143.46.142:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-31 19:43:12", "1891980", "104.143.46.142:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-31 19:43:05", "1891979", "102.220.160.198:7001", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-31 13:05:08", "1891867", "175.43.223.199:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:52", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-31 13:05:05", "1891865", "129.204.11.247:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 07:57:34", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 11:05:05", "1891837", "106.55.25.253:8090", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-01 16:46:20", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 09:45:32", "1891821", "192.99.70.186:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:09", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-31 09:43:42", "1891818", "129.80.106.68:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:20", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-30 23:46:41", "1891605", "101.42.136.73:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-30 23:46:41", "1891606", "101.42.136.73:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-30 23:05:06", "1891594", "150.158.102.111:85", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:04", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 21:05:05", "1891570", "104.168.102.116:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:58", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 20:05:06", "1891556", "109.236.50.145:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:59", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 20:05:05", "1891554", "109.236.50.145:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:59", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 19:45:59", "1891543", "45.225.135.156:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:44:37", "1891539", "195.177.94.188:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 18:44:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:44:37", "1891540", "195.177.94.188:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 18:44:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:44:35", "1891538", "194.59.30.96:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 11:44:13", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-30 19:44:14", "1891537", "185.112.59.115:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:56", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:43:51", "1891534", "160.119.69.30:5555", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:42", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-30 19:43:37", "1891531", "144.31.6.6:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:43:36", "1891529", "144.31.106.168:443", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-10-03 11:43:28", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-30 19:43:36", "1891530", "144.31.106.168:80", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-10-03 11:43:28", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-30 09:47:12", "1891408", "80.190.77.86:2414", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:35", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-30 09:46:48", "1891406", "46.151.182.98:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 11:45:20", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-30 09:46:20", "1891403", "31.57.38.7:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:56", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 09:46:06", "1891402", "217.60.195.109:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 09:44:54", "1891400", "194.59.30.96:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 11:44:13", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-30 09:44:14", "1891399", "172.174.128.128:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:48", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-30 06:05:05", "1891340", "188.212.158.203:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:05", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-29 23:47:01", "1891222", "47.86.9.253:10982", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:16", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-29 19:46:25", "1891170", "45.192.169.254:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 08:45:08", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 19:46:14", "1891167", "38.180.250.214:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:45:04", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-29 19:46:03", "1891164", "3.113.147.16:21672", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:53", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 19:44:48", "1891160", "194.9.6.35:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-29 19:44:48", "1891161", "194.9.6.35:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-29 19:43:33", "1891158", "132.226.72.227:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:22", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-29 19:43:02", "1891153", "1.69.201.249:9003", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:01", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-29 19:05:06", "1891143", "159.198.75.180:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:42", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-29 11:48:21", "1891033", "162.251.92.64:448", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-29 09:46:52", "1891003", "80.190.77.86:10700", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:35", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 09:46:28", "1891001", "45.61.177.135:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:17", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-29 09:46:20", "1890999", "45.125.67.196:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:09", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-29 09:46:20", "1891000", "45.125.67.196:8888", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:09", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-29 09:45:55", "1890998", "220.154.128.196:9443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:49", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-29 09:45:09", "1890997", "204.152.217.122:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:21", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-29 09:44:10", "1890996", "172.111.198.212:56013", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-01 18:43:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-29 09:44:07", "1890995", "169.58.180.142:30300", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:47", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 09:43:10", "1890992", "103.98.18.238:3333", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-01 18:43:09", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 09:43:05", "1890991", "103.116.52.203:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:07", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-29 03:05:06", "1890912", "43.133.164.200:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:07", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-28 23:47:33", "1890864", "8.134.166.14:54451", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-01 16:46:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-28 19:46:31", "1890815", "91.92.241.38:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:44", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-28 19:46:27", "1890814", "87.58.199.75:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:45:41", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-28 19:46:24", "1890812", "84.201.20.74:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 08:45:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:46:24", "1890813", "84.201.20.74:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 08:45:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:44:10", "1890804", "183.90.187.111:10888", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 08:43:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:44:10", "1890806", "183.90.187.73:10888", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:43:40", "1890800", "154.201.82.108:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:43:39", "1890799", "154.201.82.105:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:35", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:05:10", "1890785", "20.119.73.195:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:19", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-28 14:05:05", "1890615", "34.24.127.255:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-02 08:44:58", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-28 11:47:52", "1890556", "162.251.92.64:18888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-28 09:46:55", "1889873", "52.221.246.243:8443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-01 18:45:31", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-08-28 09:45:18", "1889871", "203.159.90.177:55006", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 18:44:26", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 09:45:14", "1889870", "20.115.227.161:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:19", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-28 09:43:52", "1889859", "154.37.213.27:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:37", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-27 19:44:53", "1889501", "192.229.115.243:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:44:38", "1889497", "185.212.128.90:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-27 19:44:38", "1889498", "185.212.128.96:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-27 19:44:17", "1889495", "172.111.198.212:3001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 08:43:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:44:07", "1889494", "159.195.242.22:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:41", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-27 19:43:54", "1889492", "154.201.82.108:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:43:53", "1889491", "154.201.82.106:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:35", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:43:39", "1889487", "134.122.187.68:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:43:39", "1889488", "134.122.187.68:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:43:39", "1889489", "134.122.187.68:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 14:54:26", "1889307", "109.248.151.101:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 07:54:43", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-08-27 11:48:55", "1889245", "8.162.1.240:10087", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 10:45:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 11:48:51", "1889244", "47.79.21.106:45678", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:16", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 11:48:44", "1889243", "39.97.57.155:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:13", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 11:48:21", "1889239", "106.15.10.2:11111", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 11:48:21", "1889240", "106.15.10.2:6789", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 10:05:10", "1889205", "185.34.147.32:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:01", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-27 10:05:10", "1889206", "45.61.170.105:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:17", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-27 09:47:08", "1889181", "62.238.110.216:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-02 18:45:35", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-27 09:47:06", "1889180", "56.69.251.23:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:26", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 09:46:14", "1889178", "217.60.195.139:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 09:46:13", "1889177", "217.217.97.164:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:44", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-27 09:45:24", "1889174", "203.202.232.132:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 08:44:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 09:45:16", "1889172", "2.27.203.59:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 11:44:17", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-27 09:45:14", "1889171", "199.245.176.147:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:17", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-27 09:45:10", "1889170", "198.23.177.210:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 08:44:15", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-27 09:43:53", "1889165", "155.117.183.31:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-02 08:43:37", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-27 09:43:50", "1889163", "154.201.82.105:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:35", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 09:43:50", "1889164", "154.201.82.106:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 08:50:41", "1889127", "217.60.195.34:18622", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 10:25:41", "75", "False", "https://bazaar.abuse.ch/sample/1be4ef70585595235b1f6b4890552228382101ba41226661aa6a86585e5fc458/", "remcos", "0", "abuse_ch"
"2026-08-27 08:38:09", "1889095", "198.23.177.206:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 08:44:15", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-27 08:38:09", "1889096", "198.23.177.206:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-02 08:44:16", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-27 08:38:09", "1889097", "46.151.182.98:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 11:45:20", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-27 08:38:09", "1889098", "196.251.121.137:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 11:44:16", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-27 07:27:24", "1889025", "137.220.151.95:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:03", "100", "False", "None", "CobaltStrike,cs-watermark-666666", "0", "abuse_ch"
"2026-08-27 07:21:34", "1888903", "154.94.224.35:2096", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:05", "50", "False", "None", "141159,c2,censys,cobalt strike", "0", "sojubear"
"2026-08-27 07:21:33", "1888905", "154.94.224.35:2087", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 10:45:46", "50", "False", "None", "141159,c2,censys,cobalt strike", "0", "sojubear"
"2026-08-26 22:01:47", "1888807", "209.99.186.142:55009", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-01 18:44:31", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-26 21:44:55", "1888601", "202.155.9.186:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:39", "1888598", "193.233.126.164:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:38", "1888597", "193.233.126.164:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:36", "1888593", "192.229.115.246:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:36", "1888594", "192.229.115.246:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:36", "1888595", "192.229.115.254:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:36", "1888596", "192.229.115.254:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:35", "1888592", "192.229.115.243:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 20:53:46", "1888544", "155.117.183.31:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 11:43:38", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-26 20:05:06", "1888486", "137.220.151.95:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:03", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-26 19:46:20", "1888477", "49.232.135.25:8080", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:21", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-26 19:46:05", "1888474", "45.131.182.88:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-01 18:45:16", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 19:44:42", "1888473", "199.245.176.147:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:17", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 19:44:32", "1888472", "193.111.117.26:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-26 19:44:28", "1888470", "188.23.175.25:8000", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:44:05", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-08-26 19:44:27", "1888469", "187.145.56.252:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-01 18:44:09", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-26 19:05:08", "1888459", "8.163.98.217:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:18", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-26 14:05:05", "1888255", "137.220.151.95:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:02", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-26 12:08:12", "1888188", "93.152.221.227:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-01 18:45:53", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-26 12:05:07", "1888176", "34.45.74.63:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:59", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-26 12:03:30", "1888159", "107.175.88.79:30305", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:13", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-08-26 09:46:43", "1888108", "64.89.160.77:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 11:45:28", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-26 09:46:34", "1888107", "49.235.130.208:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:21", "75", "False", "None", "drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 09:46:11", "1888104", "38.147.188.28:9001", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:45:03", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-08-26 09:44:43", "1888101", "193.233.220.65:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:11", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-26 09:44:41", "1888100", "192.255.195.141:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-02 08:44:09", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-26 09:44:09", "1888096", "172.245.209.209:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 08:43:48", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-26 09:43:18", "1888092", "107.173.47.158:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 18:43:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 09:43:10", "1888090", "104.105.15.96:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:09", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-26 09:43:04", "1888089", "101.99.92.134:4788", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 09:23:04", "1888082", "199.245.176.147:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:17", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-08-26 08:00:43", "1888054", "207.180.29.85:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-02 08:56:50", "75", "False", "https://bazaar.abuse.ch/sample/6b5ded751fcf17c56d5f8f9701397cc1e1f675437cd22dcd83f21c8f7a2ff107/", "remcos", "0", "abuse_ch"
"2026-08-26 07:05:10", "1888008", "193.160.32.138:8088", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 07:57:40", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-26 05:46:26", "1887900", "13.231.27.0:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-10-03 11:43:21", "50", "False", "None", "16509,brute ratel,c2,censys", "0", "sojubear"
"2026-08-26 03:05:07", "1887929", "176.65.144.177:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:52", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-25 19:46:42", "1887619", "38.54.88.188:65533", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:06", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-25 19:45:14", "1887616", "213.35.118.205:4322", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:25", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-25 19:44:08", "1887614", "172.245.209.209:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-02 18:43:52", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-25 19:44:07", "1887613", "172.237.88.168:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-25 17:15:08", "1887525", "217.60.195.89:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:48", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 17:15:08", "1887526", "193.233.126.164:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:10", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 17:15:08", "1887527", "192.229.115.243:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:08", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 17:15:08", "1887528", "192.229.115.243:56004", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:08", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 17:13:00", "1887519", "107.173.47.158:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 18:43:14", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-08-25 17:13:00", "1887520", "107.173.47.158:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 18:43:14", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-08-25 15:16:32", "1887235", "38.147.185.54:10443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:12", "75", "False", "", "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon", "0", "whoamix302"
"2026-08-25 15:00:43", "1887208", "192.229.115.254:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:08", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 15:00:42", "1887209", "192.229.115.254:56004", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:08", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 15:00:42", "1887210", "192.229.115.246:56004", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:08", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 15:00:41", "1887211", "192.229.115.246:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:08", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 14:16:38", "1887142", "185.254.99.169:443", "ip:port", "botnet_cc", "win.overlord", "None", "Overlord RAT", "2026-10-03 11:44:00", "75", "False", "https://x.com/solostalking/status/2092239178801242415", "Overlord,RAT", "0", "abuse_ch"
"2026-08-25 13:05:06", "1887000", "2.27.202.130:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:17", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-25 12:36:04", "1886966", "157.22.240.126:7193", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 05:59:12", "75", "False", "", "potassium", "0", "abuse_ch"
"2026-08-25 12:36:04", "1886967", "157.22.240.126:15987", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-02 13:50:14", "75", "False", "", "potassium", "0", "abuse_ch"
"2026-08-25 12:36:04", "1886969", "157.22.240.126:23789", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-02 22:53:49", "75", "False", "", "potassium", "0", "abuse_ch"
"2026-08-25 12:36:04", "1886970", "157.22.240.126:27651", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-01 12:17:52", "75", "False", "", "potassium", "0", "abuse_ch"
"2026-08-25 12:36:04", "1886973", "157.22.240.126:42061", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-01 18:49:02", "75", "False", "", "potassium", "0", "abuse_ch"
"2026-08-25 12:24:37", "1886950", "93.152.207.101:7193", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-01 18:07:26", "75", "False", "", "potassium", "0", "abuse_ch"
"2026-08-25 12:24:37", "1886951", "93.152.207.101:15987", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-02 02:02:58", "75", "False", "", "potassium", "0", "abuse_ch"
"2026-08-25 12:20:11", "1886908", "77.83.246.5:27651", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-02 07:07:28", "75", "False", "", "potassium", "0", "abuse_ch"
"2026-08-25 12:20:11", "1886909", "77.83.246.5:32876", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-01 18:49:03", "75", "False", "", "potassium", "0", "abuse_ch"
"2026-08-25 12:20:10", "1886904", "77.83.246.5:7193", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 00:49:35", "75", "False", "", "potassium", "0", "abuse_ch"
"2026-08-25 12:20:10", "1886905", "77.83.246.5:15987", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-02 15:37:49", "75", "False", "", "potassium", "0", "abuse_ch"
"2026-08-25 12:20:10", "1886907", "77.83.246.5:23789", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 10:05:19", "75", "False", "", "potassium", "0", "abuse_ch"
"2026-08-25 08:52:09", "1886718", "121.4.38.18:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:02", "100", "False", "None", "CobaltStrike,cs-watermark-1234567890", "0", "abuse_ch"
"2026-08-24 17:37:46", "1886341", "154.201.82.108:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:36", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-24 17:37:46", "1886342", "154.201.82.105:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:35", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-24 13:05:05", "1886132", "45.131.182.88:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 08:45:08", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-24 11:47:51", "1886106", "209.200.246.194:24563", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-01 16:46:31", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-24 05:05:06", "1885899", "43.140.219.182:4321", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:07", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-23 23:46:54", "1885678", "209.200.246.194:32126", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-01 16:46:31", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-23 19:44:33", "1885593", "194.9.6.125:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-23 19:43:41", "1885592", "154.201.82.106:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-23 13:05:05", "1885381", "182.255.91.104:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:08", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-23 11:05:04", "1885206", "154.198.49.31:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:35", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-23 09:05:05", "1885180", "89.144.53.144:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:42", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-22 19:46:00", "1884712", "35.73.165.146:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-10-03 08:44:56", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-08-22 09:47:02", "1884305", "93.152.223.39:28447", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:47", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-22 09:46:13", "1884302", "45.131.182.88:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 08:45:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-22 09:44:35", "1884300", "185.42.163.55:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-10-03 08:44:03", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-22 09:43:35", "1884299", "137.184.139.185:443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-10-03 11:43:24", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-08-21 19:46:05", "1883963", "31.57.184.154:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:56", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-21 19:44:39", "1883961", "185.34.147.35:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 08:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 19:44:37", "1883959", "185.34.147.33:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 08:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 19:44:35", "1883958", "185.34.147.31:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 08:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 13:05:05", "1883799", "20.74.145.114:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:20", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-21 11:47:46", "1883785", "156.225.18.45:33333", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:06", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-21 09:47:15", "1883724", "80.190.77.86:7007", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:35", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 09:44:42", "1883717", "185.34.147.35:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 09:44:41", "1883716", "185.34.147.34:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 09:44:40", "1883715", "185.34.147.33:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 09:44:34", "1883714", "185.212.129.143:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-21 09:44:04", "1883709", "162.35.105.100:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:45", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-21 09:43:27", "1883706", "121.127.253.146:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-21 08:48:14", "1883656", "172.111.198.212:56011", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 18:43:51", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-21 06:05:09", "1883546", "31.70.81.171:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:57", "50", "False", "None", "8560,asyncrat,c2,censys", "0", "sojubear"
"2026-08-20 19:46:12", "1883456", "5.230.201.54:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:22", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-20 19:46:12", "1883457", "5.230.201.54:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-20 16:47:18", "1883208", "91.124.98.25:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 11:45:43", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:47:18", "1883209", "91.124.98.25:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 11:45:43", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:45:27", "1883205", "213.152.186.188:32635", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-01 18:44:32", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 14:10:36", "1883153", "143.246.216.114:38990", "ip:port", "botnet_cc", "elf.pink", "None", "Pink", "2026-10-03 11:58:32", "100", "False", "None", "Pink", "0", "Bitsight"
"2026-08-20 14:05:06", "1883148", "80.190.77.86:2222", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:35", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-20 12:05:05", "1883107", "80.190.77.86:2000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:35", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-20 11:47:46", "1883105", "185.92.190.174:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-20 10:05:07", "1883096", "80.190.77.86:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:35", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-20 09:46:39", "1883088", "80.190.77.86:1000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 08:45:28", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-20 09:46:39", "1883089", "80.190.77.86:8008", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:35", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-20 09:46:04", "1883087", "4.193.136.143:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:06", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-20 09:05:06", "1883050", "43.134.42.247:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:07", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-20 08:05:08", "1883010", "4.193.136.143:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:06", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-20 05:44:41", "1882919", "185.130.45.240:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:56", "50", "False", "https://www.shodan.io/host/185.130.45.240#80", "c2,havoc,shodan", "0", "juroots"
"2026-08-20 05:41:15", "1882912", "1.14.104.208:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:01", "50", "False", "https://www.shodan.io/host/1.14.104.208#4321", "adaptixc2,c2,shodan", "0", "juroots"
"2026-08-19 19:46:59", "1882677", "95.133.166.10:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:49", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-19 19:46:01", "1882675", "38.247.165.127:8015", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:45:55", "1882674", "34.186.150.169:6932", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:58", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:45:50", "1882673", "27.124.36.136:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-19 19:44:57", "1882672", "209.99.188.193:43222", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:23", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-19 19:44:30", "1882668", "185.34.147.34:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:44:28", "1882665", "185.34.147.31:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:43:59", "1882661", "164.90.205.13:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:45", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-19 19:43:48", "1882660", "155.2.192.251:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:38", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-19 19:43:24", "1882658", "118.107.5.200:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-19 19:43:12", "1882655", "104.243.248.63:301", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:43:08", "1882654", "103.43.11.40:4443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-19 15:05:06", "1882376", "134.209.112.52:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:23", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-19 10:05:07", "1881965", "185.34.147.35:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:03", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-19 10:05:06", "1881964", "185.34.147.33:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:02", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-19 09:46:53", "1881948", "94.20.141.82:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-19 09:44:24", "1881929", "185.212.129.129:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-19 07:13:58", "1881771", "38.247.165.127:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:05", "50", "False", "https://www.shodan.io/host/38.247.165.127#443", "asyncrat,c2,shodan", "0", "juroots"
"2026-08-19 07:11:04", "1881764", "192.169.176.54:449", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:07", "50", "False", "https://www.shodan.io/host/192.169.176.54#449", "c2,havoc,shodan", "0", "juroots"
"2026-08-19 07:09:22", "1881751", "192.169.176.54:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:44:07", "50", "False", "https://www.shodan.io/host/192.169.176.54#31337", "c2,shodan,sliver", "0", "juroots"
"2026-08-19 06:06:10", "1881362", "46.151.182.30:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 11:45:19", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:09", "1881363", "46.151.182.30:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 11:45:19", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:07", "1881369", "84.38.129.111:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-10-03 11:45:40", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-18 12:03:39", "1880756", "149.202.227.107:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:31", "50", "False", "https://www.shodan.io/host/149.202.227.107#4321", "adaptixc2,c2,shodan", "0", "juroots"
"2026-08-18 12:01:44", "1880702", "68.178.205.17:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:31", "50", "False", "https://www.shodan.io/host/68.178.205.17#31337", "c2,shodan,sliver", "0", "juroots"
"2026-08-18 11:48:07", "1880291", "23.148.212.123:2053", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-18 09:47:49", "1880248", "95.216.220.204:8000", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-10-03 11:45:50", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-18 09:47:23", "1880246", "68.178.202.150:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:31", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-18 09:47:23", "1880247", "68.178.205.17:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:31", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-18 09:46:30", "1880242", "31.56.209.245:5088", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-10-03 11:44:55", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-18 09:44:53", "1880236", "192.169.176.54:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:07", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-18 09:44:48", "1880234", "186.169.88.130:5011", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-18 09:44:40", "1880231", "185.212.128.51:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-18 09:44:38", "1880230", "185.193.127.4:13370", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:57", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-18 09:44:30", "1880229", "178.211.155.154:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 07:05:10", "1878822", "38.76.183.197:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:12", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-17 19:46:42", "1878625", "83.229.120.106:45231", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 08:45:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-17 19:45:42", "1878619", "217.60.195.226:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 19:44:12", "1878611", "172.98.22.177:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 19:44:00", "1878610", "164.160.187.69:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:45", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-17 19:43:56", "1878609", "159.223.145.166:443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-10-03 11:43:42", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-08-17 19:43:23", "1878598", "118.107.5.200:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 19:43:23", "1878599", "118.107.5.200:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 09:47:53", "1877751", "95.133.229.173:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 09:47:39", "1877749", "86.48.16.94:3200", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-17 09:47:35", "1877748", "83.136.211.230:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:38", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 09:46:26", "1877744", "217.60.195.226:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 09:45:13", "1877742", "193.32.162.108:4432", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:12", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-17 09:44:35", "1877740", "178.128.14.67:4443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:53", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-17 09:44:22", "1877739", "169.58.180.142:30400", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:47", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-17 09:43:20", "1877737", "107.173.160.185:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-17 06:05:05", "1877664", "34.150.91.139:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:58", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-17 05:37:58", "1877545", "103.217.186.180:55554", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:58", "50", "False", "None", "c2,censys,cobalt strike", "0", "sojubear"
"2026-08-16 23:47:35", "1877531", "23.148.212.86:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-16 23:47:26", "1877530", "154.91.85.44:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 10:45:46", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-16 19:46:47", "1877335", "94.26.0.7:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:45:49", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-16 19:46:27", "1877332", "68.183.248.32:4443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:31", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-16 19:46:17", "1877331", "51.79.169.74:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-16 19:44:15", "1877325", "178.172.173.84:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:53", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-16 19:44:09", "1877324", "172.94.18.103:77", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-16 19:43:41", "1877322", "148.163.101.169:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:31", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-16 13:04:44", "1876883", "217.60.195.110:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:45", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-16 13:04:43", "1876882", "217.60.195.110:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:45", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-16 13:03:28", "1877041", "172.98.22.177:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:51", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-16 09:45:25", "1877056", "217.60.195.110:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-16 09:43:30", "1877052", "135.136.147.86:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:46:52", "1876823", "91.236.230.143:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:44", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-15 19:46:12", "1876814", "45.154.98.207:80", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:12", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-15 19:45:43", "1876809", "217.60.195.40:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:45:43", "1876810", "217.60.195.40:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:45:42", "1876808", "217.60.195.197:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:44:33", "1876805", "185.34.147.35:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 19:44:32", "1876803", "185.34.147.33:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 19:44:32", "1876804", "185.34.147.34:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 19:44:31", "1876802", "185.34.147.32:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 19:44:30", "1876801", "185.34.147.31:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 09:46:30", "1876320", "91.92.243.114:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 09:45:51", "1876316", "45.154.98.207:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:12", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-15 09:44:31", "1876313", "194.182.87.116:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:12", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-15 09:43:45", "1876309", "155.94.150.221:6745", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:38", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 09:43:37", "1876307", "144.124.234.128:49999", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:27", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-15 09:43:20", "1876305", "111.228.13.59:18443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:16", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-15 09:05:05", "1876285", "93.95.227.51:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:47", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-14 19:46:43", "1876084", "94.143.231.61:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 08:45:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-14 19:46:41", "1876083", "91.92.43.103:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:45:46", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-14 19:46:22", "1876081", "64.89.161.196:4444", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:29", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-14 19:44:53", "1876076", "212.103.26.10:55000", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:24", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-14 19:44:41", "1876072", "2.27.248.16:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:18", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-14 09:44:42", "1874672", "207.56.26.118:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-14 09:43:07", "1874667", "103.51.145.75:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:08", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-14 06:05:07", "1874208", "20.187.120.42:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:09", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-13 23:46:59", "1873917", "185.92.190.175:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-13 19:45:43", "1873841", "217.60.195.226:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 11:05:07", "1873610", "119.29.122.42:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:01", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-13 09:46:22", "1873571", "38.240.57.198:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 09:45:09", "1873568", "203.161.55.41:7691", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:21", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-13 09:45:08", "1873567", "202.73.4.82:44321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:21", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-13 09:44:40", "1873561", "185.34.147.34:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 09:44:40", "1873562", "185.34.147.35:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 08:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 09:44:39", "1873559", "185.34.147.31:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 09:44:39", "1873560", "185.34.147.32:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 09:43:10", "1873553", "103.54.153.49:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 06:05:05", "1873444", "198.199.86.166:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:16", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-12 23:46:54", "1873335", "120.55.93.58:10092", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-12 19:46:45", "1873272", "89.110.91.35:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:42", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-12 19:45:40", "1873254", "23.148.228.253:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:50", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-12 09:44:15", "1872703", "172.245.23.153:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 09:43:32", "1872696", "13.236.153.60:443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-10-03 11:43:21", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-08-12 09:43:19", "1872692", "107.172.72.178:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:43:13", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-12 09:43:19", "1872693", "107.172.72.178:54398", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:43:13", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-12 09:43:05", "1872689", "103.140.154.7:32333", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:07", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-12 00:05:05", "1872489", "89.127.233.194:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:42", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-11 23:47:15", "1872484", "159.75.123.199:1111", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:06", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-11 19:46:42", "1872428", "91.92.243.36:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 19:43:44", "1872411", "154.40.62.125:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:43:37", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-08-11 11:48:37", "1872210", "47.94.224.229:1111", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:16", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-11 09:46:08", "1872157", "23.94.252.16:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:52", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-10 20:05:05", "1871881", "192.252.185.78:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:09", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 19:46:16", "1871875", "5.133.102.33:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-02 18:45:29", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-10 19:45:31", "1871869", "216.250.254.245:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-10 19:31:02", "1871806", "38.97.63.243:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-10-02 20:21:09", "100", "False", "None", "loader,Vo1d", "0", "Bitsight"
"2026-08-10 19:05:07", "1871851", "192.252.179.24:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:09", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 14:24:09", "1871717", "38.97.63.242:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-10-03 10:30:17", "100", "False", "None", "loader,Vo1d", "0", "Bitsight"
"2026-08-10 09:46:58", "1871626", "98.191.191.44:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:45:51", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-08-09 19:45:52", "1871392", "49.235.153.53:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:21", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-09 19:45:38", "1871390", "45.140.204.12:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:45:11", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-08-09 19:45:38", "1871391", "45.140.204.12:9000", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:45:11", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-08-09 19:45:16", "1871389", "217.60.77.60:4782", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:46:39", "1871284", "69.164.245.180:4000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:32", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-09 09:43:33", "1871267", "139.162.113.221:64321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:25", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-09 09:43:29", "1871263", "134.122.132.3:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:23", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 19:43:01", "1871110", "1.92.135.168:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:01", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 18:05:07", "1871093", "37.72.168.212:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:01", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-08 11:47:11", "1870752", "185.92.190.177:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 10:45:49", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-08 09:46:32", "1870713", "88.129.145.223:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:45:41", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-08-08 09:46:21", "1870712", "68.178.202.150:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:31", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-08 09:45:58", "1870710", "45.56.165.197:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 09:45:54", "1870709", "45.157.117.186:27487", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 09:44:30", "1870701", "195.242.119.86:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:16", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-08 09:43:26", "1870697", "134.122.132.35:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:23", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 07:05:05", "1870641", "192.169.176.54:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:07", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-08 04:05:05", "1870610", "68.178.205.17:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:31", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-07 19:45:42", "1870252", "43.135.34.69:43911", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:07", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-07 19:44:13", "1870246", "185.212.128.59:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-07 19:05:06", "1870231", "43.138.116.60:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:13", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-07 13:05:06", "1869851", "43.138.116.60:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:13", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-07 09:44:18", "1869772", "185.212.128.170:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:57", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-07 09:43:42", "1869770", "154.40.62.125:9001", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:43:37", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-08-07 09:43:06", "1869767", "103.249.116.184:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:43:38", "1869550", "154.37.154.36:1443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:37", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 13:05:05", "1869415", "154.221.25.38:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:05", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-06 11:47:16", "1869382", "185.92.190.176:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-06 11:47:15", "1869381", "185.92.190.173:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-06 09:43:25", "1869323", "134.122.132.28:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-06 07:24:00", "1869284", "154.221.25.38:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:05", "100", "False", "None", "CobaltStrike,cs-watermark-391144938", "0", "abuse_ch"
"2026-08-05 19:46:50", "1869054", "72.14.136.55:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 19:46:26", "1869051", "45.59.120.82:5656", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:17", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:44:31", "1869046", "185.212.129.31:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 19:44:30", "1869044", "185.212.129.170:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 19:44:30", "1869045", "185.212.129.25:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 08:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 19:44:28", "1869042", "185.212.128.124:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:57", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 19:43:28", "1869036", "130.12.181.96:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:21", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:05:05", "1869029", "134.209.146.147:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:23", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-05 11:47:40", "1868828", "47.83.3.103:10443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:16", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 11:47:30", "1868826", "209.200.246.194:16556", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 09:46:52", "1868757", "65.1.70.222:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 09:46:51", "1868756", "64.227.159.29:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:28", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-05 09:46:50", "1868755", "64.20.61.215:5000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:28", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 09:46:29", "1868753", "45.38.20.38:8491", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:46:19", "1868752", "43.135.26.173:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 09:44:34", "1868744", "186.244.227.52:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:04", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:44:33", "1868740", "186.169.88.130:5012", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:44:33", "1868741", "186.169.88.130:9140", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:44:33", "1868742", "186.244.227.104:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:04", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:44:33", "1868743", "186.244.227.27:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:04", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:44:29", "1868736", "185.212.129.70:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 09:44:29", "1868737", "185.212.129.89:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:59", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 09:44:12", "1868734", "172.81.132.75:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 09:44:00", "1868732", "160.20.109.52:32333", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:43", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 06:37:44", "1868587", "43.163.88.35:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 10:45:54", "50", "False", "None", "132203,c2,censys,cobalt strike", "0", "sojubear"
"2026-08-05 06:05:05", "1868636", "43.108.51.124:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:13", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-04 23:47:37", "1868569", "210.56.48.227:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 10:45:51", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-04 23:47:37", "1868570", "222.255.215.42:30005", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-04 19:46:26", "1868504", "80.96.109.107:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:45:42", "1868501", "31.76.96.193:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:58", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-04 12:55:43", "1868315", "217.60.195.193:443", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "2026-10-03 11:44:46", "75", "False", "https://bazaar.abuse.ch/sample/9df545f9a40281bf7789feb875a6f2fa3334dc6bfda329e8bc55667d5bee4b0d/", "xworm", "0", "abuse_ch"
"2026-08-04 09:45:57", "1868251", "45.139.226.224:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:11", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-04 09:45:40", "1868250", "27.124.36.136:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 09:43:11", "1868235", "104.223.98.68:2028", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 08:43:10", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-03 19:45:13", "1867957", "217.60.195.197:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-03 09:44:27", "1867781", "193.112.169.214:30727", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:10", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-02 19:45:35", "1867534", "27.124.36.153:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 19:45:28", "1867532", "217.60.77.60:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 19:45:28", "1867533", "217.60.77.60:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 11:46:58", "1867274", "106.75.249.202:6666", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-02 10:46:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-02 06:54:53", "1867040", "103.214.146.46:34567", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 01:29:56", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-01 23:46:49", "1867043", "185.92.190.177:8696", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-01 19:46:16", "1866972", "64.20.61.215:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:28", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-01 19:45:32", "1866969", "217.60.77.60:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 19:43:46", "1866967", "155.2.192.251:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:38", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 19:43:31", "1866966", "139.199.160.80:32408", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:25", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 19:43:16", "1866964", "106.53.107.131:30943", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:12", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 19:43:16", "1866965", "107.152.42.223:34321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:12", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 19:43:03", "1866960", "101.36.123.12:34321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:02", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 09:46:18", "1866620", "47.87.84.177:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:21", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-01 09:45:39", "1866615", "217.60.195.197:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:45:38", "1866614", "217.60.195.197:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 06:28:01", "1866374", "103.214.146.46:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 05:16:24", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-01 02:05:06", "1866518", "124.222.145.172:8084", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 10:45:43", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-31 23:46:44", "1866405", "185.92.190.175:8696", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 10:45:49", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 23:46:44", "1866406", "185.92.190.176:8696", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 23:46:43", "1866403", "185.92.190.173:8696", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 23:46:43", "1866404", "185.92.190.174:8696", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 19:46:12", "1866366", "93.152.223.242:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:45:47", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-31 19:45:14", "1866362", "23.227.196.18:43655", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:51", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-31 19:44:21", "1866361", "194.62.248.129:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 19:44:09", "1866359", "185.174.102.5:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 19:43:52", "1866358", "167.172.142.69:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:46", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-31 09:45:48", "1866017", "27.124.36.153:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:44:55", "1866015", "209.99.190.97:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:23", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-31 09:43:27", "1866008", "13.205.246.212:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:43:15", "1866007", "104.243.248.63:3608", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:11", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 05:45:43", "1865067", "27.71.16.98:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:11", "50", "False", "None", "7552,c2,censys,cobalt strike", "0", "sojubear"
"2026-07-31 05:45:41", "1865072", "124.220.34.180:6666", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:02", "50", "False", "None", "45090,c2,censys,cobalt strike", "0", "sojubear"
"2026-07-30 19:45:33", "1864993", "27.124.36.136:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 19:44:11", "1864983", "18.178.127.205:21672", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:54", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:44:10", "1864982", "18.139.36.190:24610", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:54", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:43:26", "1864979", "132.226.72.148:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:43:09", "1864973", "103.53.80.201:3312", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:08", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 09:46:46", "1864706", "93.152.223.221:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:45:47", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-30 09:46:18", "1864704", "50.114.184.63:444", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 09:46:17", "1864703", "50.114.184.63:442", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 09:46:11", "1864702", "46.151.182.16:2202", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 09:45:43", "1864701", "27.124.36.151:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 09:44:36", "1864698", "2.27.248.116:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:17", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-30 09:44:06", "1864696", "173.199.70.174:14321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:51", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-29 19:46:10", "1863590", "67.210.97.40:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:30", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 19:46:10", "1863591", "67.210.97.40:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:30", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 19:45:30", "1863583", "27.124.36.151:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:45:30", "1863584", "27.124.36.151:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:44:16", "1863575", "185.212.128.207:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:57", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-29 19:43:42", "1863569", "154.194.50.252:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:35", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:33", "1863567", "142.93.52.11:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:26", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-29 19:43:26", "1863566", "130.12.182.209:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:12", "1863562", "103.97.131.179:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 11:47:01", "1863378", "14.225.212.124:30005", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:03", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-29 09:46:02", "1863344", "84.201.20.74:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:39", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 09:45:54", "1863341", "67.210.97.40:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:30", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 09:45:17", "1863339", "23.94.252.80:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:53", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-29 08:59:48", "1863311", "89.213.118.63:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-02 18:45:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:27", "1863308", "5.253.86.251:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:16", "1863304", "45.192.211.63:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:00", "1863299", "27.124.36.151:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:59", "1863298", "27.124.36.136:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:02", "1863255", "193.164.5.4:9991", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:44:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:33", "1863044", "160.119.69.21:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:42", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 07:42:09", "1861776", "31.57.184.154:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 08:44:52", "50", "False", "", "PureRat", "0", "RacWatchin8872"
"2026-07-29 07:42:09", "1861777", "45.192.211.7:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:14", "50", "False", "", "PureRat", "0", "RacWatchin8872"
"2026-07-29 07:42:04", "1861788", "157.20.182.21:9992", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 18:43:43", "75", "False", "", "AsynRat,Server", "0", "RacWatchin8872"
"2026-07-29 07:32:16", "1862621", "154.12.94.16:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:04", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-07-28 19:45:34", "1861817", "31.57.184.154:2504", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:56", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 16:59:29", "1861744", "45.192.211.7:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:14", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:29", "1861745", "45.192.211.7:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:14", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861739", "45.192.211.19:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 08:45:09", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861740", "45.192.211.19:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 08:45:09", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861741", "45.192.211.19:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:13", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861742", "45.192.211.63:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:14", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861710", "108.187.4.116:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:14", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861711", "108.187.4.145:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:14", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861712", "108.187.4.145:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:14", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861713", "108.187.4.145:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:14", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:25", "1861708", "108.187.4.116:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:14", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:25", "1861709", "108.187.4.116:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:14", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 09:46:46", "1861522", "96.126.176.92:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:50", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-28 09:46:44", "1861521", "93.152.223.158:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:45:46", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-28 09:46:12", "1861520", "49.235.50.231:14486", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:45:22", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-07-28 09:46:09", "1861518", "46.151.182.76:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 09:45:42", "1861516", "23.94.252.87:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:53", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-28 09:45:41", "1861515", "23.94.252.55:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:52", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-28 09:43:54", "1861508", "157.245.228.139:65000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:40", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-26 23:45:57", "1859700", "141.255.162.234:37422", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:04", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-26 19:44:16", "1858980", "2.27.248.237:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:18", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-26 10:55:50", "1857981", "198.98.53.100:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 09:06:41", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-07-26 09:43:12", "1858179", "103.67.163.201:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-25 19:44:10", "1857719", "185.147.83.59:48321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:56", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 19:43:34", "1857718", "146.70.87.23:43225", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:30", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 19:43:29", "1857716", "141.255.164.33:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:43:26", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-25 19:43:11", "1857715", "103.67.163.201:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-25 11:02:40", "1857246", "198.98.53.100:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 00:57:22", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-07-25 09:45:30", "1857313", "31.76.96.194:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:58", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-25 09:45:30", "1857314", "31.76.96.195:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:58", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-25 09:44:42", "1857310", "207.57.123.129:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:43:20", "1857303", "119.28.212.86:44321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:43:10", "1857302", "103.67.163.201:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:45:44", "1856912", "87.251.64.204:63812", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:41", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-24 19:44:59", "1856908", "23.94.252.7:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:52", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-24 19:44:16", "1856907", "2.27.248.80:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:18", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-24 19:43:33", "1856894", "151.236.21.109:2096", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:33", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-24 09:45:54", "1856708", "23.94.145.121:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:52", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-24 09:43:55", "1856704", "157.20.182.21:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 08:43:40", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 06:20:07", "1856638", "198.98.53.100:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-02 08:28:49", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-07-23 19:46:19", "1856292", "93.152.224.94:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:45:47", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:46:18", "1856291", "93.152.223.159:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:45:46", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:44:28", "1856288", "2.27.248.75:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:18", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:44:27", "1856285", "2.27.248.232:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:18", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:44:27", "1856286", "2.27.248.236:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:18", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:44:27", "1856287", "2.27.248.72:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:18", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 09:44:27", "1855968", "2.27.248.234:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:18", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 08:05:05", "1855923", "174.138.9.149:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:52", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-22 19:45:15", "1855460", "43.228.157.252:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 19:43:42", "1855455", "157.20.182.22:1444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 08:43:40", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 19:43:25", "1855453", "137.184.163.27:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:24", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-22 19:43:21", "1855451", "12.187.175.73:8797", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:17", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 17:05:52", "1855382", "43.134.38.218:4543", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:07", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-22 09:44:24", "1855246", "20.200.61.22:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:19", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-22 09:43:25", "1855239", "132.145.210.148:8443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:22", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-21 19:46:20", "1855047", "86.48.16.94:30100", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-21 19:46:19", "1855046", "85.208.69.45:80", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-10-03 11:45:40", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-07-21 19:44:32", "1855038", "2.27.122.16:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:17", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-21 12:05:05", "1854903", "152.136.253.101:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:04", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-21 09:44:16", "1854871", "185.33.86.141:29292", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:01", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-20 19:45:02", "1854504", "220.154.3.197:9443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:49", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:44:22", "1854503", "203.83.238.164:9003", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:21", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:44:19", "1854502", "2.27.248.61:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-01 18:44:25", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-20 19:43:37", "1854498", "151.243.101.44:21343", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:33", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:43:29", "1854496", "14.22.75.6:9003", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:26", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:43:29", "1854497", "14.22.75.6:9443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:26", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:43:22", "1854495", "12.202.180.13:6745", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:17", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-20 09:45:09", "1854200", "220.154.3.197:8766", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:49", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 09:44:25", "1854198", "203.83.238.164:8766", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:21", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 09:44:25", "1854199", "203.83.238.164:9443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:21", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 09:44:09", "1854196", "185.212.131.28:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:59", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-20 09:44:07", "1854195", "185.212.128.155:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:57", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-20 09:43:51", "1854193", "169.58.12.228:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:47", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-20 09:43:11", "1854188", "103.185.249.13:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 08:43:07", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-19 19:43:26", "1853898", "14.22.75.6:8766", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:26", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-19 09:44:11", "1853717", "185.147.83.58:64213", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:56", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-18 09:46:14", "1853334", "45.55.98.175:60560", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-10-03 11:45:17", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-07-17 21:05:07", "1852912", "20.2.87.168:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:19", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-16 19:44:30", "1852641", "188.166.40.236:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:05", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-16 09:47:53", "1852491", "203.91.75.89:5005", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-16 04:05:05", "1851397", "14.29.160.181:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:03", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-15 19:46:03", "1851289", "64.23.182.12:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:28", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-15 09:46:18", "1850971", "74.0.32.137:80", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:32", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-15 07:00:55", "1850827", "160.25.72.34:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 08:41:31", "75", "False", "https://bazaar.abuse.ch/sample/15a9a83377456de32bbdb36a8ec3113bf8ca07c884a45617c9410f80990ed4b3/", "remcos", "0", "abuse_ch"
"2026-07-13 19:45:28", "1849979", "85.8.149.156:444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:40", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-13 19:44:54", "1849976", "37.235.54.142:53236", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:00", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-13 19:44:48", "1849974", "23.27.52.106:28736", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:52", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-13 19:43:57", "1849967", "185.212.131.27:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:59", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-13 07:03:02", "1849604", "103.214.146.46:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-10-03 11:48:52", "100", "False", "https://github.com/deepfield/public-research/blob/main/aisuru/README.md", "airashi,aisuru,botnet,c2,ddos,mirai", "0", "deepfield"
"2026-07-13 03:40:49", "1849540", "103.67.163.108:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:39:12", "75", "False", "https://bazaar.abuse.ch/sample/09cc1c77657400e803310dd7ba58a91854fb275e5b29adf53a6ee2827f848366/", "remcos", "0", "abuse_ch"
"2026-07-12 09:45:25", "1848944", "38.54.8.74:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:06", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-12 09:43:18", "1848936", "107.172.90.117:4322", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 19:46:05", "1848772", "82.158.229.189:18443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 19:46:05", "1848773", "82.158.229.30:18443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:37", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 19:46:04", "1848771", "82.158.229.143:18443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 19:43:03", "1848755", "1.14.234.68:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:01", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 09:46:53", "1848583", "137.220.194.15:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:03", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-11 09:46:08", "1848580", "69.10.49.136:2005", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:31", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 07:15:55", "1848517", "102.220.160.103:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 05:01:38", "75", "False", "https://bazaar.abuse.ch/sample/369478c13ad42c86ddfacd1943b4aa23d2451ff42d8bbe1a26f664f5d5748433/", "remcos", "0", "abuse_ch"
"2026-07-10 23:46:33", "1848358", "8.134.70.73:6111", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:17", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-10 11:46:34", "1847999", "101.42.255.92:2234", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-10 10:05:08", "1847977", "101.42.255.92:8081", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:58", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-10 09:46:14", "1847970", "74.0.32.137:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:32", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-10 09:43:16", "1847959", "104.250.161.126:2061", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:11", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-10 06:05:05", "1847905", "119.45.160.160:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:01", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-09 19:45:23", "1847753", "37.72.172.58:4212", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 19:44:37", "1847751", "213.209.159.91:22", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:25", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 19:44:36", "1847750", "212.46.38.117:4445", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:24", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-09 19:43:21", "1847743", "115.42.60.122:7912", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:16", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 11:47:21", "1847068", "203.91.75.89:5006", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-09 09:46:09", "1847000", "5.230.201.242:1995", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:22", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 09:45:45", "1846995", "37.72.172.58:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 09:44:00", "1846984", "176.120.22.129:443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-10-03 11:43:52", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-07-09 09:43:45", "1846977", "157.173.195.214:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:40", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-09 02:05:05", "1846849", "193.29.13.44:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:12", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-08 19:44:32", "1846736", "213.209.159.91:4556", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:25", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-08 19:43:45", "1846733", "164.68.123.50:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:45", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-07 09:46:09", "1846003", "93.152.224.44:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-02 18:45:55", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-07 09:46:08", "1846002", "91.92.33.250:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-02 08:45:42", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-06 10:58:18", "1845588", "38.46.218.34:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-10-03 11:30:20", "100", "False", "None", "loader,Vo1d", "0", "Bitsight"
"2026-07-06 09:45:29", "1845504", "222.167.211.55:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:49", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-06 09:44:36", "1845502", "203.161.57.75:8234", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:21", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-06 09:44:33", "1845499", "2.27.122.16:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:17", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-06 09:43:59", "1845497", "173.249.41.141:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:51", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-06 09:43:32", "1845493", "143.198.120.167:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:26", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-06 04:05:04", "1845343", "134.209.41.160:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:23", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-05 19:45:18", "1845294", "31.220.93.222:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:54", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-05 19:44:18", "1845293", "194.26.192.117:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:12", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-05 13:33:27", "1845011", "111.229.248.198:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:59", "100", "False", "None", "CobaltStrike,cs-watermark-1234567890", "0", "abuse_ch"
"2026-07-05 09:43:57", "1844953", "170.168.15.43:4322", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:47", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-04 19:45:47", "1844840", "92.4.65.88:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:46", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-02 11:44:21", "1843418", "220.154.3.197:9003", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:49", "75", "False", "", "Mythic,MythicC2", "0", "navneeet"
"2026-07-02 09:45:46", "1843465", "82.165.79.60:12001", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:37", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-02 09:45:46", "1843466", "82.165.79.60:12002", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:37", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-02 09:45:42", "1843463", "70.34.251.19:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:45:32", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-07-02 09:43:38", "1843455", "159.65.42.43:60560", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-10-03 11:43:42", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-07-02 09:43:24", "1843453", "141.94.121.162:6060", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:26", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-01 23:46:22", "1843350", "209.200.246.194:37865", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-01 09:43:17", "1840739", "109.237.64.48:44704", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:15", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-01 08:05:06", "1840722", "119.91.243.238:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:01", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-01 07:05:06", "1840704", "43.144.19.224:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:14", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-30 19:46:09", "1840388", "91.92.43.194:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-02 18:45:54", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:46:09", "1840389", "91.92.43.195:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-02 08:45:43", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:46:09", "1840390", "91.92.43.196:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-02 18:45:54", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:46:08", "1840387", "91.92.43.193:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-02 08:45:43", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:44:21", "1840379", "193.24.123.25:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:44:11", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:43:26", "1840375", "138.124.240.76:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:43:25", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:43:26", "1840376", "138.124.240.76:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:43:25", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:43:26", "1840377", "138.124.240.77:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-10-03 11:43:25", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:43:15", "1840372", "107.172.22.3:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:13", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-06-30 17:44:15", "1840351", "2.26.1.177:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-30 17:43:45", "1840347", "172.94.18.103:69", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:50", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-30 09:54:11", "1840271", "152.32.132.177:8899", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:04", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-06-29 09:45:31", "1839220", "45.92.158.150:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:18", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-28 19:44:54", "1838799", "45.150.38.95:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:12", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-27 19:43:32", "1838660", "155.94.163.75:8797", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:38", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-27 15:46:40", "1838629", "47.86.184.71:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:16", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-27 07:05:05", "1838532", "8.152.212.104:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:18", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-26 19:45:25", "1838183", "82.165.79.60:1336", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:37", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-06-25 18:54:17", "1837449", "50.114.184.63:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:23", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:54:02", "1837476", "45.192.211.64:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:14", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:54:02", "1837477", "45.192.211.64:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:14", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:54:02", "1837478", "45.192.211.64:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:14", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:53:55", "1837490", "5.230.201.220:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:22", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:53:53", "1837493", "151.242.63.126:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:43:33", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 15:17:46", "1837441", "45.192.211.59:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:13", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 15:17:45", "1837442", "45.192.211.59:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:14", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 15:17:44", "1837443", "45.192.211.59:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:14", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 08:21:13", "1837265", "45.192.211.63:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:14", "75", "False", "", "PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-06-25 08:08:03", "1837243", "169.239.128.43:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:07", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-06-24 19:43:22", "1837080", "146.190.80.105:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:29", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-06-24 09:45:14", "1836781", "38.207.177.71:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:04", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-24 09:43:12", "1836771", "107.172.140.187:32333", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-24 09:43:04", "1836768", "102.220.160.250:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-24 09:43:04", "1836769", "102.220.160.250:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-23 19:43:29", "1836662", "156.239.47.147:4221", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:39", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-23 19:43:03", "1836655", "102.220.160.250:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-22 09:43:03", "1835556", "102.220.160.250:7829", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-19 23:46:13", "1834187", "23.141.12.111:8899", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 10:45:51", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-19 09:43:05", "1834051", "103.153.254.32:6933", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:07", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-18 09:45:43", "1833750", "54.38.94.225:8884", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:45:25", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-06-17 23:45:31", "1833622", "106.13.189.138:56000", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-17 17:00:15", "1833500", "20.39.60.137:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:20", "100", "True", "None", "havoc", "1", "anonymous"
"2026-06-16 23:46:00", "1833008", "212.14.244.222:807", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-16 23:46:00", "1833009", "212.14.244.222:809", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-16 19:43:12", "1832762", "119.59.118.75:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-16 11:00:15", "1832647", "39.106.205.6:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:12", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-15 15:46:19", "1832399", "23.95.170.223:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-15 09:45:54", "1832323", "89.42.134.220:1803", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-15 09:45:46", "1832320", "8.210.84.56:8000", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-15 09:43:17", "1832313", "131.143.251.246:53921", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-14 19:45:30", "1832163", "89.42.134.220:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-14 09:45:07", "1831995", "64.225.102.218:31400", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:28", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-14 09:43:43", "1831987", "185.207.154.11:4848", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:57", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-13 19:45:04", "1831838", "45.153.127.224:443", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-10-03 11:45:12", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-06-13 09:46:08", "1831732", "89.42.134.220:1991", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-13 09:43:18", "1831722", "130.185.82.117:5641", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:21", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-13 09:43:12", "1831720", "108.181.115.254:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:13", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-06-13 09:43:12", "1831721", "108.181.115.254:7045", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:13", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-06-13 09:43:02", "1831717", "101.33.202.134:9989", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:02", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-11 19:43:50", "1830387", "192.3.139.18:15221", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-11 14:00:17", "1830307", "172.94.18.103:79", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:51", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-06-11 09:44:07", "1830053", "206.81.21.156:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-01 18:44:29", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-11 06:43:05", "1830007", "45.87.53.6:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:15", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-06-11 06:43:04", "1830006", "120.55.3.157:10000", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:01", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-06-10 19:43:51", "1829899", "193.135.137.240:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:10", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-10 19:43:32", "1829892", "170.39.185.141:2030", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:47", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-10 09:45:40", "1825867", "64.89.162.117:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:29", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-10 09:44:00", "1825853", "192.208.12.91:3000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:07", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-10 09:43:10", "1825846", "107.175.87.234:65321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-10 07:18:53", "1825788", "34.92.128.98:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:12", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-06-10 06:00:25", "1825703", "8.163.59.20:8008", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:18", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-10 03:45:38", "1825678", "218.244.142.4:8889", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-09 19:44:51", "1825613", "46.151.182.16:1011", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:18", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-07 23:45:14", "1824508", "209.200.246.194:17568", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-07 19:45:00", "1824433", "82.156.224.184:8080", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:36", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-06-07 09:44:10", "1824254", "209.99.188.193:4323", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:23", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-07 09:43:16", "1824247", "137.184.163.27:5613", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:24", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-07 07:23:22", "1824098", "77.83.39.141:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:33", "100", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-07 07:23:22", "1824099", "77.83.39.141:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 11:45:33", "100", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-06 19:44:30", "1824130", "46.151.182.243:55380", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:19", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-04 23:45:28", "1822600", "34.202.161.96:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:12", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-04 19:43:27", "1822526", "163.172.174.237:443", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-10-02 18:43:48", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-06-04 19:43:27", "1822527", "163.172.174.237:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-10-03 11:43:45", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-06-04 09:45:35", "1822301", "82.23.246.160:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:37", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-04 09:43:29", "1822296", "156.247.40.190:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:39", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-03 15:24:07", "1821798", "13.236.153.60:8888", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:21", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-06-03 09:45:37", "1821716", "82.23.246.160:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:37", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-03 09:43:30", "1821713", "156.247.40.190:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:39", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-03 05:55:47", "1821563", "47.94.108.209:8888", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "2026-10-02 19:05:06", "75", "False", "", "VShell", "0", "whoamix302"
"2026-05-31 21:46:19", "1820398", "154.38.114.115:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:05", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-31 15:04:22", "1820327", "64.89.160.44:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:28", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-05-31 09:45:39", "1820291", "64.176.73.125:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:45:27", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-05-31 09:44:59", "1820290", "31.57.184.154:2503", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:55", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-31 06:48:28", "1820214", "64.89.160.44:1000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:28", "50", "False", "None", "205759,asyncrat,c2,censys", "0", "sojubear"
"2026-05-30 09:45:23", "1820043", "38.54.63.135:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:05", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-29 19:45:33", "1819906", "43.140.219.30:7112", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-10-03 11:45:07", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-29 19:43:42", "1819896", "162.248.225.165:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:44", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-29 19:43:42", "1819897", "162.248.225.165:8603", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:44", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-29 11:46:33", "1819786", "118.89.79.131:6528", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:01", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-28 19:44:44", "1819593", "31.57.184.154:7005", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 18:45:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-28 09:46:09", "1819406", "91.215.85.212:45423", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:43", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-28 09:46:05", "1819405", "85.209.90.132:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-28 09:44:19", "1819396", "202.95.8.97:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:21", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-28 09:44:19", "1819397", "202.95.8.98:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:21", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-28 09:43:13", "1819387", "113.31.106.85:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-02 18:43:17", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-28 06:35:37", "1819344", "91.92.41.94:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 11:21:45", "75", "False", "https://bazaar.abuse.ch/sample/4574fb6323e861d9415d00bd4d031f8675f55382d1c3b6685c9de792fa6dd986/", "remcos", "0", "abuse_ch"
"2026-05-27 19:45:55", "1819225", "91.200.84.198:8515", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:43", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-27 19:43:47", "1819220", "18.162.155.202:3350", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:43:54", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-27 19:43:09", "1819218", "104.243.248.63:1807", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-27 15:46:43", "1819146", "8.134.70.73:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:17", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-27 07:09:22", "1818956", "8.163.49.50:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:18", "50", "False", "None", "c2,censys,cobalt strike", "0", "sojubear"
"2026-05-26 19:43:28", "1818872", "155.102.136.60:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:43:38", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-26 09:44:02", "1818696", "193.24.123.160:45631", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:11", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-26 08:35:13", "1818588", "31.57.184.154:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-10-03 08:44:52", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-05-25 22:46:18", "1818480", "47.108.25.113:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:15", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-25 19:44:52", "1818434", "37.77.150.174:4333", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:45:02", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-05-25 19:44:51", "1818433", "37.77.150.174:4332", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:45:02", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-05-25 19:44:05", "1818431", "202.95.8.92:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:21", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-24 14:46:49", "1818053", "45.154.12.150:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:14", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-24 11:05:15", "1817829", "172.94.18.103:75", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:51", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-05-23 19:43:35", "1817704", "151.236.20.3:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:33", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-23 14:56:56", "1817663", "101.126.10.34:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:57", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-05-22 09:45:08", "1817238", "54.187.35.128:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:25", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-22 09:44:40", "1817235", "31.57.184.154:7006", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:56", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-22 08:11:29", "1817159", "143.14.9.56:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:26", "90", "False", "None", "adaptix_v1.2,adaptixc2,c2,panel", "0", "Lenny_3BO"
"2026-05-21 19:45:14", "1817055", "42.121.150.29:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:45:07", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-20 19:44:32", "1816737", "221.207.101.175:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:44:49", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-20 19:43:30", "1816735", "167.17.47.118:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:46", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-20 09:45:05", "1816585", "51.15.8.6:9998", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:23", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-05-19 20:46:09", "1816445", "43.142.137.169:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:14", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-19 19:45:18", "1816431", "91.202.233.214:44123", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:43", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-19 19:44:36", "1816427", "31.57.184.154:2502", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:55", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-19 09:43:37", "1816296", "176.120.22.127:443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-10-03 11:43:52", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-05-18 19:44:31", "1816100", "38.147.189.199:9001", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:45:03", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-05-18 09:43:30", "1815927", "163.181.46.56:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:43:45", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-16 19:45:35", "1815397", "45.155.69.153:43345", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:12", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-15 19:44:19", "1815133", "34.69.130.10:80", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-10-03 11:44:59", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-14 09:51:34", "1812126", "84.46.251.62:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-12 09:43:06", "1811385", "104.243.248.63:1803", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-11 22:45:16", "1811186", "117.50.184.221:10080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-11 19:45:07", "1811129", "64.199.252.59:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:27", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-11 19:45:01", "1811128", "51.77.54.76:6769", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:24", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-11 09:45:15", "1810965", "89.42.134.220:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-11 09:44:29", "1810959", "31.57.184.154:7007", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:56", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-11 09:43:35", "1810955", "185.242.245.27:44875", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:00", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-10 19:44:31", "1810414", "31.57.184.154:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:56", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-10 19:43:39", "1810408", "189.34.188.6:5406", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-10-03 11:44:05", "75", "False", "None", "drb-ra,NetSupport,RAT", "0", "abuse_ch"
"2026-05-10 19:43:39", "1810409", "189.34.188.6:5407", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-10-03 11:44:05", "75", "False", "None", "drb-ra,NetSupport,RAT", "0", "abuse_ch"
"2026-05-10 09:44:56", "1810170", "57.158.27.132:8080", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:26", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-05-09 19:43:46", "1809754", "213.130.25.141:44333", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-10-03 11:44:24", "75", "False", "None", "drb-ra,NetSupport,RAT", "0", "abuse_ch"
"2026-05-09 19:43:24", "1809750", "168.144.89.48:8443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:47", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-08 19:43:28", "1809033", "180.97.214.70:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:43:55", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-08 08:43:45", "1808650", "45.56.91.55:2005", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:17", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-05-08 08:43:13", "1808637", "178.104.186.90:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:53", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-08 08:43:05", "1808628", "113.31.118.180:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:16", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-07 20:44:32", "1808286", "101.33.225.32:8011", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-06 18:43:14", "1807842", "154.18.238.18:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:34", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-05-06 08:43:54", "1807538", "31.57.184.154:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:56", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-04 20:44:43", "1806228", "154.219.115.123:61443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:05", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-04 08:44:13", "1805766", "82.165.79.60:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:37", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-05-04 08:44:12", "1805765", "82.165.79.60:1337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:37", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-05-02 08:43:06", "1804719", "124.95.172.200:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:43:18", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-01 18:43:53", "1803894", "59.152.212.164:443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-10-03 11:45:26", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-05-01 18:43:41", "1803874", "31.57.184.154:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:56", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 18:43:03", "1803841", "103.79.79.105:9001", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:43:08", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-05-01 08:43:48", "1803513", "64.89.163.114:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:29", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 08:43:44", "1803500", "47.103.106.26:2333", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:21", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 08:43:23", "1803486", "20.2.83.254:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:44:19", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-01 02:43:31", "1803279", "91.202.233.153:43555", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:43", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:30", "1803276", "85.155.186.2:3821", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:28", "1803262", "79.135.160.20:9999", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:26", "1803254", "62.81.188.1:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:45:27", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:25", "1803246", "46.101.77.223:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:45:18", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-01 02:43:24", "1803239", "45.155.69.175:42455", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:24", "1803240", "45.56.91.55:2003", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:17", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:23", "1803235", "45.125.67.171:8443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:22", "1803232", "43.142.77.170:443", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-10-03 11:45:08", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:22", "1803233", "43.142.77.170:80", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-10-03 11:45:08", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:22", "1803234", "43.160.225.40:39001", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:08", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:20", "1803218", "222.255.100.119:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-10-03 11:44:49", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:20", "1803219", "23.227.203.6:42235", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:52", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:20", "1803222", "31.57.184.154:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:56", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:19", "1803211", "216.107.208.250:10444", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-10-03 11:44:25", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:19", "1803215", "219.142.15.101:4353", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:44:48", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:19", "1803216", "220.231.47.163:4353", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:44:49", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:19", "1803217", "221.130.42.19:4353", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-10-03 11:44:49", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:18", "1803205", "208.249.244.20:443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-10-03 11:44:22", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:18", "1803206", "209.151.145.164:8443", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:44:23", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:17", "1803202", "202.95.17.188:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-01 18:44:28", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:13", "1803174", "185.212.129.23:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-10-03 11:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-01 02:43:13", "1803178", "185.213.20.250:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:59", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:13", "1803179", "185.242.245.120:42534", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:00", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:12", "1803167", "182.255.45.114:4848", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:55", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:11", "1803162", "178.16.52.22:8396", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:53", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:09", "1803153", "172.9.165.216:8096", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-10-03 11:43:50", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:08", "1803141", "154.219.115.123:60001", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:08", "1803145", "161.248.179.92:1111", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:08", "1803146", "161.248.179.92:9999", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:08", "1803147", "162.14.124.25:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:44", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:07", "1803134", "149.104.28.204:3656", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:31", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:06", "1803127", "142.93.88.220:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:26", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-05-01 02:43:05", "1803124", "138.124.113.131:4211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:24", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:04", "1803114", "115.42.60.122:5440", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:16", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:04", "1803115", "117.72.101.55:9520", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-10-03 11:43:16", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:03", "1803113", "115.190.247.97:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:16", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-04-30 18:43:45", "1802897", "82.156.219.31:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:18", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-26 18:36:03", "1800513", "91.92.242.236:80", "ip:port", "botnet_cc", "win.amadey", "None", "Amadey", "2026-10-03 11:55:07", "50", "False", "https://tracker.viriback.com/index.php?q=91.92.242.236", "Amadey,ViriBack", "0", "abuse_ch"
"2026-04-20 10:52:12", "1794910", "39.100.66.238:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:12", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-19 11:04:19", "1794232", "91.92.241.160:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:44", "75", "False", "None", "ClickFix", "0", "Lenny_3BO"
"2026-04-16 10:56:58", "1792707", "43.167.177.224:7778", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:14", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-16 06:43:30", "1792631", "47.109.23.77:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:15", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-04-12 06:34:43", "1784558", "47.104.248.7:8884", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:15", "100", "False", "", "Agentemis,BEACON,C2,Cobalt Strike,CobaltStrike,cobeacon", "0", "whoamix302"
"2026-04-09 14:48:47", "1783375", "39.102.125.11:4435", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:12", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-07 07:17:26", "1782124", "1.15.76.39:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:57", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-04-06 18:49:49", "1781907", "43.139.108.161:8192", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:14", "100", "False", "", "Agentemis,BEACON,C2,Cobalt Strike,CobaltStrike,cobeacon", "0", "whoamix302"
"2026-04-04 20:44:05", "1781225", "111.230.217.36:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-04 20:44:01", "1781224", "109.244.130.113:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-04 07:11:11", "1780791", "213.21.222.241:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:25", "100", "False", "", "C2,Mythic,Shodan", "0", "whoamix302"
"2026-03-24 12:01:13", "1774903", "37.72.172.58:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:01", "100", "False", "https://search.censys.io/hosts/37.72.172.58", "AS29802,AsyncRAT,C2,censys,HVC-AS,RAT", "0", "DonPasci"
"2026-03-24 12:00:35", "1774898", "47.92.208.27:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:16", "100", "False", "https://search.censys.io/hosts/47.92.208.27", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2026-03-23 21:06:09", "1774595", "154.83.12.132:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:05", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-03-23 04:01:28", "1774088", "23.227.199.67:42215", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:51", "100", "False", "https://search.censys.io/hosts/23.227.199.67", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2026-03-22 18:02:20", "1773536", "156.239.252.191:448", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:06", "100", "False", "", "BEACON,C2,CobaltStrike,Shodan", "0", "whoamix302"
"2026-03-22 12:01:29", "1773754", "138.226.236.52:13212", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:25", "100", "False", "https://search.censys.io/hosts/138.226.236.52", "AdaptixC2,AS205775,C2,censys,NEONCORENETWORKS", "0", "DonPasci"
"2026-03-20 00:02:12", "1771791", "8.136.13.87:7001", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:34", "100", "False", "https://search.censys.io/hosts/8.136.13.87", "AdaptixC2,ALIBABA-CN-NET,AS37963,C2,censys", "0", "DonPasci"
"2026-03-19 20:02:47", "1771713", "167.17.47.121:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:46", "100", "False", "https://search.censys.io/hosts/167.17.47.121", "AdaptixC2,AS43180,C2,censys,TRUNKNETWORKS-AS", "0", "DonPasci"
"2026-03-17 08:00:12", "1769099", "159.75.176.189:3389", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:06", "100", "False", "https://search.censys.io/hosts/159.75.176.189", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2026-03-16 20:01:10", "1768644", "35.179.229.71:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:59", "100", "False", "https://search.censys.io/hosts/35.179.229.71", "AMAZON-02,AS16509,C2,censys,Havoc", "0", "DonPasci"
"2026-03-16 20:01:02", "1768638", "64.227.105.70:8080", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:28", "100", "False", "https://search.censys.io/hosts/64.227.105.70", "AS14061,C2,censys,DIGITALOCEAN-ASN,Mythic", "0", "DonPasci"
"2026-03-16 12:00:11", "1767990", "43.155.169.245:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:14", "100", "False", "https://search.censys.io/hosts/43.155.169.245", "AS132203,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP-CN", "0", "DonPasci"
"2026-03-15 16:00:41", "1767077", "185.242.3.83:5505", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-02 08:44:00", "100", "False", "https://search.censys.io/hosts/185.242.3.83", "AS60223,AsyncRAT,C2,censys,NETIFACE-AS,RAT", "0", "DonPasci"
"2026-03-15 04:01:14", "1766764", "202.191.67.71:50003", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:21", "100", "False", "https://search.censys.io/hosts/202.191.67.71", "AdaptixC2,AS131262,C2,censys,KELNET-AS-AP", "0", "DonPasci"
"2026-03-13 04:01:11", "1764276", "46.151.182.205:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:19", "100", "False", "https://search.censys.io/hosts/46.151.182.205", "AS205759,AsyncRAT,C2,censys,GHOSTYNETWORKS,RAT", "0", "DonPasci"
"2026-03-11 23:00:21", "1763737", "130.12.182.209:9456", "ip:port", "botnet_cc", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-10-03 11:43:21", "100", "False", "https://tria.ge/260311-zw3w6adw5k", "quasar", "0", "dyingbreeds_"
"2026-03-11 07:03:38", "1763170", "60.247.206.23:7443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:17", "100", "False", "None", "CobaltStrike,cs-watermark-391144938", "0", "abuse_ch"
"2026-03-11 04:00:36", "1763116", "118.25.10.65:65010", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 10:45:42", "100", "False", "https://search.censys.io/hosts/118.25.10.65", "AS45090,C2,censys,CobaltStrike,cs-watermark-666666666,TENCENT-NET-AP", "0", "DonPasci"
"2026-03-10 00:01:13", "1762492", "107.172.3.15:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:13", "100", "False", "https://search.censys.io/hosts/107.172.3.15", "AS-COLOCROSSING,AS36352,C2,censys,Mythic", "0", "DonPasci"
"2026-03-06 00:01:40", "1759331", "194.36.178.53:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:13", "100", "False", "https://search.censys.io/hosts/194.36.178.53", "AdaptixC2,AS200740,C2,censys,FIRST-SERVER-EU-AS", "0", "DonPasci"
"2026-03-04 04:01:12", "1758006", "70.153.18.45:10002", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:32", "100", "False", "https://search.censys.io/hosts/70.153.18.45", "AS8075,censys,EvilGoPhish,MICROSOFT-CORP-MSN-AS-BLOCK,panel,Phishing", "0", "DonPasci"
"2026-03-01 08:29:28", "1756253", "102.117.160.67:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:02", "50", "False", "https://www.shodan.io/host/102.117.160.67#7443", "c2,mythic,shodan", "0", "juroots"
"2026-02-25 19:01:08", "1754671", "115.190.250.28:5521", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:00", "100", "False", "https://search.censys.io/hosts/115.190.250.28", "AS137718,C2,censys", "0", "dyingbreeds_"
"2026-02-24 23:00:43", "1754344", "23.88.110.42:8443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-10-03 11:44:52", "100", "False", "https://search.censys.io/hosts/23.88.110.42", "AS24940,C2,censys,HETZNER-AS", "0", "dyingbreeds_"
"2026-02-24 12:02:30", "1754178", "169.40.135.36:8888", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:47", "100", "False", "https://search.censys.io/hosts/169.40.135.36", "AdaptixC2,AS209274,C2,censys,KRAKEN-NETWORK-ISP", "0", "DonPasci"
"2026-02-23 23:00:09", "1753847", "49.232.135.25:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:21", "100", "False", "https://search.censys.io/hosts/49.232.135.25", "AS45090,C2,censys", "0", "dyingbreeds_"
"2026-02-20 11:00:06", "1751104", "107.172.217.220:12096", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:58", "100", "False", "https://search.censys.io/hosts/107.172.217.220", "AS36352,C2,censys", "0", "dyingbreeds_"
"2026-02-20 08:46:17", "1751080", "163.181.208.79:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:43:45", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-02-16 09:05:30", "1749217", "111.228.4.54:4455", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:59", "50", "False", "https://www.shodan.io/host/111.228.4.54#4455", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2026-02-14 15:11:17", "1748256", "101.200.193.211:8086", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:57", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-02-09 11:00:33", "1743594", "15.204.14.143:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:32", "100", "False", "https://search.censys.io/hosts/15.204.14.143", "AS16276,C2,censys,OVH", "0", "dyingbreeds_"
"2026-02-08 15:42:41", "1743395", "1.15.25.148:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:40", "1743391", "106.52.208.143:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:40", "1743392", "106.13.137.229:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:40", "1743393", "101.43.2.116:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:40", "1743394", "101.133.148.66:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:39", "1743388", "115.190.178.249:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:17", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:39", "1743389", "114.132.150.96:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:17", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:39", "1743390", "110.40.176.194:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:17", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:37", "1743386", "120.48.50.33:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:17", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:37", "1743387", "117.72.214.50:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:17", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:36", "1743381", "124.223.199.39:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:36", "1743382", "124.221.32.87:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:36", "1743383", "124.220.48.168:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:36", "1743384", "124.220.164.98:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:36", "1743385", "121.41.167.80:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:35", "1743378", "152.136.139.105:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:35", "1743379", "129.204.103.151:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:35", "1743380", "124.223.47.219:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:34", "1743374", "172.245.215.43:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:34", "1743375", "165.154.125.212:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:34", "1743376", "156.233.233.134:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:34", "1743377", "154.201.91.224:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:33", "1743370", "38.190.224.63:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:33", "1743371", "222.255.214.236:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:33", "1743372", "192.252.187.60:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:33", "1743373", "178.16.52.194:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:32", "1743365", "43.139.146.100:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:32", "1743366", "43.133.41.106:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:32", "1743367", "42.192.49.72:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:32", "1743368", "39.107.85.83:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:32", "1743369", "39.106.144.162:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:31", "1743363", "47.100.168.4:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:31", "1743364", "43.139.169.60:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:30", "1743362", "47.111.146.110:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:29", "1743358", "47.243.175.24:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:29", "1743359", "47.239.188.48:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:29", "1743360", "47.122.30.177:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:29", "1743361", "47.122.1.243:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:28", "1743356", "61.166.154.109:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:28", "1743357", "49.235.177.231:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:27", "1743353", "81.70.255.195:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:27", "1743354", "81.69.98.230:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:27", "1743355", "8.210.78.137:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:26", "1743351", "83.229.126.65:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:26", "1743352", "81.71.159.99:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:15", "1743349", "83.229.123.61:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:15", "1743350", "83.229.126.183:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:14", "1743348", "8.153.205.30:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:13", "1743347", "8.137.149.67:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:12", "1743344", "47.93.28.103:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:12", "1743345", "60.205.139.210:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:11", "1743340", "47.109.198.8:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:11", "1743341", "47.120.70.161:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:11", "1743342", "47.121.137.8:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:11", "1743343", "47.121.29.60:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:10", "1743336", "45.115.236.152:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:10", "1743338", "47.107.136.106:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:10", "1743339", "47.109.145.121:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:09", "1743333", "192.140.176.79:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:09", "1743334", "36.140.162.173:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:09", "1743335", "39.105.165.37:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:08", "1743330", "152.32.251.78:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:08", "1743331", "154.201.74.112:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:09", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:08", "1743332", "179.43.186.214:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:09", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:07", "1743326", "139.196.41.201:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:07", "1743327", "139.224.16.185:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:07", "1743328", "14.103.175.50:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:07", "1743329", "150.187.25.242:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:06", "1743322", "120.48.168.57:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:06", "1743323", "121.40.18.128:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:06", "1743324", "122.51.93.94:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:06", "1743325", "134.122.140.185:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:05", "1743320", "117.72.102.110:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:05", "1743321", "117.72.242.9:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:04", "1743318", "113.44.67.52:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:04", "1743319", "115.190.161.178:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:03", "1743314", "106.38.201.95:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:03", "1743315", "106.75.162.108:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:03", "1743316", "106.75.215.96:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:03", "1743317", "106.75.224.31:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:02", "1743312", "106.12.219.245:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:02", "1743313", "106.13.29.104:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 11:00:25", "1743267", "15.204.14.143:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:32", "100", "False", "https://search.censys.io/hosts/15.204.14.143", "AS16276,C2,censys,OVH", "0", "dyingbreeds_"
"2026-02-08 04:00:55", "1743209", "15.204.95.228:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:32", "100", "False", "https://search.censys.io/hosts/15.204.95.228", "AS16276,C2,censys,Havoc,OVH", "0", "DonPasci"
"2026-02-07 03:00:18", "1742595", "174.138.86.141:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:52", "100", "False", "https://search.censys.io/hosts/174.138.86.141", "AS14061,C2,censys,Mythic", "0", "dyingbreeds_"
"2026-02-05 13:01:59", "1741587", "57.158.27.132:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:26", "50", "False", "https://www.shodan.io/host/57.158.27.132#31337", "c2,shodan,sliver", "0", "juroots"
"2026-02-05 08:00:33", "1741451", "139.84.159.182:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:43:25", "100", "False", "https://search.censys.io/hosts/139.84.159.182", "AS-VULTR,AS20473,C2,censys,Pupy,RAT", "0", "DonPasci"
"2026-02-05 06:34:37", "1741375", "37.72.172.58:6066", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:01", "75", "False", "", "AS29802,asyncrat,c2,fofa,RAT", "0", "oxygen28"
"2026-02-04 15:54:23", "1741222", "3.121.234.29:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:53", "100", "False", "https://search.censys.io/hosts/3.121.234.29", "AS16509,C2,censys,Mythic", "0", "dyingbreeds_"
"2026-02-04 11:00:54", "1741132", "172.174.234.34:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:48", "100", "False", "https://search.censys.io/hosts/172.174.234.34", "AS8075,C2,censys,Mythic", "0", "dyingbreeds_"
"2026-02-04 00:02:27", "1740953", "188.166.244.201:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:05", "100", "False", "https://search.censys.io/hosts/188.166.244.201", "AdaptixC2,AS14061,C2,censys,DIGITALOCEAN-ASN", "0", "DonPasci"
"2026-02-02 18:00:52", "1740000", "146.70.49.42:7080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:29", "100", "False", "https://tria.ge/260202-r1f9ysbx8f", "AS9009,asyncrat,C2,rat,triage", "0", "DonPasci"
"2026-01-31 04:00:10", "1739277", "101.37.236.20:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:57", "100", "False", "https://search.censys.io/hosts/101.37.236.20", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-100000", "0", "DonPasci"
"2026-01-30 18:54:11", "1739209", "47.115.193.52:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 08:45:16", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-01-30 16:04:48", "1739163", "107.150.105.91:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:06", "100", "False", "https://search.censys.io/hosts/107.150.105.91", "AS135377,C2,censys,CobaltStrike,cs-watermark-666666666,UCLOUD-HK-AS-AP", "0", "DonPasci"
"2026-01-30 08:04:49", "1739009", "111.92.243.40:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:06", "100", "False", "https://search.censys.io/hosts/111.92.243.40", "AS401696,C2,censys,CobaltStrike,COGNETCLOUD,cs-watermark-666666666", "0", "DonPasci"
"2026-01-29 18:55:17", "1738855", "209.145.63.3:33330", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:23", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-01-26 23:00:09", "1737790", "47.120.46.230:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:05", "100", "False", "https://search.censys.io/hosts/47.120.46.230", "AS37963,C2,censys", "0", "dyingbreeds_"
"2026-01-23 08:45:57", "1736034", "158.158.8.193:443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-10-03 11:43:40", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-01-23 08:04:06", "1736014", "47.120.32.72:8075", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:16", "100", "False", "https://search.censys.io/hosts/47.120.32.72", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2026-01-22 12:04:28", "1735522", "176.31.71.168:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:43:52", "100", "False", "https://search.censys.io/hosts/176.31.71.168", "AS16276,C2,censys,OVH,Pupy,RAT", "0", "DonPasci"
"2026-01-21 20:04:36", "1735342", "54.145.56.188:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:24", "100", "False", "https://search.censys.io/hosts/54.145.56.188", "AMAZON-AES,AS14618,C2,censys,Mythic", "0", "DonPasci"
"2026-01-20 20:05:01", "1734935", "37.72.168.189:42334", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:01", "100", "False", "https://search.censys.io/hosts/37.72.168.189", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2026-01-20 16:04:24", "1734893", "136.24.173.249:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:24", "100", "False", "https://search.censys.io/hosts/136.24.173.249", "AS19165,C2,censys,Mythic,WEBPASS", "0", "DonPasci"
"2026-01-20 08:04:17", "1734787", "104.243.248.63:83", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:11", "100", "False", "https://search.censys.io/hosts/104.243.248.63", "AS3223,AsyncRAT,C2,censys,RAT,VOXILITY", "0", "DonPasci"
"2026-01-18 00:03:59", "1734081", "103.79.79.105:8444", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:43:08", "100", "False", "https://search.censys.io/hosts/103.79.79.105", "AS199959,C2,censys,CROWNCLOUD,Pupy,RAT", "0", "DonPasci"
"2026-01-16 14:56:41", "1733584", "101.37.236.20:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-01-16 11:10:18", "1732790", "154.38.116.247:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:37", "50", "False", "https://www.shodan.io/host/154.38.116.247#7443", "c2,mythic,shodan", "0", "juroots"
"2026-01-16 11:03:49", "1732712", "111.231.116.164:4443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:59", "50", "False", "https://www.shodan.io/host/111.231.116.164#4443", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2026-01-13 08:52:00", "1731532", "54.38.94.225:8881", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:45:25", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-01-08 23:00:12", "1693365", "117.72.178.246:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:07", "100", "False", "https://search.censys.io/hosts/117.72.178.246", "AS141679,C2,censys", "0", "dyingbreeds_"
"2026-01-08 22:50:04", "1693357", "172.94.18.103:191", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:50", "100", "False", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2026-01-08 11:00:08", "1693228", "39.107.242.130:52012", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:13", "100", "False", "https://search.censys.io/hosts/39.107.242.130", "AS37963,C2,censys", "0", "dyingbreeds_"
"2026-01-08 08:51:57", "1693090", "123.249.100.226:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-01-07 20:02:36", "1692743", "38.49.57.15:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:04", "100", "False", "https://search.censys.io/hosts/38.49.57.15", "AS8796,C2,censys,CobaltStrike,cs-watermark-666666666,FD-298-8796", "0", "DonPasci"
"2026-01-06 08:02:23", "1691952", "115.190.233.79:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:07", "100", "False", "https://search.censys.io/hosts/115.190.233.79", "AS137718,C2,censys,CobaltStrike,cs-watermark-987654321,VOLCANO-ENGINE", "0", "DonPasci"
"2026-01-01 07:01:03", "1689290", "182.92.117.223:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 10:45:49", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2025-12-30 16:21:16", "1688739", "101.34.205.214:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:15", "1688738", "103.171.35.66:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:11", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:14", "1688737", "107.149.192.54:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:13", "1688734", "124.222.218.20:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:11", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:13", "1688735", "124.221.255.78:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:11", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:13", "1688736", "123.56.78.220:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:11", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:12", "1688732", "152.32.202.240:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:12", "1688733", "150.158.119.242:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:10", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:11", "1688730", "165.154.244.73:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:10", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:11", "1688731", "156.225.20.77:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:10", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:10", "1688729", "182.92.239.94:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:10", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:08", "1688726", "39.105.160.175:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:09", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:08", "1688727", "38.38.250.99:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:09", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:08", "1688728", "211.184.175.246:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:09", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:07", "1688725", "45.58.56.34:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:05", "1688723", "8.130.80.145:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:05", "1688724", "8.130.26.216:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:03", "1688721", "94.74.164.177:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:03", "1688722", "87.251.67.85:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:04:05", "1688694", "16.171.13.191:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:42", "100", "False", "https://search.censys.io/hosts/16.171.13.191", "AMAZON-02,AS16509,C2,censys,Covenant", "0", "DonPasci"
"2025-12-29 08:46:57", "1687948", "222.186.17.103:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:44:49", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-12-28 20:01:34", "1687817", "118.89.88.183:56781", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:01", "100", "False", "https://search.censys.io/hosts/118.89.88.183", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2025-12-28 18:44:20", "1687807", "163.181.213.114:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:43:45", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-12-28 07:41:32", "1687327", "37.72.172.58:8088", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:01", "100", "False", "https://search.censys.io/hosts/37.72.172.58", "AS29802,C2,censys,HVC-AS,RAT", "0", "dyingbreeds_"
"2025-12-27 16:02:33", "1687170", "37.72.172.58:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:02", "100", "False", "https://search.censys.io/hosts/37.72.172.58", "AS29802,AsyncRAT,C2,censys,HVC-AS,RAT", "0", "DonPasci"
"2025-12-25 18:44:15", "1686405", "155.102.62.60:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:43:38", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-12-25 07:52:31", "1686010", "139.196.223.82:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:08", "100", "False", "https://search.censys.io/hosts/139.196.223.82", "AS37963,C2,censys", "0", "dyingbreeds_"
"2025-12-23 22:45:05", "1685596", "172.94.18.103:190", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:43:50", "100", "False", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2025-12-23 20:01:06", "1685256", "115.190.160.206:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:07", "100", "False", "https://search.censys.io/hosts/115.190.160.206", "AS137718,C2,censys,CobaltStrike,cs-watermark-987654321,VOLCANO-ENGINE", "0", "DonPasci"
"2025-12-23 03:00:34", "1684938", "8.159.146.72:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:18", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-12-22 20:01:00", "1684826", "179.43.186.214:7889", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:08", "100", "False", "https://search.censys.io/hosts/179.43.186.214", "AS51852,C2,censys,CobaltStrike,cs-watermark-987654321,PLI-AS", "0", "DonPasci"
"2025-12-18 18:44:36", "1682522", "155.102.133.61:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:43:37", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-12-17 10:41:38", "1681406", "129.204.11.247:7777", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:02", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2025-12-16 06:49:03", "1680395", "119.45.160.160:8889", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:01", "50", "False", "https://www.shodan.io/host/119.45.160.160#8889", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2025-12-12 02:50:28", "1676363", "67.219.102.244:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:17", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-12-08 14:58:40", "1670887", "20.157.116.151:8000", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:19", "100", "False", "https://search.censys.io/hosts/20.157.116.151", "AdaptixC2,AS8069,C2,censys,MICROSOFT-CORP-MSN-AS-BLOCK", "0", "DonPasci"
"2025-12-07 16:01:37", "1668967", "180.76.141.175:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:08", "100", "False", "https://search.censys.io/hosts/180.76.141.175", "AS38365,BAIDU,C2,censys,CobaltStrike,cs-watermark-391144938", "0", "DonPasci"
"2025-12-04 16:02:10", "1667706", "84.32.5.105:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 07:00:17", "100", "False", "https://search.censys.io/hosts/84.32.5.105", "AS62164,C2,censys,HEYMMAN-2,RAT,Remcos", "0", "DonPasci"
"2025-12-03 20:01:15", "1667105", "115.190.161.178:1234", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:00", "100", "False", "https://search.censys.io/hosts/115.190.161.178", "AS137718,C2,censys,CobaltStrike,cs-watermark-987654321,VOLCANO-ENGINE", "0", "DonPasci"
"2025-11-29 12:00:52", "1663012", "47.236.56.15:4445", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:16", "100", "False", "https://search.censys.io/hosts/47.236.56.15", "ALIBABA-CN-NET,AS45102,C2,censys,CobaltStrike,cs-watermark-0", "0", "DonPasci"
"2025-11-27 06:58:30", "1651463", "172.94.15.100:6075", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 07:06:29", "50", "False", "", "c2,remcos", "0", "juroots"
"2025-11-25 10:49:55", "1650040", "156.245.248.173:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:15", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-11-19 23:00:16", "1646839", "43.156.63.124:64494", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:14", "100", "False", "https://search.censys.io/hosts/43.156.63.124", "AS132203,C2,censys", "0", "dyingbreeds_"
"2025-11-19 11:32:24", "1646567", "109.74.144.151:8080", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-02 10:05:05", "100", "False", "https://search.censys.io/hosts/109.74.144.151", "AS29405,censys,GoPhish,Phishing,VNET-AS", "0", "dyingbreeds_"
"2025-11-17 23:00:18", "1645785", "47.236.149.142:46832", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:16", "100", "False", "https://search.censys.io/hosts/47.236.149.142", "AS45102,C2,censys", "0", "dyingbreeds_"
"2025-11-15 08:48:18", "1641582", "62.4.0.66:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:27", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2025-11-13 04:54:17", "1639703", "62.60.226.183:483", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-10-03 10:49:27", "100", "False", "None", "c2,Tofsee", "0", "Bitsight"
"2025-11-12 16:02:00", "1639434", "62.4.0.66:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:27", "100", "False", "https://search.censys.io/hosts/62.4.0.66", "AS12876,C2,censys,Mythic,Online", "0", "DonPasci"
"2025-11-12 04:02:31", "1638854", "54.165.230.182:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:25", "100", "False", "https://search.censys.io/hosts/54.165.230.182", "AMAZON-AES,AS14618,C2,censys,Covenant", "0", "DonPasci"
"2025-11-11 12:01:51", "1638662", "208.87.129.112:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:23", "100", "False", "https://search.censys.io/hosts/208.87.129.112", "AS29802,C2,censys,HVC-AS,Mythic", "0", "DonPasci"
"2025-11-10 16:51:33", "1638250", "124.221.237.102:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-11-10 16:02:55", "1638236", "154.205.145.109:2096", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:36", "100", "False", "https://search.censys.io/hosts/154.205.145.109", "AS138915,C2,censys,Havoc,KAOPU-HK", "0", "DonPasci"
"2025-11-07 23:00:12", "1636099", "111.228.55.96:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:06", "100", "False", "https://search.censys.io/hosts/111.228.55.96", "AS141679,C2,censys", "0", "dyingbreeds_"
"2025-11-07 02:49:37", "1634744", "165.154.225.239:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-11-06 07:26:25", "1634389", "139.196.111.118:8088", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:03", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2025-11-04 20:01:04", "1633501", "59.110.28.230:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:05", "100", "False", "https://search.censys.io/hosts/59.110.28.230", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-11-04 08:00:54", "1633194", "51.15.8.6:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:23", "100", "False", "https://search.censys.io/hosts/51.15.8.6", "AS12876,C2,censys,Online,Sliver", "0", "DonPasci"
"2025-11-04 02:49:22", "1633063", "192.253.227.88:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-11-04 02:49:14", "1633061", "167.88.168.76:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-11-03 12:08:57", "1631753", "117.72.175.125:443", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "2026-10-03 11:42:17", "100", "False", "https://www.nviso.eu/blog", "C2,NVISO,VShell", "0", "0xThiebaut"
"2025-11-03 09:03:04", "1631367", "117.72.242.9:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:01", "100", "False", "https://search.censys.io/hosts/117.72.242.9", "AS141679,C2,censys", "0", "dyingbreeds_"
"2025-11-03 07:01:12", "1631471", "119.42.148.186:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:11", "50", "False", "https://www.shodan.io/host/119.42.148.186#443", "c2,cobaltstrike,cs-watermark-666666666,shodan", "0", "juroots"
"2025-10-31 10:49:36", "1630266", "116.62.34.159:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-30 04:00:42", "1629384", "103.149.93.146:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:12", "100", "False", "https://search.censys.io/hosts/103.149.93.146", "AS401696,C2,censys,CobaltStrike,COGNETCLOUD,cs-watermark-666666666", "0", "DonPasci"
"2025-10-29 09:23:45", "1628814", "179.43.186.214:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:08", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2025-10-28 04:00:27", "1627925", "182.254.155.23:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:10", "100", "False", "https://search.censys.io/hosts/182.254.155.23", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2025-10-28 02:49:21", "1627719", "182.16.98.83:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:15", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-27 20:50:01", "1627659", "182.16.98.84:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:15", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-26 07:39:14", "1626705", "196.251.83.89:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:09", "100", "False", "https://search.censys.io/hosts/196.251.83.89", "AS401120,C2,censys,CHEAPY-HOST", "0", "dyingbreeds_"
"2025-10-25 04:00:11", "1626300", "47.121.135.201:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:08", "100", "False", "https://search.censys.io/hosts/47.121.135.201", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-10-24 16:00:08", "1626112", "140.143.194.253:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:16", "100", "False", "https://search.censys.io/hosts/140.143.194.253", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2025-10-22 15:43:44", "1624905", "116.62.226.163:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:17", "50", "False", "None", "c2,censys,cobalt strike", "0", "sojubear"
"2025-10-21 20:01:59", "1624300", "47.110.67.64:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:14", "100", "False", "https://search.censys.io/hosts/47.110.67.64", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-10-16 22:50:54", "1616729", "47.129.2.130:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:16", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-14 20:02:48", "1615761", "89.58.30.49:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:43", "100", "False", "https://search.censys.io/hosts/89.58.30.49", "AS197540,C2,censys,Covenant,NETCUP-AS", "0", "DonPasci"
"2025-10-07 02:48:54", "1608604", "114.132.248.120:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-30 00:02:15", "1604499", "149.50.135.215:49152", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:32", "100", "False", "https://search.censys.io/hosts/149.50.135.215", "AdaptixC2,AS27823,C2,censys,Dattatec.com", "0", "DonPasci"
"2025-09-28 15:48:32", "1603281", "154.92.15.229:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:10", "50", "False", "None", "c2,censys,cobalt strike", "0", "sojubear"
"2025-09-25 20:00:39", "1601556", "115.120.245.134:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:07", "100", "False", "https://search.censys.io/hosts/115.120.245.134", "AS55990,C2,censys,CobaltStrike,cs-watermark-987654321,HWCSNET", "0", "DonPasci"
"2025-09-25 12:51:01", "1601359", "196.251.69.253:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-24 20:00:10", "1599651", "47.113.186.138:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:14", "100", "False", "https://search.censys.io/hosts/47.113.186.138", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-09-24 08:02:13", "1599442", "43.162.114.240:4000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:08", "100", "False", "https://search.censys.io/hosts/43.162.114.240", "AS132203,censys,EvilGinx,panel,Phishing,TENCENT-NET-AP-CN", "0", "DonPasci"
"2025-09-23 20:01:59", "1599090", "46.21.153.148:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:20", "100", "False", "https://search.censys.io/hosts/46.21.153.148", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2025-09-23 20:01:59", "1599091", "46.21.153.146:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:20", "100", "False", "https://search.censys.io/hosts/46.21.153.146", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2025-09-23 04:00:59", "1598300", "43.162.114.107:4000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:08", "100", "False", "https://search.censys.io/hosts/43.162.114.107", "AS132203,censys,EvilGinx,Phishing", "0", "dyingbreeds_"
"2025-09-22 14:51:05", "1598102", "159.75.211.248:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:06", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-21 16:01:22", "1596535", "43.162.108.133:4000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:08", "100", "False", "https://search.censys.io/hosts/43.162.108.133", "AS132203,censys,EvilGinx,panel,Phishing,TENCENT-NET-AP-CN", "0", "DonPasci"
"2025-09-18 20:02:44", "1595224", "146.70.79.45:8443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:43:30", "100", "False", "https://search.censys.io/hosts/146.70.79.45", "AS9009,C2,censys,M247,Sliver", "0", "DonPasci"
"2025-09-13 04:01:58", "1589068", "18.167.174.198:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:43:54", "100", "False", "https://search.censys.io/hosts/18.167.174.198", "AMAZON-02,AS16509,C2,censys,Pupy,RAT", "0", "DonPasci"
"2025-09-11 20:01:36", "1588133", "195.178.110.135:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:09", "100", "False", "https://search.censys.io/hosts/195.178.110.135", "AS48090,C2,censys,CobaltStrike,cs-watermark-426352781,DMZHOST", "0", "DonPasci"
"2025-09-11 20:01:30", "1588128", "150.158.170.241:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:10", "100", "False", "https://search.censys.io/hosts/150.158.170.241", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2025-09-11 06:43:14", "1587773", "106.12.111.209:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:11", "100", "False", "None", "CobaltStrike,cs-watermark-1234567890", "0", "abuse_ch"
"2025-09-10 20:01:24", "1587441", "101.32.109.112:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:12", "100", "False", "https://search.censys.io/hosts/101.32.109.112", "AS132203,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP-CN", "0", "DonPasci"
"2025-09-06 20:01:18", "1582910", "8.138.222.215:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:08", "100", "False", "https://search.censys.io/hosts/8.138.222.215", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2025-09-04 07:40:17", "1581557", "8.148.194.157:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:07", "50", "False", "https://www.shodan.io/host/8.148.194.157#443", "c2,cobaltstrike,cs-watermark-666666666,shodan", "0", "juroots"
"2025-09-02 18:52:55", "1580723", "47.236.159.248:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:16", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-02 04:01:38", "1580237", "47.99.196.178:7001", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:21", "100", "False", "https://search.censys.io/hosts/47.99.196.178", "AdaptixC2,ALIBABA-CN-NET,AS37963,C2,censys", "0", "DonPasci"
"2025-09-01 00:01:11", "1578921", "109.205.181.248:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:15", "100", "False", "https://search.censys.io/hosts/109.205.181.248", "AS51167,C2,censys,CONTABO,Mythic", "0", "DonPasci"
"2025-08-31 20:50:07", "1578899", "103.73.66.43:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:18", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-31 04:00:27", "1578379", "109.205.181.248:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:15", "100", "False", "https://search.censys.io/hosts/109.205.181.248", "AS51167,C2,censys,CONTABO,Mythic", "0", "dyingbreeds_"
"2025-08-29 22:50:45", "1577783", "43.199.78.142:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:14", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-25 00:00:27", "1573705", "43.163.112.217:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:08", "100", "False", "https://search.censys.io/hosts/43.163.112.217", "AS132203,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP-CN", "0", "DonPasci"
"2025-08-21 20:00:56", "1572377", "89.208.211.30:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:42", "100", "False", "https://search.censys.io/hosts/89.208.211.30", "AS47764,C2,censys,Mythic,VK-AS", "0", "DonPasci"
"2025-08-20 08:02:12", "1571607", "178.16.55.53:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:15", "100", "False", "https://search.censys.io/hosts/178.16.55.53", "C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2025-08-18 20:01:59", "1570775", "116.203.31.207:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:00", "100", "False", "https://search.censys.io/hosts/116.203.31.207", "AS24940,C2,censys,CobaltStrike,cs-watermark-987654321,HETZNER-AS", "0", "DonPasci"
"2025-08-17 20:01:54", "1570558", "150.187.25.242:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:04", "100", "False", "https://search.censys.io/hosts/150.187.25.242", "AS20312,C2,censys,CobaltStrike,cs-watermark-987654321,Fundacion", "0", "DonPasci"
"2025-08-16 15:22:26", "1569825", "8.138.167.123:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:08", "50", "False", "https://www.shodan.io/host/8.138.167.123#443", "c2,cobaltstrike,shodan", "0", "juroots"
"2025-08-16 08:01:47", "1569780", "119.29.231.118:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:11", "100", "False", "https://search.censys.io/hosts/119.29.231.118", "AS45090,C2,censys,CobaltStrike,cs-watermark-666666666,TENCENT-NET-AP", "0", "DonPasci"
"2025-08-15 21:57:45", "1569167", "116.198.233.179:6666", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:00", "50", "False", "https://www.shodan.io/host/116.198.233.179#6666", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2025-08-15 06:21:34", "1568713", "117.72.184.172:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:17", "100", "False", "https://search.censys.io/hosts/117.72.184.172", "AS141679,C2,censys", "0", "dyingbreeds_"
"2025-08-12 20:01:25", "1567756", "116.198.233.179:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:07", "100", "False", "https://search.censys.io/hosts/116.198.233.179", "AS137699,C2,censys,CHINATELECOM-JIANGSU-SUQIAN-IDC,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-08-12 12:01:59", "1567668", "62.117.98.115:8001", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:26", "100", "False", "https://search.censys.io/hosts/62.117.98.115", "AS8732,C2,censys,COMCOR-AS,Mythic", "0", "DonPasci"
"2025-08-12 10:50:19", "1567648", "107.174.115.43:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-11 22:50:14", "1567336", "150.158.119.242:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:04", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-11 20:01:43", "1567316", "209.250.227.127:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:44:23", "100", "False", "https://search.censys.io/hosts/209.250.227.127", "AS-VULTR,AS20473,C2,censys,Pupy,RAT", "0", "DonPasci"
"2025-08-11 08:01:15", "1567234", "45.204.216.24:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:08", "100", "False", "https://search.censys.io/hosts/45.204.216.24", "AS62468,C2,censys,CobaltStrike,cs-watermark-987654321,HKCLOUDX", "0", "DonPasci"
"2025-08-06 12:54:26", "1565164", "8.219.76.168:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-05 08:53:36", "1564496", "47.105.36.109:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:15", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-04 20:45:44", "1564345", "185.233.166.124:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:59", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-08-04 20:45:44", "1564346", "185.233.166.124:9702", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:59", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-08-01 20:01:06", "1563212", "194.87.82.8:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:13", "100", "False", "https://search.censys.io/hosts/194.87.82.8", "AS26383,ASNET,C2,censys,Mythic", "0", "DonPasci"
"2025-07-30 20:01:06", "1562605", "172.233.97.159:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:48", "100", "False", "https://search.censys.io/hosts/172.233.97.159", "AKAMAI-LINODE-AP,AS63949,C2,censys,Mythic", "0", "DonPasci"
"2025-07-27 16:00:55", "1561181", "117.72.181.104:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 12:00:07", "100", "False", "https://search.censys.io/hosts/117.72.181.104", "AS141679,C2,censys,CHINATELECOM-IDC-BTHBD-AP,CobaltStrike,cs-watermark-666666", "0", "DonPasci"
"2025-07-25 10:51:18", "1560617", "47.236.130.154:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:16", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-19 12:49:30", "1558329", "103.125.248.109:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:12", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-18 12:51:20", "1558066", "193.112.84.248:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-12 00:01:36", "1556099", "51.81.171.234:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:24", "100", "False", "https://search.censys.io/hosts/51.81.171.234", "AS16276,C2,censys,Havoc,OVH", "0", "DonPasci"
"2025-07-11 12:53:20", "1555968", "175.178.77.207:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-07 20:54:20", "1554340", "88.129.147.201:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:45:41", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-07-06 20:00:32", "1554064", "8.152.99.85:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:07", "100", "False", "https://search.censys.io/hosts/8.152.99.85", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2025-07-02 04:02:12", "1552208", "146.70.87.96:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:30", "100", "False", "https://search.censys.io/hosts/146.70.87.96", "AdaptixC2,AS9009,C2,censys,M247", "0", "DonPasci"
"2025-07-01 04:02:16", "1551843", "38.132.122.141:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:02", "100", "False", "https://search.censys.io/hosts/38.132.122.141", "AdaptixC2,AS9009,C2,censys,M247", "0", "DonPasci"
"2025-07-01 00:02:11", "1551795", "146.70.87.237:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:30", "100", "False", "https://search.censys.io/hosts/146.70.87.237", "AdaptixC2,AS9009,C2,censys,M247", "0", "DonPasci"
"2025-06-28 10:54:22", "1550784", "116.205.143.204:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-06-28 08:51:18", "1550284", "54.38.94.225:8886", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:45:25", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-06-26 13:03:23", "1549426", "217.154.212.25:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:10", "50", "False", "https://www.shodan.io/host/217.154.212.25#8443", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2025-06-25 04:00:19", "1549030", "156.227.233.153:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:10", "100", "False", "https://search.censys.io/hosts/156.227.233.153", "AS138152,C2,censys", "0", "dyingbreeds_"
"2025-06-23 12:02:20", "1548628", "102.117.168.208:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:03", "100", "False", "https://search.censys.io/hosts/102.117.168.208", "AS23889,C2,censys,MauritiusTelecom,Mythic", "0", "DonPasci"
"2025-06-20 20:02:50", "1548104", "158.158.0.196:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:40", "100", "False", "https://search.censys.io/hosts/158.158.0.196", "AS8075,C2,censys,MICROSOFT-CORP-MSN-AS-BLOCK,Mythic", "0", "DonPasci"
"2025-06-20 06:01:32", "1547925", "82.156.156.160:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:07", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2025-06-19 00:02:44", "1546420", "158.158.0.196:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:40", "100", "False", "https://search.censys.io/hosts/158.158.0.196", "AS8075,C2,censys,MICROSOFT-CORP-MSN-AS-BLOCK,Mythic", "0", "DonPasci"
"2025-06-18 08:02:37", "1546246", "191.93.118.254:9000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:06", "75", "False", "https://bazaar.abuse.ch/sample/9265a6e0b26a240f1f8bffddf3b36d0e533919d0c894bd66839a90e351961464/", "AsyncRAT,RAT", "0", "abuse_ch"
"2025-06-18 07:58:54", "1546232", "191.93.118.254:8848", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:44:06", "75", "False", "https://bazaar.abuse.ch/sample/6ecbf71d231e9b9e7459b97c97d94aed467481b5b4f22af288bbaea5945c1af4/", "AsyncRAT,RAT", "0", "abuse_ch"
"2025-06-17 03:12:25", "1545615", "8.147.128.54:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-06-16 20:02:54", "1545575", "38.132.122.145:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:02", "100", "False", "https://search.censys.io/hosts/38.132.122.145", "AdaptixC2,AS9009,C2,censys,M247", "0", "DonPasci"
"2025-06-16 08:02:52", "1545236", "23.227.199.61:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:51", "100", "False", "https://search.censys.io/hosts/23.227.199.61", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2025-06-14 04:02:35", "1544669", "23.227.203.246:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:52", "100", "False", "https://search.censys.io/hosts/23.227.203.246", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2025-06-13 20:01:30", "1544612", "47.109.48.57:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:08", "100", "False", "https://search.censys.io/hosts/47.109.48.57", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-06-12 08:56:19", "1544039", "39.104.78.25:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:09", "100", "False", "https://search.censys.io/hosts/39.104.78.25", "AS37963,C2,censys", "0", "dyingbreeds_"
"2025-06-10 16:01:13", "1543390", "8.155.0.238:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:07", "100", "False", "https://search.censys.io/hosts/8.155.0.238", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-06-10 00:02:13", "1543182", "23.227.203.190:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:51", "100", "False", "https://search.censys.io/hosts/23.227.203.190", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2025-06-08 21:18:40", "1542809", "38.132.122.161:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:45:03", "100", "False", "https://search.censys.io/hosts/38.132.122.161", "AdaptixC2,AS9009,C2,censys,M247", "0", "DonPasci"
"2025-06-08 21:18:39", "1542806", "146.70.87.64:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:43:30", "100", "False", "https://search.censys.io/hosts/146.70.87.64", "AdaptixC2,AS9009,C2,censys,M247", "0", "DonPasci"
"2025-06-08 21:18:37", "1542802", "23.227.203.128:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:51", "100", "False", "https://search.censys.io/hosts/23.227.203.128", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2025-06-08 21:18:37", "1542804", "23.227.203.191:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-10-03 11:44:51", "100", "False", "https://search.censys.io/hosts/23.227.203.191", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2025-06-08 20:45:49", "1542784", "162.248.224.223:7882", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:44", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-06-08 20:45:48", "1542783", "162.248.224.223:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:44", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-06-08 20:01:01", "1542759", "119.45.29.172:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:17", "100", "False", "https://search.censys.io/hosts/119.45.29.172", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2025-06-06 16:00:50", "1541652", "68.64.176.42:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:08", "100", "False", "https://search.censys.io/hosts/68.64.176.42", "AS139659,C2,censys,CobaltStrike,cs-watermark-391144938,LUCID-AS-AP", "0", "DonPasci"
"2025-06-02 12:01:04", "1538881", "193.239.85.15:2083", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:44:11", "100", "False", "https://search.censys.io/hosts/193.239.85.15", "AS9009,C2,censys,Havoc,M247", "0", "DonPasci"
"2025-06-02 05:47:28", "1538799", "47.109.198.8:6000", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:15", "50", "False", "https://www.shodan.io/host/47.109.198.8#6000", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2025-06-01 08:52:56", "1538358", "54.38.94.225:8885", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:45:25", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-05-31 07:45:39", "1537676", "101.43.91.156:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:18", "75", "False", "https://x.com/abodovic1", "c2,censys,CobaltStrike", "0", "Abodovic"
"2025-05-31 07:45:38", "1537678", "59.110.7.32:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:13", "75", "False", "https://x.com/abodovic1", "c2,censys,CobaltStrike", "0", "Abodovic"
"2025-05-30 08:53:21", "1536850", "99.112.198.249:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:45:51", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-05-30 08:00:11", "1536831", "129.28.85.210:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:10", "100", "False", "https://search.censys.io/hosts/129.28.85.210", "AS45090,C2,censys,CobaltStrike,cs-watermark-666666666,TENCENT-NET-AP", "0", "DonPasci"
"2025-05-30 02:55:17", "1536730", "111.229.4.108:2096", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-05-29 22:26:34", "1536683", "161.35.176.231:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:44", "100", "False", "https://search.censys.io/hosts/161.35.176.231", "AS14061,C2,censys,DIGITALOCEAN-ASN,Havoc", "0", "DonPasci"
"2025-05-28 08:01:49", "1535962", "217.154.212.25:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:46:10", "100", "False", "https://search.censys.io/hosts/217.154.212.25", "AS8560,C2,censys,IONOS-AS,Mythic", "0", "DonPasci"
"2025-05-27 16:54:47", "1535294", "101.37.236.20:1111", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:57", "50", "False", "https://www.shodan.io/host/101.37.236.20#1111", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2025-05-26 06:29:51", "1534703", "38.54.23.241:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:45:05", "100", "False", "https://search.censys.io/hosts/38.54.23.241", "AS138915,C2,censys,KAOPU-HK,Pupy,RAT", "0", "DonPasci"
"2025-05-24 20:01:31", "1533613", "221.132.29.137:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:49", "100", "False", "https://search.censys.io/hosts/221.132.29.137", "AS45899,C2,censys,Mythic,VNPT-AS-VN", "0", "DonPasci"
"2025-05-24 11:13:44", "1533071", "1.15.174.189:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:12", "75", "False", "https://x.com/abodovic1", "c2,censys,CobaltStrike", "0", "Abodovic"
"2025-05-23 05:34:51", "1532332", "8.140.239.162:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:13", "75", "False", "https://x.com/abodovic1", "c2,censys,CobaltStrike", "0", "Abodovic"
"2025-05-22 12:58:28", "1532168", "159.75.146.232:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:06", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-05-21 08:00:35", "1527752", "117.72.206.39:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:17", "100", "False", "https://search.censys.io/hosts/117.72.206.39", "AS141679,C2,censys,CHINATELECOM-IDC-BTHBD-AP,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2025-05-20 06:37:42", "1526357", "106.54.61.188:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:11", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2025-05-18 15:34:22", "1525250", "124.223.114.203:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:11", "100", "False", "https://intelinsights.substack.com/p/from-939-to-85-hunting-cobalt-strike", "censys,cobaltstrike", "0", "orlof_v"
"2025-05-17 14:42:08", "1524773", "167.99.51.2:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:43:46", "50", "False", "https://www.shodan.io/host/167.99.51.2#31337", "c2,shodan,sliver", "0", "juroots"
"2025-05-17 08:00:32", "1524641", "167.99.51.2:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:43:47", "100", "False", "https://search.censys.io/hosts/167.99.51.2", "AS14061,C2,censys,DIGITALOCEAN-ASN,Sliver", "0", "DonPasci"
"2025-05-17 06:26:23", "1524319", "101.35.109.246:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:12", "50", "False", "https://www.shodan.io/host/101.35.109.246#443", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2025-05-15 21:14:57", "1523466", "103.171.35.26:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:12", "75", "False", "https://x.com/abodovic1", "c2,censys,cobalt_strike", "0", "Abodovic"
"2025-05-15 21:14:47", "1523462", "60.204.169.16:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:13", "75", "False", "https://x.com/abodovic1", "c2,censys,cobalt_strike", "0", "Abodovic"
"2025-05-15 21:13:56", "1523434", "179.43.186.223:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:10", "75", "False", "https://x.com/abodovic1", "c2,censys,cobalt_strike", "0", "Abodovic"
"2025-05-15 06:10:52", "1523280", "45.133.180.138:6432", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:09", "75", "False", "https://bazaar.abuse.ch/sample/b6185d4054c5a08141db4c3fb5e43369ea21af5892d8ba47628e23f37f79250d/", "asyncrat", "0", "abuse_ch"
"2025-05-12 20:58:42", "1520343", "38.54.112.234:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:12", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-05-09 05:36:03", "1518529", "47.108.140.10:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:21", "100", "False", "https://search.censys.io/hosts/47.108.140.10", "AS37963,censys,Viper", "0", "dyingbreeds_"
"2025-05-07 13:00:19", "1518023", "106.52.207.50:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-05-05 12:00:30", "1516140", "107.173.4.16:2561", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 04:04:50", "100", "False", "https://search.censys.io/hosts/107.173.4.16", "AS-COLOCROSSING,AS36352,C2,censys,RAT,Remcos", "0", "DonPasci"
"2025-04-29 08:53:29", "1513590", "54.38.94.225:8882", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:45:25", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-04-29 08:43:42", "1513585", "107.143.144.154:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:43:12", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-04-26 20:01:51", "1511917", "181.206.158.190:1000", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:43:55", "100", "False", "https://search.censys.io/hosts/181.206.158.190", "AS27831,C2,censys,Colombia,DcRAT,RAT", "0", "DonPasci"
"2025-04-23 12:58:59", "1510481", "114.132.180.69:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-04-22 12:21:47", "1509966", "167.71.13.103:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:43:46", "50", "False", "https://www.shodan.io/host/167.71.13.103#31337", "c2,shodan,sliver", "0", "juroots"
"2025-04-18 08:02:32", "1493521", "77.73.129.82:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:33", "100", "False", "https://search.censys.io/hosts/77.73.129.82", "AS201814,C2,censys,MEVSPACE,Mythic", "0", "DonPasci"
"2025-04-16 16:01:35", "1492480", "113.45.253.80:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:45:59", "100", "False", "https://search.censys.io/hosts/113.45.253.80", "AS55990,C2,censys,CobaltStrike,cs-watermark-666666666,HWCSNET", "0", "DonPasci"
"2025-04-15 16:02:30", "1492012", "47.83.134.97:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:21", "100", "False", "https://search.censys.io/hosts/47.83.134.97", "ALIBABA-CN-NET,AS45102,C2,censys,Havoc", "0", "DonPasci"
"2025-04-10 05:55:49", "1486437", "167.71.13.103:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:43:46", "90", "False", "https://search.censys.io/hosts/167.71.13.103", "AS14061,C2,censys,DIGITALOCEAN-ASN", "0", "dyingbreeds_"
"2025-04-02 10:08:14", "1463173", "38.46.218.36:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-10-03 03:28:34", "100", "False", "None", "Vo1d", "0", "Bitsight"
"2025-04-02 10:08:13", "1463174", "38.46.218.38:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-10-03 09:30:15", "100", "False", "None", "Vo1d", "0", "Bitsight"
"2025-04-02 10:08:12", "1463176", "38.46.218.39:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-10-03 11:00:19", "100", "False", "None", "Vo1d", "0", "Bitsight"
"2025-04-01 10:24:30", "1462468", "43.143.229.126:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:09", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2025-03-24 06:29:33", "1457513", "103.142.147.17:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:07", "100", "False", "https://search.censys.io/hosts/103.142.147.17", "AS135581,censys,Viper", "0", "dyingbreeds_"
"2025-03-22 20:43:16", "1454148", "103.142.147.18:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-01 18:43:07", "75", "False", "None", "drb-ra,RAT", "0", "abuse_ch"
"2025-03-20 12:01:27", "1452404", "47.116.208.81:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:14", "100", "False", "https://search.censys.io/hosts/47.116.208.81", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2025-03-06 04:01:35", "1441769", "51.81.171.234:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:24", "100", "False", "https://search.censys.io/hosts/51.81.171.234", "AS16276,C2,censys,Havoc,OVH", "0", "DonPasci"
"2025-03-03 12:01:16", "1440087", "15.204.95.228:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:32", "100", "False", "https://search.censys.io/hosts/15.204.95.228", "AS16276,C2,censys,Havoc,OVH", "0", "DonPasci"
"2025-03-02 08:46:23", "1439368", "54.38.94.225:8887", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:45:25", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-03-01 20:47:46", "1439168", "47.129.171.26:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:16", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-02-19 04:01:34", "1414853", "54.95.208.190:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:25", "100", "False", "https://search.censys.io/hosts/54.95.208.190", "AMAZON-02,AS16509,C2,censys,Havoc", "0", "DonPasci"
"2025-02-10 20:43:10", "1409420", "103.215.81.156:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:07", "75", "False", "None", "drb-ra,RAT", "0", "abuse_ch"
"2025-02-05 22:51:06", "1404178", "20.74.209.192:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-31 13:44:30", "1398820", "162.252.173.12:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:44", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-31 12:01:38", "1398810", "162.252.173.12:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:44", "100", "False", "https://search.censys.io/hosts/162.252.173.12", "AS9009,backdoor,C2,censys,M247,Ransomhub", "0", "DonPasci"
"2025-01-30 08:47:19", "1396136", "38.146.28.93:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:45:03", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-30 08:45:48", "1396135", "185.33.86.15:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:44:01", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-30 08:01:38", "1396130", "38.146.28.93:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:45:03", "100", "False", "https://search.censys.io/hosts/38.146.28.93", "AS174,backdoor,C2,censys,COGENT-174,Ransomhub", "0", "DonPasci"
"2025-01-30 04:01:31", "1396102", "185.33.86.15:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:44:01", "100", "False", "https://search.censys.io/hosts/185.33.86.15", "AS202015,backdoor,C2,censys,HZ-US-AS,Ransomhub", "0", "DonPasci"
"2025-01-26 08:46:00", "1394408", "54.38.94.225:8883", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:45:25", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-01-25 20:47:04", "1394158", "54.38.94.225:8880", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:45:25", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-01-17 09:14:13", "1384920", "167.99.139.231:8003", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:43:46", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-01-17 09:14:13", "1384921", "167.99.139.231:8004", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-10-03 11:43:46", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-01-17 09:13:19", "1384912", "185.174.101.240:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:56", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:13:19", "1384913", "185.174.101.240:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:57", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:13:19", "1384914", "185.174.101.69:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:57", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:13:19", "1384915", "185.174.101.69:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:57", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:12:27", "1384910", "108.181.182.143:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:14", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:12:27", "1384911", "108.181.182.143:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-10-03 11:43:14", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-13 19:38:30", "1383107", "194.180.48.18:45265", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-10-03 09:39:56", "50", "False", "", "c2,remcos", "0", "juroots"
"2025-01-10 13:55:47", "1381420", "77.238.236.123:18300", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:45:33", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-01-10 13:43:51", "1381067", "112.5.58.181:7001", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-10-03 11:43:16", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-01-10 08:18:57", "1380635", "8.219.78.159:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:18", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:18:43", "1380629", "70.34.196.238:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:17", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:18:28", "1380607", "47.98.134.252:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:16:21", "1380446", "139.180.189.95:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:03", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:15:44", "1380421", "118.25.91.151:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:17", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2024-12-24 08:00:43", "1359401", "8.153.97.202:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:06", "100", "False", "https://search.censys.io/hosts/8.153.97.202", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2024-12-24 04:01:34", "1359309", "91.199.154.103:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:43", "100", "False", "https://search.censys.io/hosts/91.199.154.103", "AS62212,C2,censys,Sliver", "0", "DonPasci"
"2024-12-24 00:02:17", "1359295", "54.95.208.190:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:25", "100", "False", "https://search.censys.io/hosts/54.95.208.190", "AMAZON-02,AS16509,C2,censys,Havoc", "0", "DonPasci"
"2024-12-21 07:32:55", "1358903", "111.170.148.134:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:15", "100", "False", "https://search.censys.io/hosts/111.170.148.134", "AS4134,censys,Viper", "0", "dyingbreeds_"
"2024-12-20 16:01:53", "1358842", "149.28.61.158:8773", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:31", "100", "False", "https://search.censys.io/hosts/149.28.61.158", "AS-VULTR,AS20473,C2,censys,Mythic", "0", "DonPasci"
"2024-12-19 12:01:50", "1358518", "102.117.162.232:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:02", "100", "False", "https://search.censys.io/hosts/102.117.162.232", "AS23889,C2,censys,MauritiusTelecom,Mythic", "0", "DonPasci"
"2024-12-12 06:21:40", "1356002", "113.44.90.0:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-02 18:43:17", "100", "False", "https://search.censys.io/hosts/113.44.90.0", "AS55990,censys,Viper", "0", "dyingbreeds_"
"2024-12-06 07:36:52", "1352876", "139.196.126.161:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:16", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2024-11-30 20:06:19", "1349567", "216.118.101.24:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:36", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-30 20:06:11", "1349531", "216.118.101.132:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:27", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-30 20:06:08", "1349510", "216.118.101.199:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:33", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-30 20:06:04", "1349492", "216.118.101.216:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:34", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-30 20:05:53", "1349445", "113.44.89.87:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:16", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-30 20:05:51", "1349438", "216.118.101.54:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:40", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-29 13:56:30", "1348902", "216.118.101.108:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:26", "100", "False", "", "Viper", "0", "dyingbreeds_"
"2024-11-27 19:47:54", "1348295", "47.90.142.15:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:13", "100", "False", "", "censys,CobaltStrike", "0", "NDA0E"
"2024-11-27 19:47:07", "1348026", "8.137.114.210:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:08", "100", "False", "", "censys,CobaltStrike", "0", "NDA0E"
"2024-10-30 17:53:55", "1340201", "146.70.158.198:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:43:29", "75", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Sliver%20C2", "c2,sliver,sliverc2", "0", "TheRavenFile"
"2024-10-02 06:31:45", "1332624", "154.221.17.44:2888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:05", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2024-10-01 16:02:09", "1332328", "195.100.198.220:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:44:14", "100", "False", "https://search.censys.io/hosts/195.100.198.220", "AS5400,BT,C2,censys,Mythic", "0", "DonPasci"
"2024-09-27 16:02:26", "1330880", "45.74.34.32:1995", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-10-03 11:45:18", "100", "False", "https://search.censys.io/hosts/45.74.34.32", "AS9009,C2,censys,DcRAT,M247,RAT", "0", "DonPasci"
"2024-09-25 08:00:47", "1329042", "118.25.148.25:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:11", "100", "False", "https://search.censys.io/hosts/118.25.148.25", "AS45090,C2,censys,CobaltStrike,cs-watermark-391144938,TENCENT-NET-AP", "0", "DonPasci"
"2024-09-01 12:00:42", "1319266", "154.221.17.44:2666", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:05", "100", "False", "https://search.censys.io/hosts/154.221.17.44", "AS142403,C2,censys,CobaltStrike,cs-watermark-666666666,YISUCLOUDLTD-HK", "0", "DonPasci"
"2024-08-22 10:04:33", "1314694", "83.229.120.73:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:45:38", "100", "False", "https://search.censys.io/hosts/83.229.120.73", "AS139659,C2,censys,Mythic", "0", "DonPasci"
"2024-08-11 21:50:57", "1309755", "146.70.158.198:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:43:29", "100", "False", "https://search.censys.io/hosts/146.70.158.198", "AS9009,C2,censys,M247", "0", "DonPasci"
"2024-07-09 19:05:36", "1296480", "43.138.0.179:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:09", "100", "False", "None", "CobaltStrike,cs-watermark-0,TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2024-07-01 10:05:19", "1291411", "61.96.204.117:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-10-03 11:45:26", "50", "False", "https://search.censys.io/hosts/61.96.204.117", "DREAMX-AS DREAMLINE CO.,NetSupportRAT", "0", "drb_ra"
"2024-06-22 06:45:48", "1287670", "91.199.154.103:34211", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-10-03 11:45:43", "50", "False", "https://search.censys.io/hosts/91.199.154.103", "Sliver", "0", "drb_ra"
"2024-06-02 08:38:33", "1278172", "119.91.208.190:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:20", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2024-06-01 13:08:25", "1277937", "47.109.69.135:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:21", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Hangzhou Alibaba Advertising Co.Ltd.", "0", "drb_ra"
"2024-05-31 12:57:33", "1277588", "101.43.32.212:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:19", "100", "False", "None", "CobaltStrike,cs-watermark-100000,Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2024-05-29 12:52:55", "1276802", "124.223.41.181:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:20", "100", "False", "None", "CobaltStrike,cs-watermark-666666666,Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2024-05-29 10:17:04", "1276786", "8.210.9.201:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:22", "100", "False", "None", "ALIBABA-CN-NET Alibaba US Technology Co. Ltd.,CobaltStrike,cs-watermark-0", "0", "drb_ra"
"2024-05-24 13:15:35", "1274726", "47.92.127.53:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:21", "100", "False", "None", "CobaltStrike,cs-watermark-391144938,Hangzhou Alibaba Advertising Co.Ltd.", "0", "drb_ra"
"2024-05-23 18:47:48", "1274576", "38.242.151.91:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:04", "50", "False", "https://search.censys.io/hosts/38.242.151.91", "CONTABO,Havoc", "0", "drb_ra"
"2024-05-22 11:06:58", "1273973", "119.28.83.149:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:20", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2024-05-21 18:51:48", "1273882", "51.15.16.116:443", "ip:port", "botnet_cc", "js.fakeupdates", "FakeUpdate,GhoLoader,SocGholish", "FAKEUPDATES", "2026-10-03 11:45:23", "50", "False", "https://search.censys.io/hosts/51.15.16.116", "Online SAS,SocGholish", "0", "drb_ra"
"2024-05-21 12:53:29", "1273456", "139.159.203.44:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:20", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,HWCSNET Huawei Cloud Service data center", "0", "drb_ra"
"2024-05-19 07:56:13", "1272788", "123.58.198.236:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:20", "100", "False", "None", "CobaltStrike,cs-watermark-391144938,UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED", "0", "drb_ra"
"2024-05-15 22:13:26", "1271606", "91.238.181.235:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:22", "100", "False", "None", "CobaltStrike,cs-watermark-674054486,FBWNETWORKS", "0", "drb_ra"
"2024-05-15 15:33:07", "1271347", "118.25.85.198:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:17", "100", "False", "https://search.censys.io/hosts/118.25.85.198", "AS45090,c2,censys,CobaltStrike,cs-watermark-305419896,TENCENT-NET-AP", "0", "DonPasci"
"2024-05-14 10:14:21", "1270684", "64.7.198.58:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:21", "100", "False", "None", "BLNWX,CobaltStrike,cs-watermark-426352781", "0", "drb_ra"
"2024-05-11 22:47:31", "1269727", "113.31.105.33:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:19", "100", "False", "None", "China Telecom (Group),CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-05-11 22:47:10", "1269724", "185.196.8.18:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:21", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Simple Carrier LLC", "0", "drb_ra"
"2024-05-07 10:14:57", "1267565", "113.31.106.106:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:19", "100", "False", "None", "CHINANET-SHANGHAI-MAN China Telecom Group,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-05-07 07:48:08", "1267486", "111.230.12.238:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:19", "100", "False", "https://search.censys.io/hosts/111.230.12.238", "AS45090,c2,censys,CobaltStrike,cs-watermark-391144938,TENCENT-NET-AP", "0", "DonPasci"
"2024-05-06 12:49:25", "1266959", "134.122.130.186:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:20", "100", "False", "None", "BGPNET Global ASN,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-04-29 12:51:26", "1263972", "134.122.130.181:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:20", "100", "False", "None", "BGPNET Global ASN,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-04-28 17:59:06", "1263319", "124.71.106.234:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:20", "100", "False", "None", "CobaltStrike,cs-watermark-666666666,Huawei Cloud Service data center", "0", "drb_ra"
"2024-04-26 12:59:31", "1262666", "118.31.116.9:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:20", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Hangzhou Alibaba Advertising Co.Ltd.", "0", "drb_ra"
"2024-04-25 22:12:56", "1262568", "8.134.11.7:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:21", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-04-24 13:08:20", "1261845", "165.227.108.186:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:20", "100", "False", "None", "CobaltStrike,cs-watermark-970865301,DigitalOcean LLC", "0", "drb_ra"
"2024-04-23 18:05:49", "1260893", "80.66.75.9:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:22", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,GRIZ-INET-SERVICE", "0", "drb_ra"
"2024-04-23 18:05:43", "1260890", "101.201.54.74:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:19", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Hangzhou Alibaba Advertising Co.Ltd.", "0", "drb_ra"
"2024-04-21 15:09:17", "1259796", "62.204.41.11:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:21", "100", "False", "https://search.censys.io/hosts/62.204.41.11", "AS59425,c2,censys,CobaltStrike,cs-watermark-1580103824,HORIZONMSK-AS", "0", "DonPasci"
"2024-04-02 10:17:26", "1252542", "185.196.10.121:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:21", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,SIMPLECARRIER", "0", "drb_ra"
"2024-03-30 07:11:21", "1251779", "116.62.34.159:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:00", "100", "False", "https://search.censys.io/search?resource=hosts&virtual_hosts=EXCLUDE&q=%28services.software.uniform_resource_identifier%3A+%60cpe%3A2.3%3Aa%3Afortra%3Acobalt_strike%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%60%29+and+autonomous_system.name%3D%60ALIBABA-CN-NET+Hangzhou+Alibaba+Advertising+Co.%2CLtd.%60", "ALIBABA-CN-NET,AS37963,c2,censys,CobaltStrike", "0", "DonPasci"
"2024-03-27 07:57:29", "1249815", "47.105.69.34:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:21", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-03-09 20:54:40", "1245476", "47.100.87.177:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:21", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-03-06 20:55:37", "1244781", "194.165.16.55:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:21", "100", "False", "None", "CobaltStrike,cs-watermark-674054486,FLYSERVERS-ENDCLIENTS", "0", "drb_ra"
"2024-02-21 22:13:19", "1241656", "121.43.55.149:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:20", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike,cs-watermark-391144938", "0", "drb_ra"
"2024-02-02 06:00:13", "1236276", "20.56.70.245:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:21", "80", "False", "None", "None", "0", "malpulse"
"2024-01-27 14:31:40", "1234928", "114.55.133.151:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:20", "100", "False", "https://search.censys.io/hosts/114.55.133.151", "AS37963,C2,censys", "0", "thehappydinoa"
"2024-01-24 18:49:24", "1234304", "38.147.189.199:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:45:03", "50", "False", "https://search.censys.io/hosts/38.147.189.199", "Pupy RAT,XNNET", "0", "drb_ra"
"2024-01-13 06:47:25", "1230478", "164.92.79.49:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:45", "50", "False", "https://search.censys.io/hosts/164.92.79.49", "DIGITALOCEAN-ASN,Havoc", "0", "drb_ra"
"2024-01-10 06:48:44", "1229818", "130.51.20.64:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:43:21", "50", "False", "https://search.censys.io/hosts/130.51.20.64", "Pupy RAT,TZULO", "0", "drb_ra"
"2024-01-10 06:48:20", "1229817", "161.35.239.147:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:43:44", "50", "False", "https://search.censys.io/hosts/161.35.239.147", "DIGITALOCEAN-ASN,Havoc", "0", "drb_ra"
"2024-01-09 08:45:29", "1229661", "111.92.243.236:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:19", "100", "False", "None", "CobaltStrike,cs-watermark-666666666,HFTCL-AS-AP High Family Technology Co. Limited", "0", "drb_ra"
"2024-01-09 05:30:32", "1229599", "82.65.19.134:4443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-10-03 11:45:38", "100", "False", "https://search.censys.io/hosts/82.65.19.134", "C2,censys,PROXAD,RAT", "0", "thehappydinoa"
"2024-01-05 21:31:13", "1228458", "139.9.62.19:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:20", "100", "False", "https://search.censys.io/hosts/139.9.62.19", "C2,censys", "0", "thehappydinoa"
"2024-01-02 14:31:12", "1227297", "106.54.209.36:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:19", "100", "False", "https://search.censys.io/hosts/106.54.209.36", "C2,censys", "0", "thehappydinoa"
"2023-12-29 18:48:19", "1226314", "38.147.188.28:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-10-03 11:45:03", "50", "False", "https://search.censys.io/hosts/38.147.188.28", "Pupy RAT,XNNET", "0", "drb_ra"
"2023-12-26 06:46:27", "1223678", "8.140.203.92:7817", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-10-03 11:45:34", "50", "False", "https://search.censys.io/hosts/8.140.203.92", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,Deimos", "0", "drb_ra"
"2023-12-18 05:00:11", "1221451", "62.234.27.204:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:21", "80", "False", "None", "None", "0", "malpulse"
"2023-11-28 13:32:35", "1207072", "60.205.115.92:60000", "ip:port", "botnet_cc", "apk.viper_rat", "None", "Viper RAT", "2026-10-03 11:45:26", "100", "False", "https://search.censys.io/hosts/60.205.115.92", "C2,censys,RAT", "0", "thehappydinoa"
"2023-11-09 17:50:07", "1201144", "101.34.222.38:60000", "ip:port", "botnet_cc", "apk.viper_rat", "None", "Viper RAT", "2026-10-03 11:43:02", "100", "False", "https://search.censys.io/hosts/101.34.222.38", "C2,censys,RAT", "0", "thehappydinoa"
"2023-10-24 10:39:59", "1192255", "139.155.148.131:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:20", "100", "False", "https://search.censys.io/hosts/139.155.148.131", "C2,censys", "0", "thehappydinoa"
"2023-10-11 12:59:56", "1187462", "117.72.8.192:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:20", "100", "False", "https://search.censys.io/hosts/117.72.8.192", "C2,censys", "0", "thehappydinoa"
"2023-09-30 16:12:13", "1180378", "111.229.187.212:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:19", "80", "False", "None", "None", "0", "malpulse"
"2023-09-20 18:47:20", "1165172", "8.217.217.243:8082", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-10-03 11:45:34", "50", "False", "https://search.censys.io/hosts/8.217.217.243", "ALIBABA-CN-NET Alibaba US Technology Co. Ltd.,Deimos", "0", "drb_ra"
"2023-09-05 21:52:59", "1155319", "43.136.38.59:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:21", "100", "False", "None", "CobaltStrike,cs-watermark-1580103824,Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2023-08-25 06:48:54", "1151932", "77.74.208.123:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-10-03 11:45:33", "50", "False", "https://search.censys.io/hosts/77.74.208.123", "BRETAGNETELECOM,Havoc", "0", "drb_ra"
"2023-08-23 11:56:21", "1151693", "43.153.222.28:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:14", "100", "False", "None", "CobaltStrike,cs-watermark-100000,Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2023-06-28 22:51:22", "1134787", "1.15.248.225:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:19", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2023-05-04 06:46:43", "1110863", "39.106.36.96:443", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-10-03 11:45:06", "50", "False", "https://search.censys.io/hosts/39.106.36.96", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,Deimos", "0", "drb_ra"
"2023-05-04 06:46:41", "1110862", "36.95.131.171:9091", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-10-03 11:45:00", "50", "False", "https://search.censys.io/hosts/36.95.131.171", "Deimos,TELKOMNET-AS-AP PT Telekomunikasi Indonesia", "0", "drb_ra"
"2023-05-04 06:46:35", "1110860", "18.162.155.202:443", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-10-03 11:43:54", "50", "False", "https://search.censys.io/hosts/18.162.155.202", "AMAZON-02,Deimos", "0", "drb_ra"
"2023-05-04 06:46:33", "1110859", "8.218.26.114:443", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-10-03 11:45:34", "50", "False", "https://search.censys.io/hosts/8.218.26.114", "ALIBABA-CN-NET Alibaba US Technology Co. Ltd.,Deimos", "0", "drb_ra"
"2023-05-04 06:46:30", "1110858", "3.209.12.178:3060", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-10-03 11:44:53", "50", "False", "https://search.censys.io/hosts/3.209.12.178", "AMAZON-AES,Deimos", "0", "drb_ra"
"2023-04-15 12:28:52", "1103771", "77.242.250.36:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:21", "100", "False", "None", "CobaltStrike,cs-watermark-1416875320", "0", "drb_ra"
"2023-02-14 18:50:35", "1080316", "37.119.57.195:9002", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-10-03 11:45:00", "50", "False", "https://search.censys.io/hosts/37.119.57.195", "Brute Ratel C4,VODAFONE-IT-ASN", "0", "drb_ra"
"2023-01-28 09:40:24", "1074894", "164.90.158.199:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-10-03 11:43:45", "50", "False", "https://search.censys.io/hosts/164.90.158.199", "DIGITALOCEAN-ASN,Mythic", "0", "drb_ra"
"2022-12-30 19:48:51", "1064069", "144.217.207.19:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:36", "1063989", "43.129.7.189:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:36", "1063990", "82.156.241.148:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:46:51", "1063804", "164.92.70.225:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:03", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-13 11:43:38", "1036758", "8.212.49.116:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:22", "100", "False", "None", "Alibaba (US) Technology Co. Ltd.,CobaltStrike", "0", "drb_ra"
"2022-09-22 11:26:18", "851096", "34.92.131.12:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:45", "100", "False", "None", "CobaltStrike,Google LLC", "0", "drb_ra"
"2022-09-20 16:58:14", "850706", "87.246.7.38:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:46", "75", "False", "https://twitter.com/1ZRR4H/status/1572261285139714051", "CobaltStrike", "0", "abuse_ch"
"2022-09-17 21:24:41", "850260", "154.22.117.31:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:46", "100", "False", "None", "CobaltStrike,Cogent Communications", "0", "drb_ra"
"2022-09-14 22:07:14", "849761", "198.98.53.34:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:45", "100", "False", "None", "CobaltStrike,PONYNET", "0", "drb_ra"
"2022-08-16 11:38:21", "843546", "47.108.180.121:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:21", "100", "False", "None", "CobaltStrike,Hangzhou Alibaba Advertising Co.Ltd.", "0", "drb_ra"
"2022-07-02 13:06:49", "750750", "42.192.21.181:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:46", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2022-06-28 08:57:21", "730561", "18.117.254.165:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:04", "100", "False", "None", "Amazon.com Inc.,CobaltStrike", "0", "drb_ra"
"2022-06-15 20:53:40", "710534", "85.175.101.203:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:46:19", "100", "False", "None", "CobaltStrike,STC-AS", "0", "drb_ra"
"2022-04-30 19:45:18", "544836", "116.62.185.223:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:04", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
"2022-04-29 19:30:18", "540702", "165.227.180.6:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:06", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-04-25 12:31:07", "532916", "120.26.240.21:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:08", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
"2022-04-23 16:42:50", "530098", "193.29.13.216:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:08", "100", "False", "None", "***************************************,CobaltStrike", "0", "drb_ra"
"2022-04-21 16:54:57", "523516", "45.8.158.25:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:04", "100", "False", "None", "ASBAXETN,CobaltStrike", "0", "drb_ra"
"2022-04-19 13:44:33", "521565", "115.29.171.175:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:08", "100", "False", "None", "CNNIC-ALIBABA-CN-NET-AP Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
"2022-04-18 18:01:52", "521083", "84.32.188.190:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:04", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-04-15 22:57:51", "520317", "137.184.42.85:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:07", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-04-14 16:59:25", "519914", "84.32.188.104:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:04", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-04-13 16:57:52", "519116", "175.41.21.29:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:05", "100", "False", "None", "CobaltStrike,XLC-AS-AP XLC GLOBAL", "0", "drb_ra"
"2022-04-12 16:50:58", "518853", "175.41.16.98:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:08", "100", "False", "None", "CobaltStrike,XLC-AS-AP XLC GLOBAL", "0", "drb_ra"
"2022-04-10 17:05:31", "518404", "138.68.110.227:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:06", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-04-06 22:59:35", "516676", "13.55.118.253:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:04", "100", "False", "None", "AMAZON-02,CobaltStrike", "0", "drb_ra"
"2022-04-05 22:55:20", "493695", "185.186.143.111:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:04", "100", "False", "None", "ASKONTEL,CobaltStrike", "0", "drb_ra"
"2022-04-05 16:53:16", "492845", "194.37.97.153:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:18", "100", "False", "None", "CobaltStrike,M247 Ltd", "0", "drb_ra"
"2022-03-24 22:55:12", "448027", "37.72.172.110:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:05", "100", "False", "None", "CobaltStrike,HVC-AS", "0", "drb_ra"
"2022-03-24 10:56:07", "446029", "1.14.76.111:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:06", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2022-03-23 20:44:05", "443786", "139.60.160.8:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:05", "100", "False", "None", "CobaltStrike,HOSTKEY-USA", "0", "drb_ra"
"2022-03-17 22:47:07", "398650", "152.136.178.142:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:08", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2022-03-06 16:43:33", "392705", "45.12.1.24:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:07", "100", "False", "None", "CobaltStrike,YURTEH-AS", "0", "drb_ra"
"2022-03-05 16:45:53", "392630", "45.12.1.25:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:04", "100", "False", "None", "CobaltStrike,YURTEH-AS", "0", "drb_ra"
"2022-03-05 16:43:28", "392595", "45.12.1.26:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:04", "100", "False", "None", "CLOUDNETWORKS-AS,CobaltStrike", "0", "drb_ra"
"2022-02-22 16:44:41", "390123", "192.241.133.130:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:12", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-22 16:42:29", "390104", "159.65.246.188:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:12", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:58:18", "389873", "68.183.200.63:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:11", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:57:13", "389866", "138.68.227.71:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:11", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:56:32", "389865", "165.227.219.211:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:11", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:55:44", "389864", "165.232.154.73:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:11", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:54:53", "389861", "143.198.110.248:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:11", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:54:15", "389860", "178.128.171.206:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:12", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:53:10", "389853", "165.227.23.218:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:11", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:52:19", "389850", "161.35.137.163:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:11", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:51:26", "389847", "64.227.0.177:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:12", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-20 16:42:59", "389656", "45.55.36.143:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:11", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-09 22:36:37", "384626", "168.61.180.98:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:18", "100", "False", "None", "CobaltStrike,MICROSOFT-CORP-MSN-AS-BLOCK", "0", "drb_ra"
"2022-01-29 22:33:30", "362296", "101.34.182.130:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:08", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2022-01-25 22:30:16", "332687", "192.227.155.185:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:05", "100", "False", "None", "AS-COLOCROSSING,CobaltStrike", "0", "drb_ra"
"2022-01-25 22:29:00", "332653", "146.70.29.233:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:05", "100", "False", "None", "CobaltStrike,M247", "0", "drb_ra"
"2022-01-22 22:25:42", "313943", "107.172.219.129:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:05", "100", "False", "None", "AS-COLOCROSSING,CobaltStrike", "0", "drb_ra"
"2022-01-18 22:32:52", "299262", "193.201.9.229:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:18", "100", "False", "None", "CobaltStrike,SELECTEL", "0", "drb_ra"
"2022-01-15 22:26:20", "295525", "23.227.198.246:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:18", "100", "False", "None", "CobaltStrike,HVC-AS", "0", "drb_ra"
"2022-01-15 10:32:22", "295436", "217.79.243.148:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:18", "100", "False", "None", "CobaltStrike,HVC-AS", "0", "drb_ra"
"2022-01-14 22:28:25", "295353", "149.255.35.131:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:18", "100", "False", "None", "CobaltStrike,HVC-AS", "0", "drb_ra"
"2022-01-13 22:28:33", "294999", "81.68.225.136:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:05", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2022-01-10 16:24:49", "292303", "39.98.48.153:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:42:04", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
"2022-01-07 10:30:52", "291740", "39.104.25.164:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:06", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
"2021-12-16 10:42:30", "276593", "77.83.36.54:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:08", "100", "False", "None", "CobaltStrike,ISI-ASN", "0", "drb_ra"
"2021-12-13 10:06:28", "275144", "101.32.204.81:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:07", "100", "False", "None", "CobaltStrike,TENCENT-NET-AP-CN Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2021-11-22 16:01:01", "252110", "62.113.255.12:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:06", "100", "False", "None", "CobaltStrike,TTM", "0", "drb_ra"
"2021-11-04 17:48:48", "242948", "107.173.89.148:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:06", "100", "False", "None", "AS-COLOCROSSING,CobaltStrike", "0", "drb_ra"
"2021-10-31 17:43:37", "240983", "104.128.92.144:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:18", "100", "False", "None", "CobaltStrike,IT7NET", "0", "drb_ra"
"2021-10-22 12:07:15", "236436", "111.230.196.200:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:06", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2021-10-13 17:43:22", "233476", "23.224.152.139:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:05", "100", "False", "None", "CNSERVERS,CobaltStrike", "0", "drb_ra"
"2021-10-11 23:27:10", "232821", "139.198.183.44:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:06", "100", "False", "None", "CobaltStrike,YUNIFY-NET Yunify Technologies Inc.", "0", "drb_ra"
"2021-10-09 23:36:53", "232263", "121.37.255.60:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:08", "100", "False", "None", "CobaltStrike,HWCSNET Huawei Cloud Service data center", "0", "drb_ra"
"2021-09-18 17:39:24", "223357", "47.95.207.79:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-10-03 11:43:07", "100", "False", "None", "CNNIC-ALIBABA-CN-NET-AP Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
# Number of entries: 3325