################################################################
# ThreatFox IOCs: recent additions - CSV format                #
# Last updated: 2024-12-21 16:01:25 UTC                        #
#                                                              #
# Terms Of Use: https://threatfox.abuse.ch/faq/#tos            #
# For questions please contact threatfox [at] abuse.ch         #
################################################################
#
# "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","reference","tags","anonymous","reporter"
"2024-12-21 16:01:25", "1358942", "46.246.80.12:9000", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "100", "https://search.censys.io/hosts/46.246.80.12", "AS42708,C2,censys,DcRAT,PORTLANE,RAT", "0", "DonPasci"
"2024-12-21 16:00:27", "1358941", "112.124.71.123:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "https://search.censys.io/hosts/112.124.71.123", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2024-12-21 12:25:24", "1358935", "http://195.10.205.157/Public/Pollauth8/TestLocalapi/1Base/Temp/Todumpprovider/7Eternal/game/63multi/29Dump/5/multiHttp0Request/_securebigload.php", "url", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "100", "None", "DCRat", "0", "abuse_ch"
"2024-12-21 12:20:14", "1358934", "https://stem-mellows.cyou/api", "url", "botnet_cc", "win.lumma", "LummaC2 Stealer", "Lumma Stealer", "", "75", "https://bazaar.abuse.ch/sample/36ae8fda3c54b17e1a0609c07aab00a27c435244e19990d45327e21b16455718/", "lumma", "0", "abuse_ch"
"2024-12-21 12:01:55", "1358933", "185.216.71.152:80", "ip:port", "botnet_cc", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "100", "https://search.censys.io/hosts/185.216.71.152", "AS214943,C2,censys,Gafgyt,open-dir,RAILNET", "0", "DonPasci"
"2024-12-21 12:01:27", "1358932", "62.133.63.112:443", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "", "100", "https://search.censys.io/hosts/62.133.63.112", "AS215540,C2,censys,GCS-AS,Hookbot", "0", "DonPasci"
"2024-12-21 11:12:55", "1358930", "95.216.183.108:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "", "Vidar", "0", "crep1x"
"2024-12-21 11:12:55", "1358931", "94.130.188.57:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "", "Vidar", "0", "crep1x"
"2024-12-21 11:12:53", "1358928", "https://95.216.183.108/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "", "Vidar", "0", "crep1x"
"2024-12-21 11:12:53", "1358929", "toptek.sbs", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "", "Vidar", "0", "crep1x"
"2024-12-21 11:12:50", "1358927", "https://toptek.sbs/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "", "Vidar", "0", "crep1x"
"2024-12-21 11:05:27", "1358926", "http://inglesxyz.shop/index.php", "url", "botnet_cc", "win.azorult", "PuffStealer,Rultazo", "Azorult", "", "100", "None", "AZORult", "0", "abuse_ch"
"2024-12-21 10:36:03", "1358924", "212.193.31.8:80", "ip:port", "botnet_cc", "win.amadey", "None", "Amadey", "2024-12-21 16:12:03", "50", "https://tracker.viriback.com/index.php?q=212.193.31.8", "Amadey,ViriBack", "0", "abuse_ch"
"2024-12-21 10:05:26", "1358923", "http://895157cm.nyashteam.ru/videogeoflowertestuniversaldleLocalCentral.php", "url", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "100", "None", "DCRat", "0", "abuse_ch"
"2024-12-21 09:30:26", "1358922", "http://212.193.31.8/3ofn3jf3e2ljk2/index.php", "url", "botnet_cc", "win.amadey", "None", "Amadey", "", "100", "None", "Amadey", "0", "abuse_ch"
"2024-12-21 09:05:19", "1358921", "http://185.230.138.58/video7/Dle/publicupdate/4/GeneratorgeneratorDump/_Async/Flower/asyncSecure52/6Public5/VoiddbJs7/better/temporaryUploads/8/04providerTemporary/TempwpsecureVoiddb/Longpoll7ProtonPrivate/PhpUpdateSqlDatalife.php", "url", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "100", "None", "DCRat", "0", "abuse_ch"
"2024-12-21 08:55:15", "1358920", "http://89.23.96.180/03/authtraffic_1/PythonApi/Linux/8Cdnsecureprotect/multi/1/mariadb7Cdn/24/Lowlongpollvm/ImagepythonRequestLowGeocpuwpTemporary.php", "url", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "100", "None", "DCRat", "0", "abuse_ch"
"2024-12-21 08:03:00", "1358919", "89.213.158.208:80", "ip:port", "botnet_cc", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "100", "https://search.censys.io/hosts/89.213.158.208", "AS-CHRISMUNDS,AS202827,C2,censys,Gafgyt,open-dir", "0", "DonPasci"
"2024-12-21 08:02:22", "1358918", "193.149.129.61:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "https://search.censys.io/hosts/193.149.129.61", "AS399629,BLNWX,C2,censys,kongtuke", "0", "DonPasci"
"2024-12-21 08:02:03", "1358917", "54.170.214.24:5984", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "", "100", "https://search.censys.io/hosts/54.170.214.24", "AMAZON-02,AS16509,C2,censys,Netsupport,RAT", "0", "DonPasci"
"2024-12-21 07:32:59", "1358910", "102.163.24.169:3333", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/102.163.24.169", "AS30999,censys,EMTEL-AS-AP,GoPhish,Phishing", "0", "dyingbreeds_"
"2024-12-21 07:32:59", "1358912", "209.38.232.106:3333", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/209.38.232.106", "AS14061,censys,DIGITALOCEAN-ASN,GoPhish,Phishing", "0", "dyingbreeds_"
"2024-12-21 07:32:58", "1358909", "124.158.5.149:3333", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/124.158.5.149", "AS38732,censys,GoPhish,Phishing", "0", "dyingbreeds_"
"2024-12-21 07:32:58", "1358911", "49.12.243.49:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/49.12.243.49", "AS24940,censys,GoPhish,HETZNER-AS,Phishing", "0", "dyingbreeds_"
"2024-12-21 07:32:57", "1358907", "74.249.105.30:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/74.249.105.30", "AS8075,censys,GoPhish,MICROSOFT-CORP-MSN-AS-BLOCK,Phishing", "0", "dyingbreeds_"
"2024-12-21 07:32:57", "1358908", "142.171.227.21:8082", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/142.171.227.21", "AS35916,censys,GoPhish,MULTA-ASN1,Phishing", "0", "dyingbreeds_"
"2024-12-21 07:32:56", "1358906", "206.189.58.59:3333", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/206.189.58.59", "AS14061,censys,DIGITALOCEAN-ASN,GoPhish,Phishing", "0", "dyingbreeds_"
"2024-12-21 07:32:55", "1358903", "111.170.148.134:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/111.170.148.134", "AS4134,censys,Viper", "0", "dyingbreeds_"
"2024-12-21 07:32:55", "1358904", "124.223.158.49:8090", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/124.223.158.49", "AS45090,censys,GoPhish,Phishing", "0", "dyingbreeds_"
"2024-12-21 07:32:55", "1358905", "89.169.149.6:3333", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/89.169.149.6", "AS200350,censys,GoPhish,Phishing,YANDEXCLOUD", "0", "dyingbreeds_"
"2024-12-21 07:32:54", "1358902", "182.92.232.172:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/182.92.232.172", "AS37963,censys,Viper", "0", "dyingbreeds_"
"2024-12-21 07:32:53", "1358901", "91.200.242.153:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/91.200.242.153", "AS3258,censys,Viper", "0", "dyingbreeds_"
"2024-12-21 07:32:52", "1358900", "101.43.25.107:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/101.43.25.107", "AS45090,censys,Viper", "0", "dyingbreeds_"
"2024-12-21 07:32:51", "1358899", "173.255.204.74:993", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/173.255.204.74", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:50", "1358898", "38.54.118.123:8000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/38.54.118.123", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:49", "1358896", "38.54.118.123:8090", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/38.54.118.123", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:48", "1358897", "38.54.118.123:808", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/38.54.118.123", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:47", "1358894", "38.54.118.123:8080", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/38.54.118.123", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:47", "1358895", "38.54.118.123:8088", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/38.54.118.123", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:46", "1358891", "154.205.147.48:8088", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/154.205.147.48", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:46", "1358892", "154.205.147.48:8089", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/154.205.147.48", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:46", "1358893", "154.205.147.48:8443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/154.205.147.48", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:45", "1358889", "154.205.147.48:8082", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/154.205.147.48", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:45", "1358890", "154.205.147.48:2053", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/154.205.147.48", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:44", "1358887", "154.205.147.48:636", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/154.205.147.48", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:44", "1358888", "154.205.147.48:6008", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/154.205.147.48", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:43", "1358885", "154.205.147.48:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/154.205.147.48", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:43", "1358886", "154.205.147.48:502", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/154.205.147.48", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:42", "1358882", "38.54.116.40:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/38.54.116.40", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:42", "1358883", "38.54.116.40:502", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/38.54.116.40", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:42", "1358884", "38.54.116.40:8000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/38.54.116.40", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:41", "1358877", "154.205.159.186:8000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/154.205.159.186", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:41", "1358881", "38.54.116.40:58000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/38.54.116.40", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:40", "1358879", "38.54.116.40:8080", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/38.54.116.40", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:39", "1358878", "154.205.159.186:9001", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/154.205.159.186", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:39", "1358880", "38.54.116.40:8089", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/38.54.116.40", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:38", "1358876", "154.205.159.186:2095", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/154.205.159.186", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:37", "1358873", "https://premiumprotectiondis.org/webpanel/Panel/login.php", "url", "botnet_cc", "win.gomorrah_stealer", "None", "Gomorrah stealer", "", "100", "None", "AS26619,Epik LLC,gomorrah,GTD COLOMBIA S.A.S", "0", "antiphishorg"
"2024-12-21 07:32:37", "1358875", "154.205.159.186:990", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/154.205.159.186", "AS138915,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-21 07:32:36", "1358874", "ecs-189-1-242-182.compute.hwclouds-dns.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "https://search.censys.io/hosts/189.1.242.182+ecs-189-1-242-182.compute.hwclouds-dns.com", "AS136907,C2,censys", "0", "dyingbreeds_"
"2024-12-21 06:40:07", "1358916", "http://103.199.180.105:40951/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "50", "None", "None", "0", "sicehicetf"
"2024-12-21 06:40:05", "1358915", "http://117.215.129.210:59952/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "50", "None", "None", "0", "sicehicetf"
"2024-12-21 05:50:19", "1358914", "115.231.220.17:65358", "ip:port", "botnet_cc", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "", "100", "None", "Gh0stRAT", "0", "abuse_ch"
"2024-12-21 05:10:14", "1358913", "46.246.86.66:44662", "ip:port", "botnet_cc", "jar.strrat", "None", "STRRAT", "", "100", "None", "STRRAT", "0", "abuse_ch"
"2024-12-21 02:36:02", "1358872", "premiumprotectiondis.org", "domain", "botnet_cc", "win.gomorrah_stealer", "None", "Gomorrah stealer", "2024-12-21 16:12:03", "50", "https://tracker.viriback.com/index.php?q=premiumprotectiondis.org", "Gomorrah,ViriBack", "0", "abuse_ch"
"2024-12-21 00:01:52", "1358871", "www.genghiskhanof21century.online", "domain", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/198.187.31.121+www.genghiskhanof21century.online", "AS22612,C2,censys,NAMECHEAP-NET,panel,Unam", "0", "DonPasci"
"2024-12-21 00:01:38", "1358870", "148.113.165.11:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2024-12-21 05:01:32", "100", "https://search.censys.io/hosts/148.113.165.11", "AS16276,C2,censys,DcRAT,OVH,RAT", "0", "DonPasci"
"2024-12-21 00:01:36", "1358869", "165.154.213.90:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2024-12-21 05:01:29", "100", "https://search.censys.io/hosts/165.154.213.90", "AS142002,C2,censys,L3MON,SCLOUDPTELTD-AS", "0", "DonPasci"
"2024-12-21 00:01:34", "1358868", "mail.172-208-106-5.cprapid.com", "domain", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2024-12-21 05:01:23", "100", "https://search.censys.io/hosts/172.208.106.5+mail.172-208-106-5.cprapid.com", "AS8075,C2,censys,Havoc,MICROSOFT-CORP-MSN-AS-BLOCK", "0", "DonPasci"
"2024-12-21 00:01:29", "1358867", "198.167.199.174:19132", "ip:port", "botnet_cc", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2024-12-21 05:01:14", "100", "https://search.censys.io/hosts/198.167.199.174", "ABSTRACT,AS39287,C2,censys,Quasar,RAT", "0", "DonPasci"
"2024-12-21 00:01:26", "1358866", "78.153.149.187:80", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2024-12-21 05:01:08", "100", "https://search.censys.io/hosts/78.153.149.187", "AS207713,C2,censys,GIR-AS,Hookbot", "0", "DonPasci"
"2024-12-21 00:01:18", "1358865", "20.77.26.137:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2024-12-21 05:00:59", "100", "https://search.censys.io/hosts/20.77.26.137", "AS8075,AsyncRAT,C2,censys,MICROSOFT-CORP-MSN-AS-BLOCK,RAT", "0", "DonPasci"
"2024-12-21 00:00:28", "1358864", "1.94.221.238:4433", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2024-12-21 05:00:35", "100", "https://search.censys.io/hosts/1.94.221.238", "AS55990,C2,censys,CobaltStrike,cs-watermark-987654321,HWCSNET", "0", "DonPasci"
"2024-12-20 21:50:14", "1358863", "http://185.219.81.132/c3d039fb36c40339.php", "url", "botnet_cc", "win.stealc", "None", "Stealc", "", "100", "None", "Stealc", "0", "abuse_ch"
"2024-12-20 20:55:41", "1358862", "121.201.74.246:5000", "ip:port", "botnet_cc", "win.plugx", "Destroy RAT,Kaba,Korplug,Sogu,TIGERPLUG,RedDelta", "PlugX", "", "60", "None", "None", "0", "Rony"
"2024-12-20 20:15:12", "1358861", "http://703648cm.renyash.top/provider_cpugame.php", "url", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "100", "None", "DCRat", "0", "abuse_ch"
"2024-12-20 20:03:37", "1358860", "18.197.151.105:80", "ip:port", "botnet_cc", "win.mimikatz", "None", "MimiKatz", "", "100", "https://search.censys.io/hosts/18.197.151.105", "AMAZON-02,AS16509,C2,censys,hacktool,Mimikatz,open-dir", "0", "DonPasci"
"2024-12-20 20:03:36", "1358859", "167.99.31.61:8080", "ip:port", "botnet_cc", "win.mimikatz", "None", "MimiKatz", "", "100", "https://search.censys.io/hosts/167.99.31.61", "AS14061,C2,censys,DIGITALOCEAN-ASN,hacktool,Mimikatz,open-dir", "0", "DonPasci"
"2024-12-20 20:02:53", "1358858", "195.201.36.118:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2024-12-21 05:01:21", "100", "https://search.censys.io/hosts/195.201.36.118", "AS24940,C2,censys,Havoc,HETZNER-AS", "0", "DonPasci"
"2024-12-20 20:02:52", "1358857", "148.113.201.239:8080", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2024-12-21 05:01:20", "100", "https://search.censys.io/hosts/148.113.201.239", "AS16276,C2,censys,Havoc,OVH", "0", "DonPasci"
"2024-12-20 20:02:40", "1358856", "194.26.192.248:80", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2024-12-21 05:01:07", "100", "https://search.censys.io/hosts/194.26.192.248", "AS210558,C2,censys,Hookbot,SERVICES-1337-GMBH", "0", "DonPasci"
"2024-12-20 20:02:39", "1358855", "217.28.223.79:80", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2024-12-21 05:01:09", "100", "https://search.censys.io/hosts/217.28.223.79", "AS29182,C2,censys,Hookbot,RU-JSCIOT", "0", "DonPasci"
"2024-12-20 20:02:10", "1358854", "67.203.7.131:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2024-12-21 05:00:57", "100", "https://search.censys.io/hosts/67.203.7.131", "AS-COLOAM,AS21769,AsyncRAT,C2,censys,RAT", "0", "DonPasci"
"2024-12-20 20:02:00", "1358853", "44.200.237.10:8443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "", "100", "https://search.censys.io/hosts/44.200.237.10", "AMAZON-AES,AS14618,C2,censys,payload,Sliver", "0", "DonPasci"
"2024-12-20 20:01:30", "1358852", "123.57.74.33:8888", "ip:port", "botnet_cc", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "2024-12-21 05:00:41", "100", "https://search.censys.io/hosts/123.57.74.33", "ALIBABA-CN-NET,AS37963,C2,censys,Gh0st,RAT", "0", "DonPasci"
"2024-12-20 18:40:07", "1358851", "http://59.97.125.78:44272/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "50", "None", "None", "0", "sicehicetf"
"2024-12-20 18:40:04", "1358850", "http://175.107.0.178:57273/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "50", "None", "None", "0", "sicehicetf"
"2024-12-20 18:03:29", "1358848", "83.31.171.13:2002", "ip:port", "botnet_cc", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "75", "None", "njrat,RAT", "0", "SarlackLab"
"2024-12-20 18:03:29", "1358849", "niewiemcodac.ddns.net", "domain", "botnet_cc", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "75", "None", "njrat,RAT", "0", "SarlackLab"
"2024-12-20 16:35:31", "1358847", "104.236.39.42:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "75", "https://bazaar.abuse.ch/sample/bd3db35de8078184822ca8742025e6742deed410880360fd1361ec0ddc339067/", "asyncrat", "0", "abuse_ch"
"2024-12-20 16:35:30", "1358846", "104.236.39.42:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "75", "https://bazaar.abuse.ch/sample/bd3db35de8078184822ca8742025e6742deed410880360fd1361ec0ddc339067/", "asyncrat", "0", "abuse_ch"
"2024-12-20 16:30:13", "1358845", "104.236.39.42:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "100", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2024-12-20 16:25:05", "1358844", "http://185.219.81.132/1089481c07d09d21.php", "url", "botnet_cc", "win.stealc", "None", "Stealc", "", "100", "None", "Stealc", "0", "abuse_ch"
"2024-12-20 16:01:54", "1358843", "108.181.201.168:80", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2024-12-21 05:01:10", "100", "https://search.censys.io/hosts/108.181.201.168", "AS40676,C2,censys,Hookbot", "0", "DonPasci"
"2024-12-20 16:01:53", "1358842", "149.28.61.158:8773", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2024-12-21 05:01:04", "100", "https://search.censys.io/hosts/149.28.61.158", "AS-VULTR,AS20473,C2,censys,Mythic", "0", "DonPasci"
"2024-12-20 16:01:48", "1358840", "http://ohunhebzhbu3.top/1.php", "url", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "https://infosec.exchange/@monitorsg/113685785819659005", "KongTuke", "0", "monitorsg"
"2024-12-20 16:01:37", "1358841", "38.242.146.249:9090", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2024-12-21 05:01:00", "100", "https://search.censys.io/hosts/38.242.146.249", "AS51167,AsyncRAT,C2,censys,CONTABO,RAT", "0", "DonPasci"
"2024-12-20 15:09:38", "1358839", "31.13.224.72:3421", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "", "RemcosRAT", "0", "NDA0E"
"2024-12-20 15:09:28", "1358838", "brideeded.duckdns.org", "domain", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "", "RemcosRAT", "0", "NDA0E"
"2024-12-20 14:36:08", "1358834", "https://hamptoninnbelton.com/work/original.js", "url", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "", "SmartApeSG", "0", "HuntYethHounds"
"2024-12-20 14:36:07", "1358833", "hamptoninnbelton.com", "domain", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "", "SmartApeSG", "0", "HuntYethHounds"
"2024-12-20 14:36:06", "1358835", "https://hamptoninnbelton.com/work/index.php", "url", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "", "SmartApeSG", "0", "HuntYethHounds"
"2024-12-20 14:36:06", "1358836", "https://hamptoninnbelton.com/work/download.php", "url", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "", "SmartApeSG", "0", "HuntYethHounds"
"2024-12-20 14:36:06", "1358837", "https://incms.biz/work/mmmm.zip", "url", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "https://infosec.exchange/@monitorsg/113685643684963784", "SmartApeSG", "0", "monitorsg"
"2024-12-20 12:42:46", "1358830", "https://hdtele.com/6yq3.js", "url", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "https://infosec.exchange/@monitorsg/113685073415457827", "KongTuke", "0", "monitorsg"
"2024-12-20 12:42:44", "1358831", "hdtele.com", "domain", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "https://infosec.exchange/@monitorsg/113685073415457827", "KongTuke", "0", "monitorsg"
"2024-12-20 12:42:44", "1358832", "https://hdtele.com/js.php", "url", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "https://infosec.exchange/@monitorsg/113685073415457827", "KongTuke", "0", "monitorsg"
"2024-12-20 12:02:04", "1358829", "165.154.235.103:80", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2024-12-21 05:01:10", "100", "https://search.censys.io/hosts/165.154.235.103", "AS142002,C2,censys,Hookbot,SCLOUDPTELTD-AS", "0", "DonPasci"
"2024-12-20 12:00:24", "1358828", "8.155.15.46:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2024-12-21 05:00:25", "100", "https://search.censys.io/hosts/8.155.15.46", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-391144938", "0", "DonPasci"
"2024-12-20 10:20:06", "1358808", "ti.twilight.zip", "domain", "botnet_cc", "js.more_eggs", "SpicyOmelette,SKID", "More_eggs", "", "49", "https://www.esentire.com/blog/winos4-0-online-module-staging-component-used-in-cleversoar-campaign", "None", "0", "johannes"
"2024-12-20 10:18:06", "1358826", "51.161.12.215:4449", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "100", "https://x.com/K_N1kolenko/status/1870043853794799709", "AS16276,c2,OVH,rat", "0", "DonPasci"
"2024-12-20 10:18:06", "1358827", "148.163.102.170:4473", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "100", "https://x.com/K_N1kolenko/status/1870043853794799709", "AS53755,c2,IOFLOOD,rat", "0", "DonPasci"
"2024-12-20 10:09:39", "1358823", "185.84.160.131:7000", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "100", "https://x.com/K_N1kolenko/status/1870040754644758593", "AS149766,c2,xworm,YUT-AS-AP", "0", "DonPasci"
"2024-12-20 10:09:39", "1358824", "208.110.72.182:8080", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "100", "https://x.com/K_N1kolenko/status/1870040754644758593", "AS32097,c2,WII,xworm", "0", "DonPasci"
"2024-12-20 10:09:39", "1358825", "212.87.215.19:7000", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "100", "https://x.com/K_N1kolenko/status/1870040754644758593", "AS44486,c2,SYNLINQ,xworm", "0", "DonPasci"
"2024-12-20 10:09:38", "1358819", "38.110.228.43:7000", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "100", "https://x.com/K_N1kolenko/status/1870040754644758593", "AS174,c2,COGENT-174,xworm", "0", "DonPasci"
"2024-12-20 10:09:38", "1358820", "85.209.11.15:4404", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "100", "https://x.com/K_N1kolenko/status/1870040754644758593", "AS57523,c2,CHANGWAY-AS,xworm", "0", "DonPasci"
"2024-12-20 10:09:38", "1358821", "103.82.26.162:7001", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "100", "https://x.com/K_N1kolenko/status/1870040754644758593", "AS135905,c2,VNPT-AS-VN,xworm", "0", "DonPasci"
"2024-12-20 10:09:38", "1358822", "103.232.55.173:7777", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "100", "https://x.com/K_N1kolenko/status/1870040754644758593", "AS63737,c2,VIETSERVER-AS-VN,xworm", "0", "DonPasci"
"2024-12-20 09:05:24", "1358818", "192.74.226.179:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2024-12-20 09:05:23", "1358817", "195.58.51.75:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "None", "CobaltStrike,cs-watermark-1580103824", "0", "abuse_ch"
"2024-12-20 09:05:20", "1358816", "47.108.137.190:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "None", "CobaltStrike,cs-watermark-1580103824", "0", "abuse_ch"
"2024-12-20 09:05:11", "1358815", "101.200.193.211:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "None", "CobaltStrike,cs-watermark-1359593325", "0", "abuse_ch"
"2024-12-20 09:05:09", "1358814", "164.90.170.149:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2024-12-20 09:05:05", "1358813", "114.116.251.123:8088", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2024-12-20 09:04:31", "1358812", "47.93.240.197:65433", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2024-12-20 09:04:08", "1358811", "106.14.148.143:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2024-12-20 09:03:35", "1358810", "111.230.5.199:2096", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "None", "CobaltStrike,cs-watermark-100000", "0", "abuse_ch"
"2024-12-20 09:03:33", "1358809", "107.174.115.223:2053", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2024-12-20 08:02:26", "1358806", "104.248.123.182:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2024-12-21 05:01:21", "100", "https://search.censys.io/hosts/104.248.123.182", "AS14061,C2,censys,DIGITALOCEAN-ASN,Havoc", "0", "DonPasci"
"2024-12-20 08:02:26", "1358807", "ext.delightfulgrass-a1c0fe70.canadaeast.azurecontainerapps.io", "domain", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2024-12-21 05:01:22", "100", "https://search.censys.io/hosts/4.248.11.186+ext.delightfulgrass-a1c0fe70.canadaeast.azurecontainerapps.io", "AS8075,C2,censys,Havoc,MICROSOFT-CORP-MSN-AS-BLOCK", "0", "DonPasci"
"2024-12-20 08:02:17", "1358805", "154.83.16.8:8089", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2024-12-21 05:01:11", "100", "https://search.censys.io/hosts/154.83.16.8", "AS142403,C2,censys,Hookbot,YISUCLOUDLTD-HK", "0", "DonPasci"
"2024-12-20 08:01:22", "1358804", "104.167.16.95:80", "ip:port", "botnet_cc", "win.shadowpad", "POISONPLUG.SHADOW,XShellGhost", "ShadowPad", "2024-12-21 05:00:50", "90", "https://search.censys.io/hosts/104.167.16.95", "AS16276,C2,censys,OVH,RAT,ShadowPad", "0", "DonPasci"
"2024-12-20 08:01:18", "1358803", "87.106.230.64:80", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "", "100", "https://search.censys.io/hosts/87.106.230.64", "AS8560,C2,censys,IONOS-AS,payload,Sliver", "0", "DonPasci"
"2024-12-20 08:01:08", "1358802", "52.59.208.4:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2024-12-21 05:00:46", "100", "https://search.censys.io/hosts/52.59.208.4", "AMAZON-02,AS16509,C2,censys,Sliver", "0", "DonPasci"
"2024-12-20 08:00:23", "1358801", "1.94.221.238:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2024-12-21 05:00:32", "100", "https://search.censys.io/hosts/1.94.221.238", "AS55990,C2,censys,CobaltStrike,cs-watermark-987654321,HWCSNET", "0", "DonPasci"
"2024-12-20 08:00:20", "1358800", "1.94.113.96:50001", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2024-12-21 05:00:18", "100", "https://search.censys.io/hosts/1.94.113.96", "AS55990,C2,censys,CobaltStrike,cs-watermark-987654321,HWCSNET", "0", "DonPasci"
"2024-12-20 07:17:20", "1358799", "https://95.217.29.164/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "", "Vidar", "0", "crep1x"
"2024-12-20 07:17:16", "1358797", "95.217.29.164:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "", "Vidar", "0", "crep1x"
"2024-12-20 07:17:16", "1358798", "116.203.12.114:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "", "Vidar", "0", "crep1x"
"2024-12-20 06:59:20", "1358710", "176.58.127.193:10250", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/176.58.127.193", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:20", "1358711", "176.58.127.193:16146", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/176.58.127.193", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:19", "1358708", "172.104.151.49:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.104.151.49", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:19", "1358709", "176.58.127.193:808", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/176.58.127.193", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:18", "1358705", "45.79.221.60:2701", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/45.79.221.60", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:17", "1358706", "45.79.221.99:1024", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/45.79.221.99", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:16", "1358707", "74.207.229.249:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/74.207.229.249", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:15", "1358703", "178.79.141.204:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/178.79.141.204", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:15", "1358704", "172.105.246.103:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.105.246.103", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:14", "1358701", "45.79.215.249:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/45.79.215.249", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:14", "1358702", "172.105.246.142:502", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.105.246.142", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:13", "1358699", "85.159.209.239:43", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/85.159.209.239", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:13", "1358700", "66.228.34.109:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/66.228.34.109", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:12", "1358697", "88.80.191.156:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/88.80.191.156", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:12", "1358698", "109.237.26.132:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/109.237.26.132", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:11", "1358695", "172.233.228.48:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.233.228.48", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:11", "1358696", "139.162.148.182:113", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/139.162.148.182", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:10", "1358693", "66.228.32.175:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/66.228.32.175", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:10", "1358694", "172.234.44.170:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.234.44.170", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:09", "1358691", "92.84.154.5:6443", "ip:port", "botnet_cc", "win.ares", "None", "Ares", "", "90", "https://search.censys.io/hosts/92.84.154.5", "AS9050,C2,censys,RAT", "0", "dyingbreeds_"
"2024-12-20 06:59:09", "1358692", "139.162.28.46:43", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/139.162.28.46", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:07", "1358690", "47.236.2.164:80", "ip:port", "botnet_cc", "apk.ermac", "None", "ERMAC", "2024-12-20 08:02:35", "100", "https://search.censys.io/hosts/47.236.2.164", "AS45102,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:06", "1358689", "209.74.66.221:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2024-12-20 08:02:27", "100", "https://search.censys.io/hosts/209.74.66.221", "AS22612,C2,censys,NAMECHEAP-NET", "0", "dyingbreeds_"
"2024-12-20 06:59:05", "1358687", "120.24.23.212:8082", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2024-12-20 08:00:28", "100", "https://search.censys.io/hosts/120.24.23.212", "AS37963,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:05", "1358688", "asdasw21.icu", "domain", "botnet_cc", "win.shadowpad", "POISONPLUG.SHADOW,XShellGhost", "ShadowPad", "", "90", "https://search.censys.io/hosts/45.76.209.205+asdasw21.icu", "AS-VULTR,AS20473,C2,censys,RAT", "0", "dyingbreeds_"
"2024-12-20 06:59:04", "1358686", "nen4.vpnfree.site", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "https://search.censys.io/hosts/143.198.89.33+nen4.vpnfree.site", "AS14061,C2,censys,DIGITALOCEAN-ASN", "0", "dyingbreeds_"
"2024-12-20 06:59:02", "1358712", "176.58.127.193:28350", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/176.58.127.193", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:01", "1358713", "176.58.127.193:40929", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/176.58.127.193", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:01", "1358714", "176.58.127.193:53140", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/176.58.127.193", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:00", "1358715", "176.58.127.193:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/176.58.127.193", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:59:00", "1358716", "50.116.39.197:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/50.116.39.197", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:59", "1358717", "50.116.39.197:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/50.116.39.197", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:59", "1358718", "50.116.39.197:33299", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/50.116.39.197", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:58", "1358719", "88.80.185.78:5672", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/88.80.185.78", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:58", "1358720", "88.80.185.78:8090", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/88.80.185.78", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:57", "1358721", "88.80.185.78:19998", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/88.80.185.78", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:56", "1358722", "88.80.185.78:16993", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/88.80.185.78", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:56", "1358723", "88.80.185.78:17777", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/88.80.185.78", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:56", "1358724", "88.80.185.78:26679", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/88.80.185.78", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:55", "1358725", "88.80.185.78:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/88.80.185.78", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:55", "1358726", "88.80.185.78:3390", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/88.80.185.78", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:54", "1358727", "88.80.185.78:8000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/88.80.185.78", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:54", "1358729", "66.175.209.243:6513", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/66.175.209.243", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:53", "1358728", "88.80.185.78:10565", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/88.80.185.78", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:52", "1358730", "66.175.209.243:16993", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/66.175.209.243", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:52", "1358731", "66.175.209.243:51536", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/66.175.209.243", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:51", "1358732", "66.175.209.243:3032", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/66.175.209.243", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:51", "1358733", "66.175.209.243:5390", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/66.175.209.243", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:51", "1358734", "66.175.209.243:23810", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/66.175.209.243", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:50", "1358735", "66.175.209.243:33933", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/66.175.209.243", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:50", "1358736", "66.175.209.243:45091", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/66.175.209.243", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:49", "1358737", "66.175.209.243:8081", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/66.175.209.243", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:48", "1358738", "66.175.209.243:8089", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/66.175.209.243", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:48", "1358739", "173.255.203.153:6362", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/173.255.203.153", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:47", "1358740", "173.255.203.153:8000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/173.255.203.153", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:47", "1358741", "173.255.203.153:25565", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/173.255.203.153", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:45", "1358742", "173.255.203.153:53356", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/173.255.203.153", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:44", "1358743", "173.255.203.153:56212", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/173.255.203.153", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:43", "1358744", "173.255.203.153:31491", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/173.255.203.153", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:43", "1358745", "173.255.203.153:53322", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/173.255.203.153", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:42", "1358746", "173.255.203.153:8080", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/173.255.203.153", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:42", "1358747", "173.255.203.153:11729", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/173.255.203.153", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:41", "1358748", "173.255.203.153:19261", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/173.255.203.153", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:41", "1358749", "173.255.203.153:20006", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/173.255.203.153", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:40", "1358750", "173.255.203.153:30355", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/173.255.203.153", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:39", "1358751", "173.255.192.64:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/173.255.192.64", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:39", "1358752", "172.104.41.144:8000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.104.41.144", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:38", "1358753", "172.104.41.144:8080", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.104.41.144", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:38", "1358754", "172.104.41.144:8181", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.104.41.144", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:26", "1358755", "172.104.41.144:16993", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.104.41.144", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:25", "1358756", "172.104.41.144:28424", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.104.41.144", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:25", "1358757", "172.104.41.144:33060", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.104.41.144", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:23", "1358758", "172.104.41.144:33299", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.104.41.144", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:22", "1358759", "172.104.41.144:35925", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.104.41.144", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:22", "1358760", "172.104.41.144:39346", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.104.41.144", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:21", "1358761", "172.104.41.144:59011", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.104.41.144", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:20", "1358762", "172.104.41.144:25462", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.104.41.144", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:20", "1358763", "172.104.41.144:34238", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/172.104.41.144", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:19", "1358764", "85.159.209.112:43", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/85.159.209.112", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:19", "1358765", "85.159.209.112:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/85.159.209.112", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:18", "1358768", "85.159.209.112:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/85.159.209.112", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:17", "1358766", "85.159.209.112:8880", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/85.159.209.112", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:15", "1358767", "85.159.209.112:63284", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/85.159.209.112", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:15", "1358769", "85.159.209.112:2762", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/85.159.209.112", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:14", "1358770", "85.159.209.112:8082", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/85.159.209.112", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:13", "1358771", "85.159.209.112:8089", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/85.159.209.112", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:13", "1358772", "85.159.209.112:48864", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/85.159.209.112", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:12", "1358773", "85.159.209.112:26517", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/85.159.209.112", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:12", "1358774", "85.159.209.112:52986", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/85.159.209.112", "AS63949,Botnet,byob,C2,censys", "0", "dyingbreeds_"
"2024-12-20 06:58:11", "1358775", "103.68.175.58:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/103.68.175.58", "AS59371,censys,Viper", "0", "dyingbreeds_"
"2024-12-20 06:58:11", "1358776", "103.68.175.60:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/103.68.175.60", "AS59371,censys,Viper", "0", "dyingbreeds_"
"2024-12-20 06:58:10", "1358777", "198.23.137.164:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/198.23.137.164", "AS-COLOCROSSING,AS36352,censys,Viper", "0", "dyingbreeds_"
"2024-12-20 06:58:10", "1358778", "120.46.151.14:8080", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/120.46.151.14", "AS55990,censys,GoPhish,Phishing", "0", "dyingbreeds_"
"2024-12-20 06:58:09", "1358779", "13.234.63.50:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/13.234.63.50", "AMAZON-02,AS16509,censys,GoPhish,Phishing", "0", "dyingbreeds_"
"2024-12-20 06:58:09", "1358780", "142.93.165.129:3333", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/142.93.165.129", "AS14061,censys,DIGITALOCEAN-ASN,GoPhish,Phishing", "0", "dyingbreeds_"
"2024-12-20 06:58:07", "1358781", "3.226.95.46:3331", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/3.226.95.46", "AMAZON-AES,AS14618,censys,GoPhish,Phishing", "0", "dyingbreeds_"
"2024-12-20 06:58:07", "1358782", "191.232.190.243:5555", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/191.232.190.243", "AS8075,censys,GoPhish,MICROSOFT-CORP-MSN-AS-BLOCK,Phishing", "0", "dyingbreeds_"
"2024-12-20 06:57:49", "1358783", "47.92.143.14:9999", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/47.92.143.14", "AS37963,censys,GoPhish,Phishing", "0", "dyingbreeds_"
"2024-12-20 06:57:49", "1358784", "3.105.104.217:8443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/3.105.104.217", "AMAZON-02,AS16509,censys,GoPhish,Phishing", "0", "dyingbreeds_"
"2024-12-20 06:57:48", "1358785", "141.94.64.22:3333", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/141.94.64.22", "AS16276,censys,GoPhish,OVH,Phishing", "0", "dyingbreeds_"
"2024-12-20 06:57:45", "1358786", "167.172.149.123:3333", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://search.censys.io/hosts/167.172.149.123", "AS14061,censys,DIGITALOCEAN-ASN,GoPhish,Phishing", "0", "dyingbreeds_"
"2024-12-20 06:57:44", "1358788", "https://sordid-snaked.cyou/api", "url", "botnet_cc", "win.lumma", "LummaC2 Stealer", "Lumma Stealer", "", "100", "", "None", "0", "lontze7"
"2024-12-20 06:57:44", "1358789", "https://awake-weaves.cyou/api", "url", "botnet_cc", "win.lumma", "LummaC2 Stealer", "Lumma Stealer", "", "100", "", "None", "0", "lontze7"
"2024-12-20 06:57:44", "1358790", "https://wrathful-jammy.cyou/api", "url", "botnet_cc", "win.lumma", "LummaC2 Stealer", "Lumma Stealer", "", "100", "", "None", "0", "lontze7"
"2024-12-20 06:57:43", "1358791", "193.203.238.86:1912", "ip:port", "botnet_cc", "win.redline_stealer", "RECORDSTEALER", "RedLine Stealer", "", "100", "None", "infostealer,redline,stealer", "0", "SarlackLab"
"2024-12-20 06:57:43", "1358792", "103.195.102.126:62753", "ip:port", "botnet_cc", "win.sectop_rat", "1xxbot,ArechClient", "SectopRAT", "2024-12-20 10:17:23", "100", "", "None", "0", "lontze7"
"2024-12-20 06:57:42", "1358793", "https://frostman.shop/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2024-12-20 07:17:21", "100", "", "None", "0", "lontze7"
"2024-12-20 06:57:42", "1358796", "31c6032e6cfa6c514c0b0b30fe75c66e", "md5_hash", "payload", "unknown", "None", "Unknown malware", "", "50", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Cloak%20Ransomware", "cloak,ransomware", "0", "TheRavenFile"
"2024-12-20 06:56:59", "1358633", "31.207.45.217:6022", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:56:59", "1358634", "87.121.45.46:2022", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:56:59", "1358635", "212.237.219.90:2022", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:56:58", "1358637", "185.70.186.210:2022", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:56:57", "1358636", "193.84.2.94:35825", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:56:57", "1358638", "146.0.73.213:2222", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:56:56", "1358639", "212.237.217.157:8007", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:56:51", "1358640", "212.237.217.157:8006", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:56:51", "1358641", "46.17.97.212:15414", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:56:50", "1358642", "212.237.219.219:2022", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:56:50", "1358643", "5.39.223.27:2022", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:56:49", "1358644", "185.84.224.98:2022", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:56:49", "1358645", "5.42.199.77:14569", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:56:49", "1358646", "185.130.224.210:5657", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:56:48", "1358647", "194.180.188.220:2022", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:56:48", "1358656", "odziezrobocza.biz", "domain", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "", "SmartApeSG", "0", "HuntYethHounds"
"2024-12-20 06:56:48", "1358657", "https://odziezrobocza.biz/work/index.php", "url", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "", "SmartApeSG", "0", "HuntYethHounds"
"2024-12-20 06:56:47", "1358658", "https://odziezrobocza.biz/work/original.js", "url", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "", "SmartApeSG", "0", "HuntYethHounds"
"2024-12-20 06:56:46", "1358659", "https://odziezrobocza.biz/work/download.php", "url", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "", "SmartApeSG", "0", "HuntYethHounds"
"2024-12-20 06:56:46", "1358662", "147.185.221.24:35059", "ip:port", "botnet_cc", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "75", "None", "njrat,RAT", "0", "SarlackLab"
"2024-12-20 06:56:45", "1358663", "fat-pads.gl.at.ply.gg", "domain", "botnet_cc", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "75", "None", "njrat,RAT", "0", "SarlackLab"
"2024-12-20 06:56:45", "1358677", "147.185.221.24:35994", "ip:port", "botnet_cc", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "75", "None", "njrat,RAT", "0", "SarlackLab"
"2024-12-20 06:56:44", "1358678", "latest-springer.gl.at.ply.gg", "domain", "botnet_cc", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "75", "None", "njrat,RAT", "0", "SarlackLab"
"2024-12-20 06:56:43", "1358682", "frostman.shop", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2024-12-20 07:17:18", "100", "", "c2,vidar", "0", "Lars"
"2024-12-20 06:56:43", "1358683", "https://116.203.12.114", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "", "c2,vidar", "0", "Lars"
"2024-12-20 06:55:36", "1358631", "longelizzaw.click", "domain", "botnet_cc", "win.lumma", "LummaC2 Stealer", "Lumma Stealer", "", "100", "https://app.any.run/tasks/4ef3cb39-1693-4f67-aae5-aebd835d5514", "None", "0", "pitachu"
"2024-12-20 06:55:36", "1358632", "5.129.78.251:2022", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "", "botnet,c2,SSH-C2", "0", "redrabytes"
"2024-12-20 06:55:35", "1358630", "excluderhsh.click", "domain", "botnet_cc", "win.lumma", "LummaC2 Stealer", "Lumma Stealer", "", "100", "https://app.any.run/tasks/0c3cf19e-774c-451b-97c8-79d50b46ee16", "None", "0", "pitachu"
"2024-12-20 06:46:58", "1358794", "dosmac.top", "domain", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://x.com/500mk500/status/1869825447137341935", "None", "0", "abuse_ch"
"2024-12-20 06:46:58", "1358795", "dosmax.top", "domain", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "https://x.com/500mk500/status/1869825447137341935", "None", "0", "abuse_ch"
"2024-12-20 06:05:15", "1358787", "185.223.30.86:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "75", "https://bazaar.abuse.ch/sample/71ad0a40822aa8637e09f788efb4b8c11a151497f624947af9da9cb03bd8bbd8/", "asyncrat", "0", "abuse_ch"
"2024-12-20 04:02:32", "1358685", "151.236.16.40:2014", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2024-12-20 05:04:25", "100", "https://search.censys.io/hosts/151.236.16.40", "AS9009,BianLian,C2,censys,M247", "0", "DonPasci"
"2024-12-20 04:01:41", "1358684", "87.106.58.168:9443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2024-12-20 05:01:33", "100", "https://search.censys.io/hosts/87.106.58.168", "AS8560,C2,censys,Havoc,IONOS-AS", "0", "DonPasci"
"2024-12-20 04:01:06", "1358681", "172.235.37.27:8080", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2024-12-20 05:00:47", "100", "https://search.censys.io/hosts/172.235.37.27", "AKAMAI-LINODE-AP,AS63949,C2,censys,Sliver", "0", "DonPasci"
"2024-12-20 04:00:30", "1358680", "1.94.105.25:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2024-12-20 05:00:42", "100", "https://search.censys.io/hosts/1.94.105.25", "AS55990,C2,censys,CobaltStrike,cs-watermark-666666666,HWCSNET", "0", "DonPasci"
"2024-12-20 04:00:21", "1358679", "124.221.148.164:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2024-12-20 05:00:38", "100", "https://search.censys.io/hosts/124.221.148.164", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2024-12-20 00:02:31", "1358676", "208.123.119.103:7453", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2024-12-20 05:04:26", "100", "https://search.censys.io/hosts/208.123.119.103", "AS395092,BianLian,C2,censys,SHOCK-1", "0", "DonPasci"
"2024-12-20 00:02:03", "1358675", "147.45.44.216:80", "ip:port", "botnet_cc", "win.meduza", "None", "Meduza Stealer", "2024-12-20 05:03:39", "100", "https://search.censys.io/hosts/147.45.44.216", "AS215789,C2,censys,KARINAR,Meduza,Stealer", "0", "DonPasci"
"2024-12-20 00:01:58", "1358674", "2.58.56.150:8080", "ip:port", "botnet_cc", "apk.ermac", "None", "ERMAC", "2024-12-20 05:01:43", "100", "https://search.censys.io/hosts/2.58.56.150", "AS210558,C2,censys,Ermac,panel,SERVICES-1337-GMBH", "0", "DonPasci"
"2024-12-20 00:01:56", "1358673", "45.154.98.11:8080", "ip:port", "botnet_cc", "apk.ermac", "None", "ERMAC", "2024-12-20 05:01:45", "100", "https://search.censys.io/hosts/45.154.98.11", "AS210558,C2,censys,Ermac,panel,SERVICES-1337-GMBH", "0", "DonPasci"
"2024-12-20 00:01:45", "1358672", "45.154.98.11:80", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2024-12-20 05:01:09", "100", "https://search.censys.io/hosts/45.154.98.11", "AS210558,C2,censys,Hookbot,SERVICES-1337-GMBH", "0", "DonPasci"
"2024-12-20 00:01:44", "1358671", "217.28.222.103:80", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2024-12-20 05:01:07", "100", "https://search.censys.io/hosts/217.28.222.103", "AS29182,C2,censys,Hookbot,RU-JSCIOT", "0", "DonPasci"
"2024-12-20 00:01:43", "1358670", "2.58.56.150:80", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2024-12-20 05:01:08", "100", "https://search.censys.io/hosts/2.58.56.150", "AS210558,C2,censys,Hookbot,SERVICES-1337-GMBH", "0", "DonPasci"
"2024-12-20 00:01:32", "1358669", "ip69-48-204-229.pbiaas.com", "domain", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2024-12-20 05:01:00", "100", "https://search.censys.io/hosts/69.48.204.229+ip69-48-204-229.pbiaas.com", "AS8560,AsyncRAT,C2,censys,IONOS-AS,RAT", "0", "DonPasci"
"2024-12-20 00:01:12", "1358668", "45.89.48.7:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "https://search.censys.io/hosts/45.89.48.7", "AS6206,C2,censys,NETROUTING-AS,RAT,Remcos", "0", "DonPasci"
"2024-12-20 00:00:41", "1358667", "170.130.55.94:444", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2024-12-20 05:00:21", "100", "https://search.censys.io/hosts/170.130.55.94", "AS62904,C2,censys,CobaltStrike", "0", "DonPasci"
"2024-12-20 00:00:34", "1358666", "121.40.55.28:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2024-12-20 09:05:18", "100", "https://search.censys.io/hosts/121.40.55.28", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-391144938", "0", "DonPasci"
"2024-12-20 00:00:30", "1358665", "190.92.209.207:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2024-12-20 05:00:41", "100", "https://search.censys.io/hosts/190.92.209.207", "AS136907,C2,censys,CobaltStrike,cs-watermark-987654321,HWCLOUDS-AS-AP", "0", "DonPasci"
"2024-12-20 00:00:26", "1358664", "66.42.54.89:5555", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2024-12-20 05:00:35", "100", "https://search.censys.io/hosts/66.42.54.89", "AS-VULTR,AS20473,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2024-12-19 22:40:18", "1358661", "181.131.217.244:3021", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "None", "RAT,RemcosRAT", "0", "abuse_ch"
"2024-12-19 22:40:14", "1358660", "181.131.217.244:3020", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "None", "RAT,RemcosRAT", "0", "abuse_ch"
"2024-12-19 20:01:39", "1358655", "154.213.187.27:808", "ip:port", "botnet_cc", "elf.kaiji", "None", "Kaiji", "2024-12-20 05:03:45", "100", "https://search.censys.io/hosts/154.213.187.27", "AS51396,C2,censys,PFCLOUD", "0", "DonPasci"
"2024-12-19 20:01:37", "1358654", "138.124.101.41:80", "ip:port", "botnet_cc", "win.meduza", "None", "Meduza Stealer", "2024-12-20 05:03:39", "100", "https://search.censys.io/hosts/138.124.101.41", "AEZA-AS,AS210644,C2,censys,Meduza,Stealer", "0", "DonPasci"
"2024-12-19 20:01:28", "1358653", "121.36.198.211:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2024-12-20 05:01:37", "100", "https://search.censys.io/hosts/121.36.198.211", "AS55990,C2,censys,Havoc,HWCSNET", "0", "DonPasci"
"2024-12-19 20:01:23", "1358652", "88.25.123.113:2404", "ip:port", "botnet_cc", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2024-12-20 05:01:11", "100", "https://search.censys.io/hosts/88.25.123.113", "AS3352,C2,censys,Quasar,RAT,TELEFONICA_DE_ESPANA", "0", "DonPasci"
"2024-12-19 20:01:13", "1358651", "130.51.20.126:6699", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2024-12-20 05:00:57", "100", "https://search.censys.io/hosts/130.51.20.126", "AS11878,AsyncRAT,C2,censys,RAT,TZULO", "0", "DonPasci"
"2024-12-19 20:00:24", "1358650", "49.0.243.129:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2024-12-20 09:02:54", "100", "https://search.censys.io/hosts/49.0.243.129", "AS136907,C2,censys,CobaltStrike,cs-watermark-987654321,HWCLOUDS-AS-AP", "0", "DonPasci"
"2024-12-19 20:00:22", "1358649", "103.244.89.133:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2024-12-20 05:00:29", "100", "https://search.censys.io/hosts/103.244.89.133", "AS6134,C2,censys,CobaltStrike,cs-watermark-987654321,XNNET", "0", "DonPasci"
"2024-12-19 20:00:18", "1358648", "1.92.153.104:8089", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2024-12-20 05:00:26", "100", "https://search.censys.io/hosts/1.92.153.104", "AS55990,C2,censys,CobaltStrike,cs-watermark-987654321,HWCSNET", "0", "DonPasci"
"2024-12-19 17:33:00", "1358607", "https://gwcomics.com/js.php", "url", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "https://infosec.exchange/@monitorsg/113679412628778023", "KongTuke", "0", "monitorsg"
"2024-12-19 17:32:59", "1358608", "http://sdubvlbbuz3vzzz.top/1.php", "url", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "https://infosec.exchange/@monitorsg/113679412628778023", "KongTuke", "0", "monitorsg"
"2024-12-19 17:32:58", "1358611", "http://185.11.61.104/7jbBdsS/Login.php", "url", "botnet_cc", "win.amadey", "None", "Amadey", "", "100", "", "amadey,c2", "0", "Swipes"
"2024-12-19 17:32:56", "1358612", "https://incms.biz/work/zzzz.zip", "url", "payload_delivery", "js.fakeupdates", "FakeUpdate,SocGholish", "FAKEUPDATES", "", "100", "https://infosec.exchange/@monitorsg/113679771419385027", "SmartApeSG", "0", "monitorsg"
"2024-12-19 17:32:55", "1358621", "https://jery2helly4now.site/N2Y5ZmU3OTI5ZDky/", "url", "botnet_cc", "apk.coper", "ExobotCompact,Octo", "Coper", "", "80", "None", "apk,Coper", "0", "myonium1"
"2024-12-19 17:32:55", "1358622", "https://lehoetrb6j1h6.online/N2Y5ZmU3OTI5ZDky/", "url", "botnet_cc", "apk.coper", "ExobotCompact,Octo", "Coper", "", "80", "None", "apk,Coper", "0", "myonium1"
"2024-12-19 17:32:54", "1358623", "https://venndzy75hjeklr.top/N2Y5ZmU3OTI5ZDky/", "url", "botnet_cc", "apk.coper", "ExobotCompact,Octo", "Coper", "", "80", "None", "apk,Coper", "0", "myonium1"
"2024-12-19 17:32:53", "1358624", "https://koleitgehndhe782hr.online/YWFiM2VkMmFmNWFh/", "url", "botnet_cc", "apk.coper", "ExobotCompact,Octo", "Coper", "", "80", "None", "apk,Coper", "0", "myonium1"
"2024-12-19 17:32:51", "1358627", "https://lfoi45frhre4frjhyfrh.online/YWFiM2VkMmFmNWFh/", "url", "botnet_cc", "apk.coper", "ExobotCompact,Octo", "Coper", "", "80", "None", "apk,Coper", "0", "myonium1"
"2024-12-19 17:32:50", "1358625", "https://agenoikleiocbgr54.life/YWFiM2VkMmFmNWFh/", "url", "botnet_cc", "apk.coper", "ExobotCompact,Octo", "Coper", "", "80", "None", "apk,Coper", "0", "myonium1"
"2024-12-19 17:32:49", "1358626", "https://juiruhf5be6743yhyjdj.xyz/YWFiM2VkMmFmNWFh/", "url", "botnet_cc", "apk.coper", "ExobotCompact,Octo", "Coper", "", "80", "None", "apk,Coper", "0", "myonium1"
"2024-12-19 17:22:41", "1358629", "dosmax.top", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "https://bazaar.abuse.ch/sample/5142c4da1b7c363f9164d145d65049e61cb86648be93362fef2fcff9dd87317a/", "None", "0", "abuse_ch"
# Number of entries: 319