################################################################
# ThreatFox IOCs: recent additions - CSV format                #
# Last updated: 2026-08-11 13:31:05 UTC                        #
#                                                              #
# Terms Of Use: https://threatfox.abuse.ch/faq/#tos            #
# For questions please contact threatfox [at] abuse.ch         #
################################################################
#
# "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter"
"2026-08-11 13:31:05", "1872291", "https://moniskk.live/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/moniskk.live", "ClickFix", "0", "CarsonWilliams"
"2026-08-11 13:27:02", "1872290", "lcdipg.nitrilyn.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 13:21:50", "1872289", "nitrilyn.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 13:22:53", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-11 13:21:23", "1872288", "ipxzpxs.keyslimdrops-com.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 13:20:39", "1872287", "neuroxene.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 13:21:26", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-11 13:20:02", "1872286", "wjmd7fjq.spirosnet.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-11 13:20:00", "1872285", "verif-key-code.info", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "", "100", "False", "None", "ClickFix", "0", "threatcat_ch"
"2026-08-11 13:19:54", "1872284", "moniskk.live", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "", "100", "False", "None", "ClickFix", "0", "threatcat_ch"
"2026-08-11 13:16:18", "1872283", "keyslimdrops-com.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 13:17:12", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-11 13:05:11", "1872280", "47.94.224.229:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-11 13:05:10", "1872279", "65.109.97.220:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-11 13:05:09", "1872277", "43.254.166.41:8082", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-11 13:05:09", "1872278", "47.254.73.23:18789", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-11 13:05:07", "1872276", "192.252.185.78:22", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-11 13:01:06", "1872275", "http://tokjoza.shop:5200/products", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/2d6d7eb91a0244520c23bdc39e5bae2db67fd0156977936448748aac61d8802d/", "remus", "0", "abuse_ch"
"2026-08-11 13:01:03", "1872274", "http://shkpiva.shop:5627/documents", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/2d6d7eb91a0244520c23bdc39e5bae2db67fd0156977936448748aac61d8802d/", "remus", "0", "abuse_ch"
"2026-08-11 13:00:57", "1872273", "http://beljaro.shop:2536/addresses", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/2d6d7eb91a0244520c23bdc39e5bae2db67fd0156977936448748aac61d8802d/", "remus", "0", "abuse_ch"
"2026-08-11 12:59:46", "1872269", "54.91.129.132:5074", "ip:port", "botnet_cc", "win.grandoreiro", "None", "Grandoreiro", "", "75", "False", "", "geo,Grandoreiro,MEX", "0", "abuse_ch"
"2026-08-11 12:59:46", "1872270", "54.91.129.132:41694", "ip:port", "botnet_cc", "win.grandoreiro", "None", "Grandoreiro", "", "75", "False", "", "geo,Grandoreiro,MEX", "0", "abuse_ch"
"2026-08-11 12:59:46", "1872271", "54.91.223.28:1065", "ip:port", "botnet_cc", "win.grandoreiro", "None", "Grandoreiro", "", "75", "False", "", "geo,Grandoreiro,MEX", "0", "abuse_ch"
"2026-08-11 12:59:46", "1872272", "54.91.223.28:41667", "ip:port", "botnet_cc", "win.grandoreiro", "None", "Grandoreiro", "", "75", "False", "", "geo,Grandoreiro,MEX", "0", "abuse_ch"
"2026-08-11 12:59:45", "1872266", "54.80.154.193:6490", "ip:port", "botnet_cc", "win.grandoreiro", "None", "Grandoreiro", "", "75", "False", "", "geo,Grandoreiro,MEX", "0", "abuse_ch"
"2026-08-11 12:59:45", "1872267", "54.80.154.193:19941", "ip:port", "botnet_cc", "win.grandoreiro", "None", "Grandoreiro", "", "75", "False", "", "geo,Grandoreiro,MEX", "0", "abuse_ch"
"2026-08-11 12:59:45", "1872268", "54.91.129.132:4403", "ip:port", "botnet_cc", "win.grandoreiro", "None", "Grandoreiro", "", "75", "False", "", "geo,Grandoreiro,MEX", "0", "abuse_ch"
"2026-08-11 12:48:52", "1872232", "http://175.107.224.91:53866/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/175.107.224.91", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-11 12:48:51", "1872223", "176.65.139.236:1337", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "80", "False", "None", "mirai", "0", "seckle"
"2026-08-11 12:48:51", "1872224", "moniskk.live", "domain", "botnet_cc", "js.clearfake", "None", "ClearFake", "2026-08-11 12:19:39", "100", "True", "None", "ClearFake,ClickFix,EtherHiding", "0", "penislandrocket"
"2026-08-11 12:48:50", "1872231", "http://153.117.6.14:54264/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/153.117.6.14", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-11 12:48:49", "1872230", "http://42.234.235.197:41860/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/42.234.235.197", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-11 12:48:48", "1872233", "http://103.82.120.159:40690/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/103.82.120.159", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-11 12:48:48", "1872234", "http://144.48.135.194:43581/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/144.48.135.194", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-11 12:35:51", "1872265", "8kapp.cc", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 12:36:58", "100", "True", "None", "11August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-11 12:32:14", "1872264", "qcuqgf.neuroxan.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 12:30:08", "1872263", "neuroxan.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 12:30:33", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-11 12:28:47", "1872262", "8.222.247.229:60132", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:46", "1872253", "64.226.68.236:60128", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:46", "1872254", "8.219.155.47:60149", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:46", "1872255", "8.219.169.170:60119", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:46", "1872256", "8.219.210.218:60139", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:46", "1872257", "8.219.241.116:60106", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:46", "1872258", "8.219.62.229:60143", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:46", "1872259", "8.219.69.227:60133", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:46", "1872260", "8.219.85.120:60142", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:46", "1872261", "8.222.179.91:60122", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:45", "1872244", "47.236.180.235:60136", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:45", "1872245", "47.236.28.220:60115", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:45", "1872246", "47.236.70.102:60108", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:45", "1872247", "47.237.124.1:60108", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:45", "1872248", "47.237.127.21:60124", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:45", "1872249", "47.237.167.249:60128", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:45", "1872250", "47.245.111.51:60121", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:45", "1872251", "47.245.84.42:60116", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:45", "1872252", "49.235.101.101:60147", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:44", "1872237", "106.13.23.149:6819", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:44", "1872238", "114.67.87.14:60125", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:44", "1872239", "18.175.166.211:60101", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:44", "1872240", "222.213.23.56:60134", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:44", "1872241", "47.236.122.72:60123", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:44", "1872242", "47.236.146.147:60134", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:44", "1872243", "47.236.172.100:60117", "ip:port", "payload_delivery", "elf.p2pinfect", "None", "P2Pinfect", "", "100", "False", "", "censys,P2Pinfect", "0", "NDA0E"
"2026-08-11 12:28:09", "1872236", "erkosju.kerassyntials.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 12:26:20", "1872235", "kerassyntials.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 12:26:27", "100", "True", "None", "11August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-11 12:16:39", "1872225", "reavercncv4.duckdns.org", "domain", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-11 12:16:39", "100", "False", "", "Mirai", "0", "NDA0E"
"2026-08-11 12:16:39", "1872226", "voltagec2.tech", "domain", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-11 12:16:39", "100", "False", "", "Mirai", "0", "NDA0E"
"2026-08-11 12:16:39", "1872227", "api.mineblack.lol", "domain", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-11 12:16:55", "100", "False", "", "Mirai", "0", "NDA0E"
"2026-08-11 12:16:39", "1872228", "manbipll.duckdns.org", "domain", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-11 12:16:39", "100", "False", "", "Mirai", "0", "NDA0E"
"2026-08-11 12:16:39", "1872229", "69cnc.duckdns.org", "domain", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "Mirai", "0", "NDA0E"
"2026-08-11 12:05:01", "1872222", "tuzijcshbotvenxhog.en-usa-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0xa770,windows", "1", "anonymous"
"2026-08-11 12:04:18", "1872221", "gtnfycq.keraissentials.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 12:03:18", "1872220", "keraissentials.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 12:04:14", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-11 12:02:44", "1872214", "download.pooping.pics", "domain", "botnet_cc", "elf.xmrig", "None", "XMRIG", "2026-08-11 12:02:44", "100", "False", "https://tria.ge/260811-n4kvrsdp3z/behavioral1", "coinminer,XMRIG", "1", "anonymous"
"2026-08-11 12:02:44", "1872215", "download.poop-tree.christmas", "domain", "botnet_cc", "elf.xmrig", "None", "XMRIG", "2026-08-11 12:02:44", "100", "False", "https://tria.ge/260811-n4kvrsdp3z/behavioral1", "coinminer,XMRIG", "1", "anonymous"
"2026-08-11 12:02:44", "1872216", "download.turd-lovers.lat", "domain", "botnet_cc", "elf.xmrig", "None", "XMRIG", "2026-08-11 12:02:44", "100", "False", "https://tria.ge/260811-n4kvrsdp3z/behavioral1", "coinminer,XMRIG", "1", "anonymous"
"2026-08-11 12:02:44", "1872217", "download.poop-diaper.buzz", "domain", "botnet_cc", "elf.xmrig", "None", "XMRIG", "2026-08-11 12:02:44", "100", "False", "https://tria.ge/260811-n4kvrsdp3z/behavioral1", "coinminer,XMRIG", "1", "anonymous"
"2026-08-11 12:02:44", "1872218", "download.sf8edhuhy8e21juiz8dujh.lol", "domain", "botnet_cc", "elf.xmrig", "None", "XMRIG", "2026-08-11 12:02:44", "100", "False", "https://tria.ge/260811-n4kvrsdp3z/behavioral1", "coinminer,XMRIG", "1", "anonymous"
"2026-08-11 12:02:44", "1872219", "download.dancefloor.top", "domain", "botnet_cc", "elf.xmrig", "None", "XMRIG", "2026-08-11 12:02:44", "100", "False", "https://tria.ge/260811-n4kvrsdp3z/behavioral1", "coinminer,XMRIG", "1", "anonymous"
"2026-08-11 11:50:45", "1872213", "https://api.sm188wins.buzz", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 12:23:11", "75", "False", "https://bazaar.abuse.ch/sample/d570c33a5dce595138f6c25b6a1ecd7b4e474e6f440f44a2831aa5c84c1016f3/", "vidar", "0", "abuse_ch"
"2026-08-11 11:50:39", "1872212", "https://162.55.174.85", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 12:23:04", "75", "False", "https://bazaar.abuse.ch/sample/9d53f499b024885aac98733a79cd09f4165e372402fb8e9519561f006c705a36/", "vidar", "0", "abuse_ch"
"2026-08-11 11:50:03", "1872211", "vamjuwk.ijnitra.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 11:48:37", "1872210", "47.94.224.229:1111", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-11 11:48:30", "1872209", "ijnitra.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 11:49:38", "100", "True", "None", "11August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-11 11:48:28", "1872208", "36.140.162.173:6666", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:56", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-11 11:45:47", "1872207", "https://65.21.96.129", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 12:23:07", "75", "False", "https://bazaar.abuse.ch/sample/bfd64fc1e264185bceda2f503e1b0b73ed97003fd3d46b67dd4a4b33ceb33ac1/", "vidar", "0", "abuse_ch"
"2026-08-11 11:41:33", "1872206", "rmseyw.nerve-armore.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 11:39:37", "1872205", "nerve-armore.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 11:40:30", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-11 11:37:33", "1872204", "87.120.104.144:7443", "ip:port", "botnet_cc", "win.purelogs", "None", "PureLogs Stealer", "", "75", "False", "https://bazaar.abuse.ch/sample/181be5dc450b80840b8d5eeafb09f35645b430f5ac2910f3abaf477748dadf1a/", "PureLogsStealer", "0", "abuse_ch"
"2026-08-11 11:33:08", "1872203", "merkurysieradz.pl", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-11 11:32:55", "1872202", "17734864904d450104ab46e262797f47", "md5_hash", "payload", "py.creal_stealer", "None", "Creal Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-11 11:32:54", "1872200", "181be5dc450b80840b8d5eeafb09f35645b430f5ac2910f3abaf477748dadf1a", "sha256_hash", "payload", "py.creal_stealer", "None", "Creal Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-11 11:32:54", "1872201", "db24b1fdeba493b442ac4d6aea6f3c8d05a3691a", "sha1_hash", "payload", "py.creal_stealer", "None", "Creal Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-11 11:26:37", "1872191", "181.214.136.12:404", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "80", "False", "None", "mirai", "0", "seckle"
"2026-08-11 11:26:37", "1872192", "94.154.43.97:1302", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "80", "False", "None", "mirai", "0", "seckle"
"2026-08-11 11:26:37", "1872193", "94.154.43.97:4330", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "80", "False", "None", "mirai", "0", "seckle"
"2026-08-11 11:26:36", "1872194", "94.154.43.97:44321", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "80", "False", "None", "mirai", "0", "seckle"
"2026-08-11 11:20:06", "1872199", "https://rul.sm188blood.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:26:57", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-11 11:20:05", "1872196", "rul.bercak4d.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:27:09", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-11 11:20:05", "1872197", "https://rul.bercak4d.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:27:09", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-11 11:20:05", "1872198", "rul.sm188blood.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:26:57", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-11 11:19:04", "1872195", "2p7gaujv.greenestreetchurch.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-11 11:05:07", "1872190", "213.199.55.80:9090", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-11 11:05:06", "1872188", "213.199.55.80:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-11 11:05:06", "1872189", "213.199.55.80:22", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-11 11:05:05", "1872187", "106.75.139.193:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-11 11:00:39", "1872186", "wgjwhhe.igni--tra.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 10:58:38", "1872185", "igni--tra.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 10:58:44", "100", "True", "None", "11August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-11 10:50:55", "1872184", "fnwaiz.mitolyn-us-en.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 10:49:09", "1872183", "mitolyn-us-en.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 10:49:39", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-11 10:36:19", "1872182", "8k2uejd4.buzz", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 10:36:26", "100", "True", "None", "11August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-11 10:32:21", "1872181", "5tjej8k8yd.buzz", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 10:32:28", "100", "True", "None", "11August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-11 10:29:46", "1872180", "1rtwg8k8ud.buzz", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 10:29:53", "100", "True", "None", "11August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-11 10:12:16", "1872177", "ppcnewsfeed.com", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "True", "None", "compromised,SmartApeSG,webinject,WordPress", "1", "anonymous"
"2026-08-11 10:10:32", "1872179", "windowsupdate.webhop.me", "domain", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/d7eaa360c4a598592d707901fad1c719f295ce51c16edd3d4377968100641d8e/", "xworm", "0", "abuse_ch"
"2026-08-11 10:10:31", "1872178", "newpapidnsorg.duckdns.org", "domain", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/9dadc0f51d3993652b7f6194eea07d28d3c6b6eedc59aef227f4fff124a4747a/", "remcos", "0", "abuse_ch"
"2026-08-11 10:08:40", "1872176", "ovgkkdx.ignaitra.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 10:07:57", "1872175", "wazrhp.web-neuroxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 10:07:17", "1872174", "ignaitra.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 10:07:42", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-11 10:06:37", "1872173", "94.198.96.165:62769", "ip:port", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "75", "False", "https://bazaar.abuse.ch/sample/48a200216cdaa3eb89f8a53dff18616f9b9fe45ed8eda50f11a676375cc4c930/", "LxBaseRAT,RAT", "0", "abuse_ch"
"2026-08-11 10:06:35", "1872172", "privatehos.casacam.net", "domain", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "https://bazaar.abuse.ch/sample/48a200216cdaa3eb89f8a53dff18616f9b9fe45ed8eda50f11a676375cc4c930/", "LxBaseRAT,RAT", "0", "abuse_ch"
"2026-08-11 10:06:09", "1872171", "web-neuroxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 10:07:22", "100", "True", "None", "11August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-11 10:05:49", "1872170", "31.56.209.60:443", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/1a9136d68060fed63853979b333bfa6ac4f5e36a2c93119d695e6b5615a43e87/", "xworm", "0", "abuse_ch"
"2026-08-11 10:05:06", "1872168", "213.199.55.80:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-11 10:05:06", "1872169", "213.199.55.80:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-11 10:05:05", "1872166", "106.75.139.193:22", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-11 10:05:05", "1872167", "192.252.185.78:65530", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-11 10:01:38", "1872165", "updatewindows.gotdns.ch", "domain", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "100", "False", "https://bazaar.abuse.ch/sample/d7eaa360c4a598592d707901fad1c719f295ce51c16edd3d4377968100641d8e/", "AsyncRAT,RAT", "0", "abuse_ch"
"2026-08-11 09:59:31", "1872164", "ma8or18p.en-us-ignitraa.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xfb64,macos", "1", "anonymous"
"2026-08-11 09:57:59", "1872163", "23.251.34.31:5555", "ip:port", "botnet_cc", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "75", "False", "https://bazaar.abuse.ch/sample/b8c508760c9a35304b17ac4156b93ee76b6b57bb05e2426c5f9912b65ffea0bd/", "Gafgyt", "0", "abuse_ch"
"2026-08-11 09:52:51", "1872162", "109.168.160.73:25565", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "False", "https://bazaar.abuse.ch/sample/eddc0ac302105dc7ec74c269a7ae3162e120c0610976d662975c0dd3e089b1b7/", "None", "0", "abuse_ch"
"2026-08-11 09:47:24", "1872161", "98.156.49.133:2021", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:48:17", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-11 09:47:10", "1872160", "coachingsystem.es", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-11 09:46:52", "1872159", "57.181.120.61:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-08-11 12:47:39", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-08-11 09:46:51", "1872158", "54.54.33.23:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:37", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-11 09:46:08", "1872157", "23.94.252.16:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:46:47", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-11 09:44:46", "1872153", "192.229.115.156:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 09:44:46", "1872154", "192.229.115.156:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 09:44:46", "1872155", "192.229.115.156:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 09:44:46", "1872156", "192.229.115.162:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 09:44:45", "1872151", "192.229.115.154:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 09:44:45", "1872152", "192.229.115.154:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 09:44:32", "1872150", "185.174.101.235:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 09:44:27", "1872149", "barikadeuku.freedev.app", "domain", "botnet_cc", "win.xworm", "None", "XWorm", "", "100", "False", "https://bazaar.abuse.ch/sample/2ab1203a41aa0208cb1d0123ffac2c284c62bbfaee0dcd1dc3eb38cc1021c66f/", "XWorm", "0", "abuse_ch"
"2026-08-11 09:44:26", "1872148", "178.16.52.136:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:35", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-11 09:43:32", "1872146", "128.90.102.72:8888", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:30", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-11 09:43:18", "1872145", "104.251.181.111:3333", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:16", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-11 09:43:17", "1872144", "104.243.248.63:300", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-11 09:41:26", "1872143", "without.kesug.com", "domain", "botnet_cc", "win.xworm", "None", "XWorm", "", "100", "False", "https://bazaar.abuse.ch/sample/30b7576cc070132358e59dbbbad3e912e656719c9b3a7047b347aaeb33ebd891/", "XWorm", "0", "abuse_ch"
"2026-08-11 09:39:03", "1872141", "132.243.225.173:7080", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "https://bazaar.abuse.ch/sample/99d031e1d29cc2711f9223e8152016ff58ad68fd9e14dce5b0a8dadfb741b088/", "None", "0", "abuse_ch"
"2026-08-11 09:35:59", "1872140", "energyrevolutionsystem.org", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 09:37:06", "100", "True", "None", "11August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-11 09:19:12", "1872113", "nickilorr421.icu", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix,EXT,loader", "1", "anonymous"
"2026-08-11 09:19:12", "1872114", "roggymo87.icu", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix,EXT,loader", "1", "anonymous"
"2026-08-11 09:19:11", "1872115", "tullingpui.buzz", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix,EXT,loader", "1", "anonymous"
"2026-08-11 09:19:11", "1872117", "http://185.173.147.153/d657b8d5cb?force=1", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix,loader,macos,stealer", "1", "anonymous"
"2026-08-11 09:19:10", "1872116", "karburatorotzhigi.com", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix,EXT,loader", "1", "anonymous"
"2026-08-11 09:19:10", "1872118", "http://185.173.147.153/4adc82c51956cd?force=1", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix,loader,macos,stealer", "1", "anonymous"
"2026-08-11 09:19:09", "1872119", "http://185.173.147.153/f422ff057d106c?force=1", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix,loader,macos,stealer", "1", "anonymous"
"2026-08-11 09:19:09", "1872120", "62f8864271c69a990cd3bbb9369b452923b1a85d2b956b4058c33fd94c906c60", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix,loader,macos,stealer", "1", "anonymous"
"2026-08-11 09:19:09", "1872121", "600f0a11037422c503b642696ba599a1eaa4727e8380c74b8673faa49a029ae7", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix,loader,macos,stealer", "1", "anonymous"
"2026-08-11 09:19:08", "1872122", "a00ca1b1edb9bad31ebaa66fd04f4423e8376af186d96dcae6864e364d1d9e1b", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix,loader,macos,stealer", "1", "anonymous"
"2026-08-11 09:19:08", "1872123", "www.oneclickstay.com", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "True", "None", "compromised,EtherHiding,webinject,WordPress", "1", "anonymous"
"2026-08-11 09:19:07", "1872124", "www.mandala-net.com", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "True", "None", "compromised,EtherHiding,webinject,WordPress", "1", "anonymous"
"2026-08-11 09:19:07", "1872125", "swtrade.cz", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "True", "None", "compromised,EtherHiding,webinject,WordPress", "1", "anonymous"
"2026-08-11 09:19:07", "1872126", "igualdad.iaa.csic.es", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "True", "None", "compromised,EtherHiding,webinject,WordPress", "1", "anonymous"
"2026-08-11 09:19:06", "1872127", "wcb.uge.mybluehost.me", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "True", "None", "compromised,EtherHiding,webinject,WordPress", "1", "anonymous"
"2026-08-11 09:18:14", "1872139", "lfncbj.usa--sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 09:17:53", "1872138", "h9wjuhba.greaternewzionbc.org", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-11 09:17:25", "1872137", "vfepwox.hyptoburn.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 09:17:12", "1872136", "ie793b69.eng--slimsounds.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-11 09:16:46", "1872135", "hyptoburn.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 09:17:33", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-11 09:15:34", "1872134", "usasightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-11 09:05:09", "1872133", "106.75.139.193:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-11 09:05:08", "1872132", "106.75.139.193:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-11 09:03:53", "1872131", "mail.outlook-office365.com", "domain", "botnet_cc", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "2026-08-11 09:03:53", "100", "False", "https://bazaar.abuse.ch/sample/55be9d1e2a4edeede9d8223d5f932be9233872df7239501f2f3c305672bec4f2/", "AgentTesla", "0", "abuse_ch"
"2026-08-11 09:02:44", "1872130", "195.250.27.46:21", "ip:port", "botnet_cc", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "75", "False", "https://bazaar.abuse.ch/sample/fe45e6bca6a874ed8fb80b0c112d66d4421e1a75506cef8db78eb663ee864731/", "AgentTesla", "0", "abuse_ch"
"2026-08-11 09:00:42", "1872129", "tagmentos.bingbaochow.cam", "domain", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/44421e9918f246c7bac565e429f7852d8347c1c91cbe583fbbf682b89f7b663b/", "xworm", "0", "abuse_ch"
"2026-08-11 09:00:41", "1872128", "haghuer.bingbaochow.cam", "domain", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/44421e9918f246c7bac565e429f7852d8347c1c91cbe583fbbf682b89f7b663b/", "xworm", "0", "abuse_ch"
"2026-08-11 08:52:18", "1872112", "91.92.242.32:7407", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "75", "False", "https://bazaar.abuse.ch/sample/44421e9918f246c7bac565e429f7852d8347c1c91cbe583fbbf682b89f7b663b/", "AsyncRAT,RAT", "0", "abuse_ch"
"2026-08-11 08:52:14", "1872111", "combustu.bingbaochow.cam", "domain", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "100", "False", "https://bazaar.abuse.ch/sample/44421e9918f246c7bac565e429f7852d8347c1c91cbe583fbbf682b89f7b663b/", "AsyncRAT,RAT", "0", "abuse_ch"
"2026-08-11 08:30:18", "1872110", "rkbqja.us-us-us-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 08:29:00", "1872109", "qvzuvdx.hypatoburn.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 08:26:15", "1872108", "hypatoburn.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 08:26:51", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-11 08:25:07", "1872107", "us-us-us-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 08:25:28", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-11 08:20:49", "1872106", "alert.livewave47.one", "domain", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://bazaar.abuse.ch/sample/dc834c0c0982771016202f3ca1808d3bba329379eba79e1d04db31cafb1f43e1/", "None", "0", "abuse_ch"
"2026-08-11 08:20:47", "1872105", "https://alert.livewave47.one/pipe", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://bazaar.abuse.ch/sample/dc834c0c0982771016202f3ca1808d3bba329379eba79e1d04db31cafb1f43e1/", "None", "0", "abuse_ch"
"2026-08-11 08:17:09", "1872104", "scheiwiller-motos.ch", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-11 08:05:07", "1872103", "1.14.193.53:7717", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-11 08:05:05", "1872102", "183.60.226.2:465", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-11 07:52:08", "1872101", "https://aware-cr1.com/api/beacon", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "https://bazaar.abuse.ch/sample/c577d3ec66832819cf86a0ff799143caf701ede1edf132f7fad5c3fddff830c5/", "Vidar", "0", "abuse_ch"
"2026-08-11 07:46:58", "1872100", "172.111.163.168:65070", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/f25ebc1d6d07a81ebb7f2d5bb5983a23f1b503a9badad26fa1989cc44e2fe18f/", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-08-11 07:45:10", "1872099", "204.93.220.122:17508", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/d0ee157e7de36b409fb97b9fccec05bbc05ec2f436f3d939abc6456d6e0bd29c/", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-08-11 07:43:47", "1872098", "155.103.69.20:14648", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/a8a05bfa26a75cf0376d25a29aff297e40035ac70a20d7f49f255d95b385aa9e/", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-08-11 07:37:52", "1872097", "cadltmk.gutdrops-us-eng.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 07:36:13", "1872096", "gutdrops-us-eng.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:36:19", "100", "True", "None", "11August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-11 07:35:59", "1872095", "energyrevolutionsystem.net", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:36:06", "100", "True", "None", "11August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-11 07:35:44", "1872094", "hotrum.us-eng-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 07:34:41", "1872093", "us-eng-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:34:47", "100", "True", "None", "11August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-11 07:32:45", "1872092", "82.157.33.67:8000", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "False", "None", "CobaltStrike", "0", "abuse_ch"
"2026-08-11 07:32:31", "1872091", "139.162.38.41:9443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-08-11 07:30:09", "1872042", "visitcameronparish.org", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-11 07:30:09", "1872043", "coincidentbitter.com", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-11 07:30:08", "1872044", "printable.rhinoplax.com", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-11 07:30:08", "1872045", "myhealthdiary.com.au", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClearFake", "1", "anonymous"
"2026-08-11 07:30:07", "1872063", "http://223.123.73.182:54176/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/223.123.73.182", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-11 07:30:07", "1872064", "http://223.123.43.132:40473/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/223.123.43.132", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-11 07:30:07", "1872065", "http://111.92.157.204:47463/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/111.92.157.204", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-11 07:27:10", "1872090", "hzydyub.gutdrops-store.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 07:25:24", "1872089", "gutdrops-store.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:25:31", "100", "True", "None", "11August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-11 07:25:08", "1872088", "vxcgzz.us-en-us-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 07:25:00", "1872087", "us-en-us-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:25:07", "100", "True", "None", "11August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-11 07:20:45", "1872086", "tuko2n3j.graphicstabletreviews.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-11 07:13:30", "1872085", "zappelinej.noip.at", "domain", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "75", "False", "https://bazaar.abuse.ch/sample/d3a18a8e9053c2b3a16f052c2595fadf5af3313d2189b88c03d10adae2c2a424/", "LxBaseRAT,RAT", "0", "abuse_ch"
"2026-08-11 07:13:29", "1872084", "152.89.162.7:49798", "ip:port", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "75", "False", "https://bazaar.abuse.ch/sample/d3a18a8e9053c2b3a16f052c2595fadf5af3313d2189b88c03d10adae2c2a424/", "LxBaseRAT,RAT", "0", "abuse_ch"
"2026-08-11 07:05:06", "1872082", "101.32.34.248:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-11 07:05:06", "1872083", "166.0.27.224:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-11 07:05:05", "1872081", "101.132.120.245:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-11 07:03:56", "1872080", "104.249.10.95:7004", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "", "XWorm", "0", "abuse_ch"
"2026-08-11 06:58:27", "1872079", "155.103.70.232:14554", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/d6fd0e658ec1560ce283754920373825805e7e57176f371e6bc8b9270055bab0/", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-08-11 06:57:46", "1872078", "derovj.us-en-us-neuroxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 06:52:37", "1872076", "82.23.163.207:10128", "ip:port", "botnet_cc", "win.coinminer", "None", "Coinminer", "", "75", "False", "", "CoinMiner,dropped-by-amadey", "0", "abuse_ch"
"2026-08-11 06:51:05", "1872075", "dqjxvqn.gut--drops.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 06:41:00", "1872073", "structuredolls.xyz", "domain", "botnet_cc", "unknown_loader", "None", "Unknown Loader", "", "100", "False", "", "OffLoader", "0", "abuse_ch"
"2026-08-11 06:40:34", "1872072", "technocalfindersda.bounceme.net", "domain", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/45b1296b5c7de2b1a159bfb7d91cf4186d8b076452c9d683174ea47dad1ed5b1/", "xworm", "0", "abuse_ch"
"2026-08-11 06:32:15", "1872071", "http://46.151.182.189/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "", "100", "False", "", "Stealc", "0", "abuse_ch"
"2026-08-11 06:29:35", "1872070", "wss.infrastructurecore.cc", "domain", "botnet_cc", "win.acr_stealer", "None", "ACR Stealer", "", "100", "False", "https://bazaar.abuse.ch/sample/4153db289c9a3de57845890aadeec7951fcf5516fd39f25c6d8c3e42fc21f801/", "ACRStealer", "0", "abuse_ch"
"2026-08-11 06:28:48", "1872069", "infrastructurecore.cc", "domain", "botnet_cc", "win.acr_stealer", "None", "ACR Stealer", "", "100", "False", "https://bazaar.abuse.ch/sample/4153db289c9a3de57845890aadeec7951fcf5516fd39f25c6d8c3e42fc21f801/", "ACRStealer", "0", "abuse_ch"
"2026-08-11 06:23:47", "1872068", "217.60.241.91:443", "ip:port", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "75", "False", "https://bazaar.abuse.ch/sample/56cbbf481154a08fbfec54484ca04f6045dfe0e2fc082c6249592ecc4aaf1c5e/", "ConnectWise,RMM,ScreenConnect", "0", "abuse_ch"
"2026-08-11 06:22:52", "1872067", "94.154.32.228:443", "ip:port", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "75", "False", "https://bazaar.abuse.ch/sample/0eebdbd4fb46d04352fa09ce96cb34991bd5950cf8a8be9e403ddb1d485a870a/", "ConnectWise,RMM,ScreenConnect", "0", "abuse_ch"
"2026-08-11 06:22:00", "1872066", "songsbeginner.cfd", "domain", "botnet_cc", "unknown_loader", "None", "Unknown Loader", "", "100", "False", "", "OffLoader", "0", "abuse_ch"
"2026-08-11 06:17:57", "1872060", "102.220.160.58:425", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-11 06:17:57", "1872061", "102.220.160.58:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-11 06:17:57", "1872062", "102.220.160.58:423", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-11 06:17:56", "1872059", "102.220.160.58:416", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-11 06:14:04", "1872051", "1e7ca9074cc2eca8d366022629f665d9ffaa79e0621bb579bf5aabe681cb07e8", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735", "WP2Shell", "0", "abuse_ch"
"2026-08-11 06:14:04", "1872052", "8ebaf3ba0be7b62269aaf333cfaf66c1dea6e8ee495a917691beb550b4bbf0ab", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735", "WP2Shell", "0", "abuse_ch"
"2026-08-11 06:14:04", "1872053", "e3fb920aa70c7ad5c67b4d9b8e60954f5e0c1a07c0eba09505816b966f4d1a3c", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735", "WP2Shell", "0", "abuse_ch"
"2026-08-11 06:14:04", "1872054", "165e94c87ef17389c8de25ba2a6c31b348e3c916dab89d0dd3708156414f3de5", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735", "WP2Shell", "0", "abuse_ch"
"2026-08-11 06:14:04", "1872055", "b55cf5af8b57e9d56c69d00e023e2384c7eb184614c2a2a283062ebeaf4a26c6", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735", "WP2Shell", "0", "abuse_ch"
"2026-08-11 06:14:04", "1872056", "a46230a1638b9b341d15a640ead1b885548c1d1e5a149657e8e315540a068be8", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735", "WP2Shell", "0", "abuse_ch"
"2026-08-11 06:14:04", "1872057", "7918f29993383e579ef33bd0d8e766fd2ce047dce83bac51efb5fe17578b6cdf", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735", "WP2Shell", "0", "abuse_ch"
"2026-08-11 06:14:04", "1872058", "ae9ee9db7c41e04c531298782b908766c769a899aa92df3f64f4a83baa77ad09", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735", "WP2Shell", "0", "abuse_ch"
"2026-08-11 06:14:03", "1872048", "1093b4045b45a8498d146e31788c25769f992056c8ffc582b5d8c06598598966", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735", "WP2Shell", "0", "abuse_ch"
"2026-08-11 06:14:03", "1872049", "05e3884a478d3bc8fd7285dabb74107422f1615d2d7f80df9b8438d4beb663da", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735", "WP2Shell", "0", "abuse_ch"
"2026-08-11 06:14:03", "1872050", "bb9136494a546368e7c9b6252c2e1c5af9327c07947908a9ba6fdd78fb4bf4cf", "sha256_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://ioc.exchange/@bstnbuck@infosec.exchange/117071216691832735", "WP2Shell", "0", "abuse_ch"
"2026-08-11 06:07:19", "1872047", "ijyzvm.shop-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 06:05:05", "1872041", "107.182.173.199:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:43:19", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-11 06:01:04", "1872040", "eqtatpq.go-neuroxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 06:00:48", "1872039", "jessespridecharters.com", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "2026-08-11 09:27:59", "90", "False", "None", "ClickFix,compromised", "1", "anonymous"
"2026-08-11 06:00:38", "1872037", "https://yogasitesdev.wpengine.com/2/15.ps1", "url", "payload_delivery", "unknown", "None", "Unknown malware", "2026-08-11 06:00:39", "90", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-11 05:48:22", "1872036", "7zcef54a.eng-usa-goldalign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xfb64,macos", "1", "anonymous"
"2026-08-11 05:46:53", "1872035", "myzxeb.shop-neuroxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 05:46:11", "1871888", "161.35.48.40:5555", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-11 05:46:10", "1871897", "auracorp.shop", "domain", "botnet_cc", "win.aurastealer", "AURA Stealer,AURASTEAL", "Aura Stealer", "", "100", "False", "", "aurastealer,c2", "1", "anonymous"
"2026-08-11 05:46:09", "1871905", "bluepiip.digital", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-11 05:46:09", "1871906", "https://bluepiip.digital/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-11 05:46:07", "1871927", "http://175.107.36.232:51731/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/175.107.36.232", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-11 05:46:06", "1871932", "154.213.233.164:48305", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "50", "False", "None", "132839,c2,censys,cobalt strike", "0", "sojubear"
"2026-08-11 05:46:05", "1871933", "52.202.75.213:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "50", "False", "None", "14618,c2,censys,cobalt strike", "0", "sojubear"
"2026-08-11 05:46:04", "1871937", "196.75.175.174:2222", "ip:port", "botnet_cc", "win.meterpreter", "None", "Meterpreter", "", "50", "False", "None", "36903,c2,censys,metasploit", "0", "sojubear"
"2026-08-11 05:46:04", "1871939", "176.65.139.228:6677", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "50", "False", "https://bazaar.abuse.ch/sample/e4eaae680e23b413ec82a1cb66b4704f2d5df913520700f15e1a65c4ce10d322/", "honeypot,iot,sentinel", "0", "abuserobot66609"
"2026-08-11 05:46:02", "1871940", "176.65.139.228:6678", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 01:12:10", "50", "False", "https://bazaar.abuse.ch/sample/e4eaae680e23b413ec82a1cb66b4704f2d5df913520700f15e1a65c4ce10d322/", "honeypot,iot,sentinel", "0", "abuserobot66609"
"2026-08-11 05:46:01", "1871942", "333fd9dd9d84b58c4eef84a8d07670dd", "md5_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware", "direwolf,ransomware", "0", "TheRavenFile"
"2026-08-11 05:46:00", "1871943", "acd02a4f8b25e9106400e0a3af63a760", "md5_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware", "direwolf,ransomware", "0", "TheRavenFile"
"2026-08-11 05:45:59", "1871944", "7d589f794115171949fa2a7e3b66dcd4", "md5_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware", "direwolf,ransomware", "0", "TheRavenFile"
"2026-08-11 05:45:59", "1871945", "a482d7e61ba199cbe005a549249894ba", "md5_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware", "direwolf,ransomware", "0", "TheRavenFile"
"2026-08-11 05:45:57", "1871946", "31fe32bddd2bd4b825e355516d852476", "md5_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware", "direwolf,ransomware", "0", "TheRavenFile"
"2026-08-11 05:45:57", "1871947", "3b97927cde6c906f6b6f03797c21efa7", "md5_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware", "direwolf,ransomware", "0", "TheRavenFile"
"2026-08-11 05:45:55", "1871948", "44da29144b151062bce633e9ce62de85", "md5_hash", "payload", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware", "direwolf,ransomware", "0", "TheRavenFile"
"2026-08-11 05:45:55", "1871949", "direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion", "domain", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware", "direwolf,ransomware", "0", "TheRavenFile"
"2026-08-11 05:45:53", "1871950", "direwolf66s5zealav7azcyqeipiswecvvnapyuby3dek473kyqfucad.onion", "domain", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware", "direwolf,ransomware", "0", "TheRavenFile"
"2026-08-11 05:45:52", "1871951", "direwolf3ddtab5anvhulcelauvoxu2a7l264hqs6vtxtgrqsjfvodid.onion", "domain", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/DireWolf%20Ransomware", "direwolf,ransomware", "0", "TheRavenFile"
"2026-08-11 05:45:51", "1871955", "38.207.178.195:34567", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-11 05:45:50", "1871958", "justkias.com.au", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-11 05:45:49", "1871959", "https://siege-close.com/x9i32md/w1/la02", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-11 05:42:06", "1872034", "pmszxzb.fungame777.co", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 05:31:02", "1872030", "https://testmyopinion.live/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/testmyopinion.live", "ClickFix", "0", "CarsonWilliams"
"2026-08-11 05:31:02", "1872031", "https://belorks.xyz/", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "https://clickfix.carsonww.com/domains/belorks.xyz", "ClickFix", "0", "CarsonWilliams"
"2026-08-11 05:16:41", "1872029", "byy3qdk9.rsfoodproducts.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-11 05:11:41", "1872028", "agioty.grannygshemporium.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 05:05:08", "1872025", "107.182.173.199:22", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-11 05:05:08", "1872026", "47.254.73.23:111", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-11 04:59:16", "1872024", "wlwjxpc.finkfamilyautomotive.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 04:58:54", "1872023", "mool.mesoptik.com", "domain", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix,EtherHiding,TELEPUZ,UvoxLiaison", "1", "anonymous"
"2026-08-11 04:50:56", "1872020", "https://lb.propertyfind.cc/", "url", "botnet_cc", "win.animate_clipper", "None", "AnimateClipper", "", "100", "False", "None", "AnimateClipper,ClearFake,ClickFix", "1", "anonymous"
"2026-08-11 04:50:55", "1872019", "https://monitor.telemetry-controlsystem.in.net/8645-7f5a31344b9e", "url", "botnet_cc", "win.animate_clipper", "None", "AnimateClipper", "", "100", "False", "None", "AnimateClipper,ClearFake,ClickFix", "1", "anonymous"
"2026-08-11 04:50:54", "1872017", "https://health.winnererasable.cc/", "url", "botnet_cc", "win.animate_clipper", "None", "AnimateClipper", "", "100", "False", "None", "AnimateClipper,ClearFake,ClickFix", "1", "anonymous"
"2026-08-11 04:50:54", "1872018", "https://monitor.telemetry-controlsystem.in.net/jquery.min.js", "url", "botnet_cc", "win.animate_clipper", "None", "AnimateClipper", "", "100", "False", "None", "AnimateClipper,ClearFake,ClickFix", "1", "anonymous"
"2026-08-11 04:50:53", "1872016", "monitor.telemetry-controlsystem.in.net", "domain", "botnet_cc", "win.animate_clipper", "None", "AnimateClipper", "", "100", "False", "None", "AnimateClipper,ClearFake,ClickFix", "1", "anonymous"
"2026-08-11 04:50:40", "1872014", "wts.tb88vip.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:50:40", "1872015", "https://wts.tb88vip.top", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:50:25", "1872013", "https://45.86.245.217", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:50:21", "1872012", "https://193.233.139.123", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:37", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:50:11", "1872011", "https://91.92.242.142", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:46", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:56", "1872010", "https://5.75.212.195", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:52", "1872009", "https://167.233.197.223", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:39", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:51", "1872008", "https://167.233.133.101", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:46", "1872007", "xhlzvk.goldalignn.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 04:49:44", "1872006", "https://167.233.137.121", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:34", "1872004", "dum.tb88soul.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:35", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:34", "1872005", "https://dum.tb88soul.top", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:35", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:32", "1872003", "https://91.98.108.158", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:49:33", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:30", "1872000", "https://91.98.98.86", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:49:31", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:30", "1872001", "kwt.tb88roki.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:49:31", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:30", "1872002", "https://kwt.tb88roki.top", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:49:31", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:22", "1871999", "https://78.40.209.22", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:14", "1871998", "https://31.207.7.189", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:10", "1871997", "https://telegram.me/x0xprs", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:44", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:06", "1871996", "https://178.104.137.78", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:31", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:03", "1871995", "https://steamcommunity.com/profiles/76561198662103927", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:45", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:49:02", "1871994", "https://pik.tb88cuka.top", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:48:54", "1871993", "https://smc.tb88cuka.top", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:48:58", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:48:49", "1871991", "https://telegram.me/t8l1ak", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:21", "100", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:45:06", "1871990", "ziwuqto.eng-usa-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 04:40:51", "1871988", "https://188.245.165.232", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:53", "75", "False", "None", "Vidar", "1", "anonymous"
"2026-08-11 04:27:51", "1871987", "izvpbwe.eng-nitrilean.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 04:27:32", "1871985", "rz-job.ch", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-11 04:16:47", "1871984", "kgv6by8c.eng--cognisurge.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-11 04:09:23", "1871983", "hhxujcp.eng-neuroxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 04:08:19", "1871982", "ardxjz.goldalaign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 04:05:08", "1871981", "132.232.245.164:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-11 04:05:06", "1871978", "101.43.115.8:7777", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-11 04:05:06", "1871979", "119.45.105.71:8081", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-11 04:05:06", "1871980", "111.229.232.3:9999", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-11 03:50:05", "1871974", "https://ban.bercak4d.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 10:26:07", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-11 03:50:05", "1871975", "ban.sm188blood.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 10:25:56", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-11 03:50:05", "1871976", "https://ban.sm188blood.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 10:25:56", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-11 03:50:04", "1871973", "ban.bercak4d.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 10:26:07", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-11 03:19:36", "1871972", "wag1cew7.josephmichaelnh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-11 03:15:32", "1871971", "tknlci.go-neuroxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 03:14:39", "1871970", "qgcoxsq.eng--sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 03:07:46", "1871967", "kuoquga.eng--neuroxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 03:05:05", "1871965", "180.76.53.183:80", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-11 02:50:37", "1871964", "gcobdr.get-thyrafemmebalance.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 02:16:56", "1871962", "nlnnadg.en-us-thyrafemme-balance.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 02:08:22", "1871960", "verif-key-code.info", "domain", "botnet_cc", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,ErrTraffic,EtherHiding", "1", "anonymous"
"2026-08-11 02:00:06", "1871957", "shnsji.get-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 01:36:03", "1871954", "jrnix9p0.eng-us--goldalign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xfb64,macos", "1", "anonymous"
"2026-08-11 01:26:12", "1871953", "svwuxca.en-us-energyrevolution.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 01:16:49", "1871941", "ae5ap687.healthfoodzone.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-11 01:05:32", "1871938", "wtdqug.get--ignitra.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-11 01:05:07", "1871936", "43.254.166.41:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-11 01:05:06", "1871935", "43.254.166.41:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-11 01:05:05", "1871934", "8.147.56.196:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-11 00:36:53", "1871930", "qvmmaxk.en-us--sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 00:31:44", "1871929", "dbfvnqy.en-us--sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-11 00:14:58", "1871926", "nduzuc.get-goldalign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 23:46:52", "1871924", "43.254.166.41:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-10 23:46:29", "1871923", "update.qzkgpqn.kdns.fr", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:25", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-10 23:43:02", "1871922", "jrplawb.en-us--neuroxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 23:40:05", "1871918", "https://goo.bercak4d.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 03:26:10", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-10 23:40:05", "1871919", "goo.sm188blood.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 03:25:59", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-10 23:40:05", "1871920", "https://goo.sm188blood.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 03:25:59", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-10 23:40:04", "1871917", "goo.bercak4d.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 03:26:10", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-10 23:32:34", "1871916", "ikhppmm.buy-ignitra.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 23:31:16", "1871914", "ccrcjzl.shop-mochalean.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 23:26:39", "1871912", "mfkxos.getbraindefender.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 23:18:58", "1871910", "zs7rf4oz.havenchurchraleigh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-10 23:18:22", "1871909", "gs8istwl.en-usa-sugarmute.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-10 23:05:28", "1871908", "bkuseej.goldelign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 22:35:56", "1871904", "lydbvsp.shop-mochalean.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 22:34:41", "1871903", "shop-mochalean.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 22:35:05", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 22:34:37", "1871902", "xgbkho.get-braindefender.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 22:33:00", "1871901", "get-braindefender.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 22:33:36", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 22:14:53", "1871900", "nsfpfas.goldelign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 22:13:19", "1871899", "goldelign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:44", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 21:47:52", "1871898", "vhdekj.en-web-echoxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 21:42:28", "1871896", "en-web-echoxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 21:43:12", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 21:25:42", "1871895", "i0bx7ts6.en-en-en-slimsounds.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xfb64,macos", "1", "anonymous"
"2026-08-10 21:24:16", "1871894", "jortbrc.goldaling.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 21:22:49", "1871893", "goldaling.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 21:23:39", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 21:14:25", "1871892", "lvr1xtam.habbofutbol.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-10 21:05:07", "1871890", "134.122.200.217:8088", "ip:port", "botnet_cc", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "100", "True", "None", "quasarrat", "1", "anonymous"
"2026-08-10 21:05:07", "1871891", "89.125.244.131:80", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-10 21:05:06", "1871889", "192.252.179.24:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 20:52:55", "1871887", "jqiltw.enus-tinnitrol.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 20:52:00", "1871886", "enus-tinnitrol.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 20:52:40", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 20:33:54", "1871885", "qoommbx.goldalin.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 20:32:17", "1871884", "goldalin.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 20:33:15", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 20:05:06", "1871883", "192.252.185.78:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 20:05:05", "1871881", "192.252.185.78:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:51", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 20:05:05", "1871882", "192.252.185.78:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 20:02:54", "1871880", "wnplhn.enus-thyrafemmebalance.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 20:01:28", "1871879", "enus-thyrafemmebalance.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 20:02:09", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 19:46:44", "1871878", "91.92.42.22:6767", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:46:36", "1871877", "85.137.252.216:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:58", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:46:25", "1871876", "64.89.160.127:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-10 19:46:16", "1871875", "5.133.102.33:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:31", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-10 19:46:12", "1871874", "46.151.182.113:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:26", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-10 19:46:10", "1871873", "45.88.91.145:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:45:52", "1871872", "38.54.45.183:80", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-11 12:47:04", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-08-10 19:45:48", "1871871", "37.244.251.138:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-08-11 12:46:58", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-10 19:45:45", "1871870", "31.76.125.2:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:45:31", "1871869", "216.250.254.245:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:37", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-10 19:44:23", "1871868", "186.168.97.172:8443", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:44:56", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-08-10 19:44:14", "1871867", "181.215.49.119:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:43", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:44:05", "1871865", "172.81.132.75:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:44:05", "1871866", "172.81.132.75:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:43:40", "1871864", "151.241.99.168:1447", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-10 19:43:22", "1871863", "118.99.88.240:10549", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:28", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-10 19:43:13", "1871862", "104.249.10.87:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:43:06", "1871861", "103.213.248.61:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:08", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-10 19:42:12", "1871860", "nksdosz.goldalignn.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:44", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 19:41:10", "1871859", "goldalaign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:44", "100", "True", "None", "10August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-10 19:35:35", "1871858", "http://shkpiva.shop:5627/comments", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/b431762c4d8a0a25d9a210bbfdfa302c2be3dca39121cf10ede9575332b63ffc/", "remus", "0", "abuse_ch"
"2026-08-10 19:35:31", "1871857", "http://beljaro.shop:2536/images", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/b431762c4d8a0a25d9a210bbfdfa302c2be3dca39121cf10ede9575332b63ffc/", "remus", "0", "abuse_ch"
"2026-08-10 19:31:02", "1871799", "belorks.xyz", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "75", "True", "https://www.clickfixed.uk/intel/7298", "ClickFix", "0", "ClickFixer"
"2026-08-10 19:31:02", "1871806", "38.97.63.243:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-08-11 13:32:25", "100", "False", "None", "loader,Vo1d", "0", "Bitsight"
"2026-08-10 19:31:02", "1871835", "https://seversin.lol/mods/api/log-download", "url", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "", "IRAHook,RAT,stealer", "1", "anonymous"
"2026-08-10 19:31:01", "1871836", "https://seversin.lol/ws", "url", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "", "IRAHook,RAT,stealer", "1", "anonymous"
"2026-08-10 19:31:01", "1871837", "https://seversin.lol/?p=", "url", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "", "IRAHook,RAT,stealer", "1", "anonymous"
"2026-08-10 19:31:00", "1871838", "https://seversin.lol/get/config", "url", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "", "IRAHook,RAT,stealer", "1", "anonymous"
"2026-08-10 19:31:00", "1871840", "seversin.lol", "domain", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "", "IRAHook,RAT,stealer", "1", "anonymous"
"2026-08-10 19:30:59", "1871839", "https://seversin.lol/babayla/zor/yarisirlar/", "url", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "", "IRAHook,RAT,stealer", "1", "anonymous"
"2026-08-10 19:30:58", "1871842", "http://61.52.157.83:44657/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/61.52.157.83", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-10 19:30:57", "1871843", "http://153.117.14.15:48887/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/153.117.14.15", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-10 19:30:57", "1871856", "206.189.81.41:9035", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-10 19:16:10", "1871855", "59qxatd0.gtacauto.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-10 19:12:11", "1871854", "fgauki.en-us-thyrafemme-balance.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 19:10:47", "1871853", "en-us-thyrafemme-balance.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:44", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 19:05:09", "1871852", "192.252.179.24:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 19:05:07", "1871851", "192.252.179.24:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:51", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 19:00:59", "1871850", "http://tokjoza.shop:5200/images", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/7bd899846f7782027431f3a4f582b166f6944bbc4fdbd86aadd78c248c57f485/", "remus", "0", "abuse_ch"
"2026-08-10 19:00:57", "1871849", "http://shkpiva.shop:5627/reviews", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/7bd899846f7782027431f3a4f582b166f6944bbc4fdbd86aadd78c248c57f485/", "remus", "0", "abuse_ch"
"2026-08-10 19:00:54", "1871848", "http://beljaro.shop:2536/projects", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/7bd899846f7782027431f3a4f582b166f6944bbc4fdbd86aadd78c248c57f485/", "remus", "0", "abuse_ch"
"2026-08-10 18:51:25", "1871847", "hmskuzk.get-thyrafemmebalance.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 18:50:08", "1871846", "get-thyrafemmebalance.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:44", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 18:22:35", "1871845", "vrswff.en-us-theslimsplitsmethod.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 18:20:18", "1871844", "en-us-theslimsplitsmethod.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 18:20:57", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 18:17:12", "1871841", "28jk0aeb.eng-slimsounds.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-10 18:05:01", "1871834", "jmnttbq.getsightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 18:01:04", "1871833", "http://tokjoza.shop:5200/accounts", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/721e28946f79f65e9722d27fdb6fb384a3fb747c82b4c8c2f9dffc0fdc6c0a49/", "remus", "0", "abuse_ch"
"2026-08-10 18:01:01", "1871832", "http://shkpiva.shop:5627/videos", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/721e28946f79f65e9722d27fdb6fb384a3fb747c82b4c8c2f9dffc0fdc6c0a49/", "remus", "0", "abuse_ch"
"2026-08-10 18:00:58", "1871831", "http://beljaro.shop:2536/contacts", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/721e28946f79f65e9722d27fdb6fb384a3fb747c82b4c8c2f9dffc0fdc6c0a49/", "remus", "0", "abuse_ch"
"2026-08-10 17:59:41", "1871830", "getsightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 18:00:05", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 17:45:11", "1871829", "46.246.4.9:7044", "ip:port", "botnet_cc", "win.vjw0rm", "None", "Vjw0rm", "", "100", "False", "None", "Vjw0rm", "0", "abuse_ch"
"2026-08-10 17:45:06", "1871828", "http://wagosinga.ydns.eu:7044/is-ready", "url", "botnet_cc", "win.houdini", "Hworm,Jenxcus,Kognito,Njw0rm,WSHRAT,dinihou,dunihi", "Houdini", "", "100", "False", "None", "RAT,WSHRAT", "0", "abuse_ch"
"2026-08-10 17:40:41", "1871827", "http://tokjoza.shop:5200/tags", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/32c100b984e2a26d588fafc648dcdd7694788d0c18af15704e3601ffc001f334/", "remus", "0", "abuse_ch"
"2026-08-10 17:40:38", "1871826", "http://none/tokens", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/32c100b984e2a26d588fafc648dcdd7694788d0c18af15704e3601ffc001f334/", "remus", "0", "abuse_ch"
"2026-08-10 17:40:36", "1871825", "http://beljaro.shop:2536/posts", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/32c100b984e2a26d588fafc648dcdd7694788d0c18af15704e3601ffc001f334/", "remus", "0", "abuse_ch"
"2026-08-10 17:39:34", "1871824", "eolins.en-us-theenergyrevolution.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 17:35:03", "1871823", "en-us-theenergyrevolution.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 17:35:17", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 17:28:22", "1871822", "ergo-up.ch", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-10 17:20:05", "1871821", "https://its.beras1.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-10 23:26:07", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-10 17:20:04", "1871820", "its.beras1.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-10 23:26:07", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-10 17:16:41", "1871819", "phhqqp5d.grannygshemporium.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-10 17:16:33", "1871818", "aoy7vij2.foodpapajobs.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xfb64,macos", "1", "anonymous"
"2026-08-10 17:15:05", "1871817", "https://its.sm188auto.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-10 23:25:56", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-10 17:15:04", "1871816", "its.sm188auto.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-10 23:25:56", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-10 17:10:53", "1871815", "ozfttik.get-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 17:09:13", "1871814", "get-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:44", "100", "True", "None", "10August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-10 17:05:05", "1871813", "154.12.86.154:8002", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 16:45:18", "1871812", "ynbfqi.enus-synaptigen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 16:43:48", "1871811", "enus-synaptigen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 16:44:32", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 16:40:03", "1871810", "5.223.80.130:318", "ip:port", "botnet_cc", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "", "100", "False", "None", "NanoCore,RAT", "0", "abuse_ch"
"2026-08-10 16:22:52", "1871809", "bypraqr.get--ignitra.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 16:19:38", "1871808", "get--ignitra.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:44", "100", "True", "None", "10August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-10 16:18:36", "1871807", "getignitra.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 16:11:53", "1871805", "en-us--sleeplean.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 16:11:59", "100", "True", "None", "10August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-10 16:11:21", "1871804", "en-ussleeplean.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 16:04:46", "1871803", "en-us-sleep-leans.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 16:05:25", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 15:53:39", "1871802", "fhuyul.en-us-superbrain.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 15:45:55", "1871801", "hlzhpm.en-us-superbrain.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 15:44:11", "1871800", "en-us-superbrain.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 15:53:41", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 15:25:51", "1871798", "31.59.118.77:7004", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/30f8fdb26e5ef75f382fd927a35e00ea8accd504e677058b7fd28e6a73553d40/", "xworm", "0", "abuse_ch"
"2026-08-10 15:25:48", "1871797", "155.103.71.203:2233", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/c803ce174f0688c83f94db7001b99d103b5d027be7d0d230494a5dfdb88c9619/", "xworm", "0", "abuse_ch"
"2026-08-10 15:25:32", "1871796", "oceanking.noip.at", "domain", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/bab65bff384cc974f7b0dc36080ab51841745997f9e7da4888445ce618ac3482/", "remcos", "0", "abuse_ch"
"2026-08-10 15:25:31", "1871795", "dunday.mytunnel.org", "domain", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/bab65bff384cc974f7b0dc36080ab51841745997f9e7da4888445ce618ac3482/", "remcos", "0", "abuse_ch"
"2026-08-10 15:20:49", "1871794", "87.120.244.219:19601", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/bf24bb51af4d6c922bcb3eb46a712fef9cf3ed76822ebde5669a62673bf1d300/", "remcos", "0", "abuse_ch"
"2026-08-10 15:20:33", "1871793", "anilmut.ydns.eu", "domain", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/303a507698ff9aab2d8df60f2ed2080e14204f3083bea4d5d01705a54cf6fea8/", "remcos", "0", "abuse_ch"
"2026-08-10 15:17:11", "1871792", "cgfmqtn.en-us-sightfrresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 15:14:15", "1871791", "en-us-sightfrresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 15:14:33", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 15:14:14", "1871790", "fmtt8q1j.fungame777.co", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-10 15:09:30", "1871789", "xndjbjo.enus-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 15:09:05", "1871788", "enus-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 15:10:11", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 15:05:45", "1871787", "155.254.98.57:7007", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/248d6fd4d064a4ced3a75ee493a43afb2a909d3c14726150685fb26147fc8d3b/", "xworm", "0", "abuse_ch"
"2026-08-10 15:05:44", "1871786", "155.103.71.88:3456", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/5a83f8a2973445c7e801d8b470851a4fa6dfc51c776f8233c727c7fab9281fee/", "xworm", "0", "abuse_ch"
"2026-08-10 15:05:35", "1871785", "www.xmmtbxbackup2.com", "domain", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/4da2425b6d3677ff80e52dd880a6f718257ad3c15deb565cd947b6f3aa05a9eb/", "remcos", "0", "abuse_ch"
"2026-08-10 15:05:34", "1871782", "www.xmmtbx.com", "domain", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/4da2425b6d3677ff80e52dd880a6f718257ad3c15deb565cd947b6f3aa05a9eb/", "remcos", "0", "abuse_ch"
"2026-08-10 15:05:34", "1871783", "www.xmmtbxbackup.com", "domain", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/4da2425b6d3677ff80e52dd880a6f718257ad3c15deb565cd947b6f3aa05a9eb/", "remcos", "0", "abuse_ch"
"2026-08-10 15:05:34", "1871784", "www.xmmtbxbackup1.com", "domain", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/4da2425b6d3677ff80e52dd880a6f718257ad3c15deb565cd947b6f3aa05a9eb/", "remcos", "0", "abuse_ch"
"2026-08-10 15:05:07", "1871781", "49.232.108.35:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-10 15:05:06", "1871779", "141.94.121.162:4242", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-08-10 15:05:06", "1871780", "154.12.32.114:1141", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-08-10 15:05:05", "1871778", "2.50.170.49:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-10 15:01:19", "1871777", "bewegungszentrum-hochdorf.ch", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-10 15:01:16", "1871776", "okqhiof.en-us--sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 14:54:25", "1871775", "tvalui.en-us-sugermute.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 14:53:35", "1871774", "en-us-sugermute.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 14:54:21", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 14:45:05", "1871773", "217.60.195.236:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "False", "None", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-08-10 14:41:15", "1871772", "nslabqu.en-us--sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 14:39:30", "1871771", "5.230.201.75:8996", "ip:port", "botnet_cc", "win.purelogs", "None", "PureLogs Stealer", "", "75", "False", "https://bazaar.abuse.ch/sample/bc16cf19075de6200a10d31a5f8775461c6d98c0d2f41d2b59c1ed28659b62c3/", "PureLogsStealer", "0", "abuse_ch"
"2026-08-10 14:35:46", "1871770", "87.120.244.219:17598", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/fc48b40be3b232ad4cdd5630d857cfe50415fe05b6677f74510cb6af109328c0/", "remcos", "0", "abuse_ch"
"2026-08-10 14:32:53", "1871769", "sysupdate.online", "domain", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "https://bazaar.abuse.ch/sample/ca8f173b7f0f76ffef2672776582a05434138b4e0fcbd738157268cc54d32231/", "MeshAgent,RMM", "0", "abuse_ch"
"2026-08-10 14:27:29", "1871768", "191.215.37.40:5173", "ip:port", "botnet_cc", "win.overlord", "None", "Overlord RAT", "", "75", "False", "https://bazaar.abuse.ch/sample/bb024a4c3e301b740e986aecf768d0d7947a75b33dccde6e52baf15c0b0a59fc/", "Overlord,OverlordRAT,RAT", "0", "abuse_ch"
"2026-08-10 14:27:16", "1871767", "clflwpz.en-us--sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 14:25:30", "1871766", "161.97.162.13:8899", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/3ccb005c80531d21f8cfdf7823f55b16a55fc83a8b05935224b89f3aaa4e6320/", "remcos", "0", "abuse_ch"
"2026-08-10 14:25:29", "1871765", "107.172.134.28:6000", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/bf8d6c2f8125dc85a5a830c5e940951441c92823db6793794008301ba6f3f5d6/", "xworm", "0", "abuse_ch"
"2026-08-10 14:24:28", "1871764", "en-us--sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:44", "100", "True", "None", "10August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-10 14:24:16", "1871763", "en-ussightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 14:24:14", "1871631", "64.227.68.158:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-11 13:24:48", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-10 14:24:14", "1871632", "165.22.197.20:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-11 13:25:36", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-10 14:24:13", "1871633", "165.232.87.245:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-11 13:25:59", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-10 14:24:13", "1871634", "178.62.229.223:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-11 13:25:01", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-10 14:24:12", "1871636", "159.223.209.14:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-11 13:25:13", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-10 14:24:12", "1871638", "161.35.155.251:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-11 13:25:24", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-10 14:24:11", "1871637", "167.71.67.197:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-11 13:24:12", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-10 14:24:11", "1871639", "178.62.230.102:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-11 13:21:05", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-10 14:24:10", "1871640", "142.93.139.221:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-11 13:25:47", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-10 14:24:10", "1871648", "belorks.xyz", "domain", "botnet_cc", "js.clearfake", "None", "ClearFake", "2026-08-10 11:15:26", "100", "True", "None", "ClearFake,ClickFix,EtherHiding", "0", "penislandrocket"
"2026-08-10 14:24:09", "1871717", "38.97.63.242:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-08-11 12:31:00", "100", "False", "None", "loader,Vo1d", "0", "Bitsight"
"2026-08-10 14:24:09", "1871718", "http://103.174.243.219:35630/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/103.174.243.219", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-10 14:24:09", "1871719", "http://120.229.79.252:33575/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/120.229.79.252", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-10 14:24:08", "1871720", "http://72.255.32.86:39014/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/72.255.32.86", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-10 14:24:08", "1871721", "http://175.107.233.255:52927/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/175.107.233.255", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-10 14:24:07", "1871724", "ebnlinfengv6l2ilx.duckdns.org", "domain", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "100", "False", "https://bazaar.abuse.ch/sample/f5c235bf56a9c15afb65f83f437678cd6fac7e23b9a850b7806d395f4b778948/", "None", "0", "emmanualopsecgo"
"2026-08-10 14:24:07", "1871734", "http://20.214.2.18/receive.php", "url", "botnet_cc", "unknown_stealer", "None", "Unknown Stealer", "", "100", "False", "https://app.any.run/tasks/b979f185-839a-4b4d-ae31-6dbb84a18675", "discord,generic,nodejs,nyxstealer,stealer", "1", "anonymous"
"2026-08-10 14:24:06", "1871728", "161.35.48.40:12345", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-10 14:20:26", "1871761", "185.242.4.122:37393", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/279e14ad7bad135f7b63e17c355c969116c2db600967061bbab107f66d62dbb6/", "remcos", "0", "abuse_ch"
"2026-08-10 14:20:26", "1871762", "209.127.35.195:3533", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/f66bd3ba1b2b9190f924031ebb2346338df2e26c189850ee3237ea80adc898eb/", "remcos", "0", "abuse_ch"
"2026-08-10 14:20:24", "1871760", "109.248.148.247:32734", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/eb2cd2c52a03b20d87ea129eb09842e8ece28bf7476a61d3fefc229b0e8622ec/", "remcos", "0", "abuse_ch"
"2026-08-10 14:15:54", "1871759", "109.248.151.124:7575", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/428e478e4fd72979677f7fc4f568a2fd05a811cb3ff555a4bd068226e86b012f/", "xworm", "0", "abuse_ch"
"2026-08-10 14:10:46", "1871758", "86.106.84.151:37393", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/c961a6099fe726be83ed564f937b3f259cf6023451f09d6f22536ed4fba18011/", "remcos", "0", "abuse_ch"
"2026-08-10 14:10:45", "1871757", "31.13.190.82:37393", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/5d13cfc9ec95b80219e759f945661eb22e4781df28a181474a040dc72068562b/", "remcos", "0", "abuse_ch"
"2026-08-10 14:10:37", "1871756", "kindjurt.myddns.me", "domain", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/f6bcc2de6becba2ea62a6766184c5003d379fc70c88dfdb53b0c3b184a81ac94/", "remcos", "0", "abuse_ch"
"2026-08-10 14:05:36", "1871755", "kwoeju.en-us-slimsplitsmethod.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 14:05:07", "1871752", "101.35.129.174:8000", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 14:05:07", "1871753", "34.92.128.98:50050", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 14:05:07", "1871754", "108.165.147.244:22", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 14:05:05", "1871751", "101.35.129.174:6379", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 14:03:11", "1871750", "en-us-slimsplitsmethod.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 14:03:44", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 13:55:39", "1871749", "cpvmfg.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-10 13:50:44", "1871748", "37.120.146.146:37393", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/08e9ee91c55772b2c30f2ca6d26b9960000f3b08d08bf878d5d95045c93fa7c8/", "remcos", "0", "abuse_ch"
"2026-08-10 13:50:43", "1871747", "104.249.130.248:5960", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/6b555912da38f884965345b7012569f6ad38292fb073157b4ff4fac15a00cc26/", "xworm", "0", "abuse_ch"
"2026-08-10 13:45:42", "1871746", "onboard.radiantfluxstudio.com", "domain", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/8dba8da0a8c596b4f3a886f95c57bdb6d8b046ee356d3c52555c3bc3fb0cd114/", "remcos", "0", "abuse_ch"
"2026-08-10 13:45:38", "1871745", "foxybridge.ch", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-10 13:40:44", "1871744", "46.183.218.151:37393", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/0c3a63f8f91965db6755ea623fe109ee291dbba63dda3022b1a22a9640bccee9/", "remcos", "0", "abuse_ch"
"2026-08-10 13:40:04", "1871743", "185.14.92.102:443", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "False", "None", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-08-10 13:38:44", "1871742", "llasvij.en-us-odizen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 13:35:39", "1871741", "196.251.121.163:14555", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/132334806bc8620a8900f061ba535b049b2c756a3987c0a8a3bd58a82bf45579/", "remcos", "0", "abuse_ch"
"2026-08-10 13:33:45", "1871740", "en-us-odizen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 14:55:50", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 13:17:58", "1871739", "go78tteu.eng-nitrilean.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-10 13:15:10", "1871738", "nyerki.en-us-slimsplits.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 13:12:40", "1871737", "en-us-slimsplits.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 13:12:54", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 13:11:11", "1871736", "0rwgfz6h.finkfamilyautomotive.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-10 13:07:06", "1871735", "weqtrjme.eng-usa-digestistart.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xfb64,macos", "1", "anonymous"
"2026-08-10 13:05:09", "1871733", "101.35.129.174:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 13:05:07", "1871732", "101.35.129.174:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 13:05:06", "1871731", "101.35.129.174:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 13:05:05", "1871729", "217.60.241.170:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-10 13:05:05", "1871730", "154.221.25.38:8088", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 12:44:39", "1871727", "czrsixg.en-us--neuroxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 12:43:49", "1871726", "en-us--neuroxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:44", "100", "True", "None", "10August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-10 12:43:18", "1871725", "en-usneuroxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 12:23:27", "1871723", "cqyxny.enus-slimsounds.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 12:22:08", "1871722", "enus-slimsounds.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 12:23:02", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 12:06:56", "1871716", "pyfcdqnpvnbwagbyxe.en-usa-bpzone.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0xa770,windows", "1", "anonymous"
"2026-08-10 11:54:20", "1871715", "ealceem.enus-ignitra.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 11:52:29", "1871714", "enus-ignitra.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 11:53:12", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 11:49:11", "1871711", "de71cf8817c3e91c8a00c22198bb36d6655f00e32741098ae5d81ec09ea69918", "sha256_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:11", "1871712", "5df985e256e32dd57aaac1bad79672fbb44788ea", "sha1_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:11", "1871713", "662d653f550544643f67c3891ff2cf2c", "md5_hash", "payload", "elf.kuiper", "None", "Kuiper", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:10", "1871709", "1441b32780ec0e76d09af693f62819c2d1ae8125", "sha1_hash", "payload", "win.havoc", "Havokiz", "Havoc", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:10", "1871710", "33d103a950e97fb4c0f28d8cff985ba6", "md5_hash", "payload", "win.havoc", "Havokiz", "Havoc", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:09", "1871707", "0e260f328a81040da84f79bb21d54953", "md5_hash", "payload", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:09", "1871708", "904bb06ad9ad3c8e4aa980b96cbecad85c14bd994af013d77121723c85a5e1a9", "sha256_hash", "payload", "win.havoc", "Havokiz", "Havoc", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:08", "1871706", "965974f7bb6bd5c71da7d0ae843ea3f84229b74c", "sha1_hash", "payload", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:07", "1871702", "2a167fbe58a9d874dda8798e9b0d773d9316a217256a7e3f1d0c5e3e26f9f03a", "sha256_hash", "payload", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:07", "1871703", "666974fd5ab2ab200c8c87e1945708c9e4f2e76e", "sha1_hash", "payload", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:07", "1871704", "325dd213f9a6f78e41cad30c49e0a178", "md5_hash", "payload", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:07", "1871705", "da9442ac1174544216a00fb1792f7ee019cb708e47cd5948a9632e24285b36cb", "sha256_hash", "payload", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:06", "1871699", "c829ecdfad04daba449fb93106f176c5fd065f3642b70cc46ab4285246a3057d", "sha256_hash", "payload", "py.creal_stealer", "None", "Creal Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:06", "1871700", "40bb4c848b9e8843d48884ded074af0dc183778d", "sha1_hash", "payload", "py.creal_stealer", "None", "Creal Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:06", "1871701", "0bc755a061e932971b5e642b99adda04", "md5_hash", "payload", "py.creal_stealer", "None", "Creal Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:05", "1871697", "9b490baf8909538616aded33ffa0502f8a6fa085", "sha1_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:05", "1871698", "a02aa86b025c34615a99437e118128fe", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:04", "1871695", "1b00808e8d58b136cd389361d01eb377", "md5_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:04", "1871696", "bbb3837bc8706b87668877a86fcda6a69ace99739e19caa744bef624570a7c0a", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:03", "1871693", "90b2ceb05b34ed6012d20b547cec83a2dacbe56659eb4479150f30015172c3c2", "sha256_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:03", "1871694", "3692fc83c64796ce846099f9dc651a9b2140c10e", "sha1_hash", "payload", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:01", "1871690", "5d8353255bc5b09aaed218f2d6f016ceda78354cfb1a3f0d36d939d142f3a8f2", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:01", "1871691", "673a985979c3381c4b1b5103816a0a2a11f29bee", "sha1_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:01", "1871692", "59e90d4e4072484541636b873c35a4a6", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:49:00", "1871689", "092821e77feade246a230168b2c0b775", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:59", "1871687", "b752cd26bfd88495e011ca4ace567f6715d1323bab0803d47b2736cfbc5db955", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:59", "1871688", "5fcb20277dab30f4ae6a46f9596d68d2cea74609", "sha1_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:58", "1871685", "4c34f12dbee3457a9c1cf5185f59fc56084de8b8", "sha1_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:58", "1871686", "2e4aa86a1df193c715970aee3096bf3a", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:57", "1871682", "2f7c74580c7031ba7d9ad89771032eca0ab61758", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:57", "1871683", "b24376060623dd8dabec2c3dd423361c", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:57", "1871684", "843b927de18b16ef40abb48067b6be80e4c63a9e9600342ca672bc75e84e7a48", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:56", "1871679", "b267d67a00e870fe7f6b2b595842231ddace2657", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:56", "1871680", "48d66a8f0f2a7d144cfa1f6b7a006c69", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:56", "1871681", "8e5e251d971957c982721ef54328000815d80c744f184fac3bb1afd64dd3624a", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:55", "1871677", "f466e3112ffdfa965f4457c98dee5b92", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:55", "1871678", "1d60903c4cf77503ae2ccbc0e1f33e455033bca93d1a289531df7e1a166a5449", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:54", "1871676", "55f6b5e510fe2149eb713cce3aa68ec07d313c12", "sha1_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:53", "1871675", "fd7cee5a13218f6d00b40e85579c6f4b4f06d5432b9fb785b0b81f8547c197f4", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:52", "1871673", "eb63f8a9af89d85b71ca649ed826c4244aa81e39", "sha1_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:52", "1871674", "ae9893c7a60b298f3f45b85726e09a98", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:51", "1871670", "6c8ee646afb6b19ade6af5333c52c5263103f949", "sha1_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:51", "1871671", "2be02d3def1b116c668cc84e628e2065", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:51", "1871672", "24d5d3e5095d9bd866d657c646d5c4035e64315c7ba3c17b230415f0bef8c0d3", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:50", "1871667", "2ac9f75fc9bc14e8f57e319630c3f9dde3a814f5", "sha1_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:50", "1871668", "a65f533d10703afcd9cc1210ca559b75", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:50", "1871669", "45c985d787b9f8730c4b05555f8ecf28f9c58f0948c5180108ca185441ab145a", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:49", "1871666", "ee8bd9222c943d35f0702143c7606aef6a62b229ffc109a468537322e917a9e1", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:48", "1871665", "fdb6448a3ac57e511a53cda07945be8f", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:47", "1871662", "893cf55eb5c958896580854b7f5c44e1", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:47", "1871663", "f02eb5040f50f5bdade4c2a2114ec43c33bdf4a7fd9051f9f7d411eb50b1474e", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:47", "1871664", "35170d38f2089910e6dc71ea9a2fd202f6dd2736", "sha1_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:46", "1871660", "a6a6674d13230442f10b0b6663a5e659f9d3a072b8e575fd332baa5ff685a1d6", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:48:46", "1871661", "0c20fb53da56369ffb8c90706b8d1c05e76fc3e0", "sha1_hash", "payload", "win.formbook", "win.xloader", "Formbook", "", "95", "False", "None", "None", "0", "Grim"
"2026-08-10 11:47:37", "1871659", "123.207.203.20:55501", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:38", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-10 11:47:33", "1871658", "117.24.4.112:4521", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:33", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-10 11:33:19", "1871657", "bztmkx.en-us-slimsounds.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 11:31:36", "1871656", "en-us-slimsounds.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 11:32:21", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 11:22:20", "1871655", "enus-sleeplean.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 11:23:04", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 11:15:06", "1871653", "poc.sm188auto.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-10 16:26:09", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-10 11:15:06", "1871654", "https://poc.sm188auto.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-10 16:26:09", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-10 11:15:05", "1871651", "poc.beras1.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-10 16:26:20", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-10 11:15:05", "1871652", "https://poc.beras1.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-10 16:26:20", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-10 11:12:50", "1871650", "78sgh99h.en-us-energyrevolution.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-10 11:05:38", "1871649", "nynashanti.ch", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-10 11:02:50", "1871647", "skrfpet.en-us-ignitraa.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 11:01:55", "1871646", "en-us-ignitraa.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 09:56:57", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 10:50:46", "1871645", "http://tokjoza.shop:5200/webhooks", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/f02eb5040f50f5bdade4c2a2114ec43c33bdf4a7fd9051f9f7d411eb50b1474e/", "remus", "0", "abuse_ch"
"2026-08-10 10:50:41", "1871644", "http://none/profiles", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/f02eb5040f50f5bdade4c2a2114ec43c33bdf4a7fd9051f9f7d411eb50b1474e/", "remus", "0", "abuse_ch"
"2026-08-10 10:50:39", "1871643", "http://beljaro.shop:2536/invoices", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/f02eb5040f50f5bdade4c2a2114ec43c33bdf4a7fd9051f9f7d411eb50b1474e/", "remus", "0", "abuse_ch"
"2026-08-10 10:32:52", "1871642", "cahnzr.prosta--vive.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 10:25:04", "1871641", "zfeodhb.en-us-goldaligns.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 10:23:34", "1871635", "en-us-goldaligns.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 10:24:18", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 10:00:56", "1871630", "http://tokjoza.shop:5200/attachments", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/843b927de18b16ef40abb48067b6be80e4c63a9e9600342ca672bc75e84e7a48/", "remus", "0", "abuse_ch"
"2026-08-10 10:00:55", "1871629", "http://shkpiva.shop:5627/tokens", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/843b927de18b16ef40abb48067b6be80e4c63a9e9600342ca672bc75e84e7a48/", "remus", "0", "abuse_ch"
"2026-08-10 10:00:52", "1871628", "http://beljaro.shop:2536/accounts", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/843b927de18b16ef40abb48067b6be80e4c63a9e9600342ca672bc75e84e7a48/", "remus", "0", "abuse_ch"
"2026-08-10 10:00:37", "1871627", "authorljmatin.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-10 09:46:58", "1871626", "98.191.191.44:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:48:17", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-08-10 09:46:52", "1871625", "91.92.42.22:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 09:46:51", "1871624", "91.92.34.73:43283", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-10 09:46:36", "1871623", "77.237.97.58:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-08-11 12:47:50", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-10 09:45:53", "1871622", "31.77.195.32:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:55", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-10 09:44:52", "1871621", "209.99.190.23:56014", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 09:43:58", "1871620", "167.233.161.42:3287", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 12:44:15", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-10 09:43:52", "1871619", "159.203.69.210:8401", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:07", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-10 09:43:38", "1871618", "149.28.121.179:5000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:43:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-10 09:43:10", "1871617", "104.239.66.245:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 09:40:24", "1871616", "uhfazu.tiroalpaloes.co", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 09:36:56", "1871608", "volrko.pro", "domain", "botnet_cc", "js.clearfake", "None", "ClearFake", "", "100", "True", "None", "ClearFake,ClickFix,EtherHiding", "0", "penislandrocket"
"2026-08-10 09:36:55", "1871578", "testmyopinion.live", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "75", "True", "https://www.clickfixed.uk/intel/7252", "ClickFix", "0", "ClickFixer"
"2026-08-10 09:35:39", "1871615", "ronaldbeck.duckdns.org", "domain", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "75", "False", "https://bazaar.abuse.ch/sample/ee9918abc39d7d0b46c5cf7891f5b845d0ae5acc0e88f22ecd6ad19099260651/", "asyncrat", "0", "abuse_ch"
"2026-08-10 09:35:38", "1871614", "beckronald.duckdns.org", "domain", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "75", "False", "https://bazaar.abuse.ch/sample/ee9918abc39d7d0b46c5cf7891f5b845d0ae5acc0e88f22ecd6ad19099260651/", "asyncrat", "0", "abuse_ch"
"2026-08-10 09:34:35", "1871613", "ftp.holzbrenzii.com", "domain", "botnet_cc", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "100", "False", "https://bazaar.abuse.ch/sample/e9855bdf3f45a2ed0148a1f6714f6ce081f4da526aeb044d2e58ee394e62078b/", "AgentTesl", "0", "abuse_ch"
"2026-08-10 09:33:33", "1871612", "otp.vagrancyvirus.cc", "domain", "botnet_cc", "win.acr_stealer", "None", "ACR Stealer", "2026-08-10 09:33:33", "100", "False", "https://bazaar.abuse.ch/sample/cd598cea811d8f73ca7afffa40e5963be9a82e01bad8ffcebb104b475c091faa/", "ACRStealer", "0", "abuse_ch"
"2026-08-10 09:33:03", "1871611", "ucooyac.enus-goldalign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 09:31:55", "1871610", "volrko.pro", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-10 10:56:28", "100", "False", "None", "ClickFix", "0", "threatcat_ch"
"2026-08-10 09:30:36", "1871609", "stimmt.ch", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-10 09:26:16", "1871607", "147.124.212.143:4333", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "100", "False", "", "None", "0", "proxylife"
"2026-08-10 09:24:42", "1871606", "igxpbym.enus-goldalign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 09:21:57", "1871605", "meow.schoolprojectxyz.lol", "domain", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-10 09:21:57", "100", "False", "https://bazaar.abuse.ch/sample/809ea6ebd9a87909a033616519d3c7d596b25136662da8a496ad971dbde62cf2/", "Mirai", "1", "anonymous"
"2026-08-10 09:21:50", "1871604", "en-en-synaptign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 09:21:56", "100", "True", "None", "10August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-10 09:11:08", "1871603", "dqfqjllc.elcornerderaulmorote.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-10 09:05:25", "1871602", "index.ridgefield.lol", "domain", "botnet_cc", "win.revstealer", "None", "RevStealer", "", "75", "False", "None", "revstealer", "0", "Myrtus0x0"
"2026-08-10 09:03:13", "1871601", "enskbzl.enus-goldalign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 09:02:14", "1871600", "enus-goldalign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 09:33:46", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-10 08:55:07", "1871599", "sqq7n7q0.eng-en-slimsounds.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xfb64,macos", "1", "anonymous"
"2026-08-10 08:50:07", "1871598", "http://luwmera.shop:5200", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-10 08:50:06", "1871597", "xpeidl.spirosnet.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 08:43:27", "1871596", "rypqfjc.greenestreetchurch.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 08:28:48", "1871592", "drive-photopage.info", "domain", "payload_delivery", "js.tonrat", "TONResolver", "TonRAT", "", "100", "True", "None", "None", "1", "anonymous"
"2026-08-10 08:28:48", "1871593", "folder-photohotel.info", "domain", "payload_delivery", "js.tonrat", "TONResolver", "TonRAT", "", "100", "True", "None", "None", "1", "anonymous"
"2026-08-10 08:28:48", "1871594", "guestsafeimage.icu", "domain", "payload_delivery", "js.tonrat", "TONResolver", "TonRAT", "", "100", "True", "None", "None", "1", "anonymous"
"2026-08-10 08:28:48", "1871595", "load-drivefile.info", "domain", "payload_delivery", "js.tonrat", "TONResolver", "TonRAT", "", "100", "True", "None", "None", "1", "anonymous"
"2026-08-10 08:22:57", "1871591", "154.29.72.36:6000", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "", "75", "False", "https://bazaar.abuse.ch/sample/2a167fbe58a9d874dda8798e9b0d773d9316a217256a7e3f1d0c5e3e26f9f03a/", "PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 08:21:53", "1871588", "204.77.130.227:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "", "75", "False", "https://bazaar.abuse.ch/sample/da9442ac1174544216a00fb1792f7ee019cb708e47cd5948a9632e24285b36cb/", "PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 08:21:53", "1871589", "204.77.130.227:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "", "75", "False", "https://bazaar.abuse.ch/sample/da9442ac1174544216a00fb1792f7ee019cb708e47cd5948a9632e24285b36cb/", "PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 08:21:53", "1871590", "204.77.130.227:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "", "75", "False", "https://bazaar.abuse.ch/sample/da9442ac1174544216a00fb1792f7ee019cb708e47cd5948a9632e24285b36cb/", "PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 08:21:42", "1871580", "89.167.18.40:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:21:42", "1871581", "62.238.20.117:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:21:42", "1871582", "46.62.173.126:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:21:42", "1871583", "2.28.53.243:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:21:42", "1871584", "46.62.167.86:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:21:42", "1871585", "178.104.167.253:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:21:42", "1871586", "2.28.63.136:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:21:42", "1871587", "78.47.230.34:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:21:41", "1871579", "89.167.23.148:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:20:23", "1871577", "mittenmint.cfd", "domain", "botnet_cc", "unknown_loader", "None", "Unknown Loader", "", "100", "False", "", "OffLoader", "0", "abuse_ch"
"2026-08-10 08:19:50", "1871575", "spc.sinism188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:50", "1871576", "tis.sinism188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871559", "sep.beras1.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871560", "rha.beras1.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871561", "gve.beras1.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871562", "ttf.beras1.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871563", "rne.sm188auto.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871564", "ndd.sm188auto.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871565", "sep.sm188auto.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871566", "rha.sm188auto.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871567", "gve.sm188auto.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871568", "ttf.sm188auto.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871569", "blh.slotmacau188e.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871570", "dfd.slotmacau188e.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871571", "ran.slotmacau188e.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871572", "ign.slotmacau188e.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871573", "xox.slotmacau188bd.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:49", "1871574", "xox.sinism188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:48", "1871556", "pas.bikhoki.cc", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:48", "1871557", "rne.beras1.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:48", "1871558", "ndd.beras1.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:14", "1871550", "https://46.62.173.126/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:14", "1871551", "https://2.28.53.243/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:34", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:14", "1871552", "https://46.62.167.86/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 09:31:08", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:14", "1871553", "https://178.104.167.253/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:14", "1871554", "https://2.28.63.136/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:14", "1871555", "https://78.47.230.34/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 08:25:26", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:13", "1871546", "https://spc.sinism188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:13", "1871547", "https://tis.sinism188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:13", "1871548", "https://89.167.18.40/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:30:58", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:13", "1871549", "https://62.238.20.117/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:47", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:12", "1871540", "https://dfd.slotmacau188e.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:12", "1871541", "https://ran.slotmacau188e.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:12", "1871542", "https://www.slotmacau188e.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:12", "1871543", "https://ign.slotmacau188e.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:12", "1871544", "https://xox.slotmacau188bd.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:12", "1871545", "https://xox.sinism188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:11", "1871534", "https://ndd.sm188auto.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:11", "1871535", "https://sep.sm188auto.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:11", "1871536", "https://rha.sm188auto.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:11", "1871537", "https://gve.sm188auto.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:11", "1871538", "https://ttf.sm188auto.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:11", "1871539", "https://blh.slotmacau188e.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:10", "1871530", "https://sep.beras1.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:10", "1871531", "https://rha.beras1.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:10", "1871532", "https://gve.beras1.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:10", "1871533", "https://ttf.beras1.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:09", "1871526", "https://steamcommunity.com/profiles/76561198660175584", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 12:04:04", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:09", "1871527", "https://telegram.me/j0tt0s", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 12:04:04", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:09", "1871528", "https://rne.beras1.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:09", "1871529", "https://ndd.beras1.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:18:32", "1871525", "task.pantryly83.one", "domain", "botnet_cc", "win.revstealer", "None", "RevStealer", "", "75", "False", "None", "revstealer", "0", "Myrtus0x0"
"2026-08-10 08:18:13", "1871523", "uybwveyvyt62rc.site", "domain", "botnet_cc", "win.amadey", "None", "Amadey", "", "100", "False", "", "Amadey", "0", "abuse_ch"
"2026-08-10 08:18:13", "1871524", "zsv2c62243.space", "domain", "botnet_cc", "win.amadey", "None", "Amadey", "", "100", "False", "", "Amadey", "0", "abuse_ch"
"2026-08-10 08:15:05", "1871521", "https://xop.beras1.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:34:31", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-10 08:15:05", "1871522", "xop.sm188auto.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-10 10:25:57", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-10 08:15:04", "1871520", "xop.beras1.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-10 10:26:12", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-10 08:14:58", "1871519", "7ve71wpr.eng-neuroxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-10 08:08:27", "1871518", "119.45.239.141:5555", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "False", "None", "CobaltStrike,cs-watermark-391144938", "0", "abuse_ch"
"2026-08-10 08:08:26", "1871517", "49.235.110.173:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-08-10 08:05:05", "1871516", "149.28.37.137:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-08-10 07:59:33", "1871515", "hhhazm.shop-gutdrops.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 07:58:57", "1871514", "64.89.160.16:3322", "ip:port", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "75", "False", "https://bazaar.abuse.ch/sample/6eba72e816768b1c383487af637ddc3d64e5feacaed1bd7312b983bf28478ecd/", "LxBaseRAT,RAT", "0", "abuse_ch"
"2026-08-10 07:58:53", "1871513", "customers.googlesecuritysystem.com", "domain", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "75", "False", "https://bazaar.abuse.ch/sample/6eba72e816768b1c383487af637ddc3d64e5feacaed1bd7312b983bf28478ecd/", "LxBaseRAT,RAT", "0", "abuse_ch"
"2026-08-10 07:55:48", "1871512", "kjwhklm.greenestreetchurch.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 07:51:25", "1871511", "142.132.253.231:8888", "ip:port", "botnet_cc", "win.purelogs", "None", "PureLogs Stealer", "", "75", "False", "https://bazaar.abuse.ch/sample/f6a89afd80bcfccc8ade155c0ef92a770de44610efdcac2b6a21650dc136dca5/", "PureLogsStealer", "0", "abuse_ch"
"2026-08-10 07:45:30", "1871510", "yuming.zx-infinity.space", "domain", "botnet_cc", "win.coinminer", "None", "Coinminer", "2026-08-10 07:45:30", "100", "False", "https://bazaar.abuse.ch/sample/b32181caa8383569167918025e985ed2e629cf2f0f001dcfd576044c8f31599f/", "CoinMiner,dropped-by-gcleaner", "0", "abuse_ch"
"2026-08-10 07:41:12", "1871509", "tax-preparer-security-viewer.federal-portal.es", "domain", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "https://bazaar.abuse.ch/sample/52dd8b2f9145907477a6ebc4ad406c1e4b221ea967f1c2ce8bc23faa83b663d8/", "BreezeRMM", "0", "abuse_ch"
"2026-08-10 07:38:15", "1871507", "52.203.242.163:7835", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "False", "https://bazaar.abuse.ch/sample/f50e1120cc6cb993c6f6ba8c734df7855df0cd37cf634d407abffbb9f0660702/", "None", "0", "abuse_ch"
"2026-08-10 07:38:15", "1871508", "52.203.242.163:7890", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "False", "https://bazaar.abuse.ch/sample/f50e1120cc6cb993c6f6ba8c734df7855df0cd37cf634d407abffbb9f0660702/", "None", "0", "abuse_ch"
"2026-08-10 07:33:31", "1871489", "https://versionpi81.icu/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:31", "1871490", "https://riderls32.life/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:30", "1871491", "https://rogethat231.icu/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:29", "1871492", "fashion-chicken.com", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:29", "1871493", "https://id-verif-code.info/api.php", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "EtherHiding", "1", "anonymous"
"2026-08-10 07:33:28", "1871494", "158.94.211.92:80", "ip:port", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:28", "1871495", "https://dolpi812.life/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:27", "1871496", "https://accrenpi813.icu/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:27", "1871497", "https://thankingpi.icu/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:27", "1871499", "https://bunntyca.icu/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:26", "1871498", "https://wikkkipi12.icu/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:25", "1871500", "https://tokerjoker.icu/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:24", "1871501", "https://atomento10.icu/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:24", "1871502", "https://frontalback91.icu/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:23", "1871503", "https://corrykro.icu/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:23", "1871504", "https://rumbaju42.icu/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:23", "1871505", "https://nick-metry.icu/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:33:22", "1871506", "https://borrowskol312.icu/t.js", "url", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 07:22:02", "1871483", "https://babacan.lol/mods/api/log-download", "url", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "", "IRAHook,RAT,Stealer", "1", "anonymous"
"2026-08-10 07:22:01", "1871471", "babacan.lol", "domain", "botnet_cc", "unknown_stealer", "None", "Unknown Stealer", "", "100", "False", "", "IRAHook,RAT,stealer", "0", "Whanos"
"2026-08-10 07:22:00", "1871472", "http://72.255.19.251:56706/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/72.255.19.251", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-10 07:21:59", "1871484", "https://babacan.lol/ws", "url", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "", "IRAHook,RAT,Stealer", "1", "anonymous"
"2026-08-10 07:21:59", "1871485", "https://babacan.lol/?p=", "url", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "", "IRAHook,RAT,Stealer", "1", "anonymous"
"2026-08-10 07:21:59", "1871486", "https://babacan.lol/get/config", "url", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "", "IRAHook,RAT,Stealer", "1", "anonymous"
"2026-08-10 07:21:58", "1871487", "https://babacan.lol/babayla/zor/yarisirlar/", "url", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "", "100", "False", "", "IRAHook,RAT,Stealer", "1", "anonymous"
"2026-08-10 07:20:03", "1871488", "http://cc602316.tw1.ru/L1nc0In.php", "url", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "100", "False", "None", "DCRat,RAT", "0", "abuse_ch"
"2026-08-10 07:15:31", "1871482", "64.89.161.78:2817", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/71bbe25652524477008004b568cb32d3ed5c07693c763fc7ae673060a2e04d1a/", "remcos", "0", "abuse_ch"
"2026-08-10 07:09:09", "1871481", "4i3lqas7.en-us-en-prostawive.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-10 07:09:03", "1871480", "lahtbx.shop-digestistart.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 07:05:06", "1871477", "106.75.178.185:80", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-10 07:05:06", "1871478", "155.117.224.68:8080", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-10 07:05:06", "1871479", "noiojjl.greaternewzionbc.org", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 07:05:05", "1871475", "102.117.174.217:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:04", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-10 07:05:05", "1871476", "20.215.224.217:8080", "ip:port", "botnet_cc", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "", "100", "True", "None", "quasarrat", "1", "anonymous"
"2026-08-10 06:38:42", "1871474", "files.orchestratorlabs.cc", "domain", "botnet_cc", "win.acr_stealer", "None", "ACR Stealer", "", "100", "False", "", "ClearFake", "0", "threatcat_ch"
"2026-08-10 06:28:17", "1871473", "117.24.4.112:5555", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-08-10 06:18:08", "1871320", "161.35.48.40:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-10 06:18:08", "1871331", "veralok.click", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "2026-08-10 09:11:41", "75", "True", "https://www.clickfixed.uk/intel/7165", "ClickFix", "0", "ClickFixer"
"2026-08-10 06:18:06", "1871351", "mail.cope.st", "domain", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "C2,Mirai", "0", "botnetkiller"
"2026-08-10 06:18:05", "1871352", "smtp.cope.st", "domain", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "100", "False", "", "C2,Mirai", "0", "botnetkiller"
"2026-08-10 06:18:05", "1871357", "46.151.182.200:60195", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "80", "False", "None", "mirai", "0", "seckle"
"2026-08-10 06:18:04", "1871376", "testmyopinion.live", "domain", "botnet_cc", "js.iclickfix", "None", "IClickFix", "", "50", "False", "https://x.com/Malwarehunterr/status/2086517188085871074", "ClearFake,ClickFix", "0", "skocherhan"
"2026-08-10 06:18:04", "1871377", "ownnewstoday.live", "domain", "botnet_cc", "js.iclickfix", "None", "IClickFix", "", "50", "False", "https://x.com/Malwarehunterr/status/2086517188085871074", "ClearFake,ClickFix", "0", "skocherhan"
"2026-08-10 06:18:03", "1871399", "91.219.238.82:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "", "99", "False", "https://www.joesandbox.com/analysis/1911456", "None", "0", "netresec"
"2026-08-10 06:18:03", "1871400", "91.219.238.166:8443", "ip:port", "botnet_cc", "win.purelogs", "None", "PureLogs Stealer", "2026-08-09 20:17:25", "99", "False", "https://www.joesandbox.com/analysis/1911456", "None", "0", "netresec"
"2026-08-10 06:18:02", "1871401", "91.219.238.82:8541", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "99", "False", "https://www.joesandbox.com/analysis/1911456", "None", "0", "netresec"
"2026-08-10 06:18:01", "1871402", "91.219.238.166:8045", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "66", "False", "https://www.joesandbox.com/analysis/1911456", "None", "0", "netresec"
"2026-08-10 06:18:01", "1871412", "180.93.116.41:56999", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "80", "False", "None", "mirai", "0", "seckle"
"2026-08-10 06:18:00", "1871422", "http://178.16.54.109/bolodo", "url", "payload_delivery", "win.phorpiex", "Tldr,Trik,TwizT,phorphiex", "Phorpiex", "2026-08-10 13:27:37", "100", "False", "None", "Download,Phorpiex", "0", "Bitsight"
"2026-08-10 06:17:59", "1871419", "https://89.167.23.148", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:35:13", "100", "False", "None", "4abfe3aee56aad747a75a5aba1eefaa3,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-10 06:17:58", "1871423", "riderls32.life", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "2026-08-10 07:21:54", "100", "False", "None", "ClickFix,injected-loader", "1", "anonymous"
"2026-08-10 06:17:57", "1871424", "dolpi812.life", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix,injected-loader", "1", "anonymous"
"2026-08-10 06:17:56", "1871425", "japansnowaccommodation.com", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix,compromised,EXT", "1", "anonymous"
"2026-08-10 06:17:56", "1871428", "https://fashion-chicken.com/x9i32md/w1/la02", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "None", "exfil,Magecart,skimmer", "1", "anonymous"
"2026-08-10 06:17:55", "1871435", "http://175.107.36.125:37662/Mozi.a", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/175.107.36.125", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-10 06:17:54", "1871429", "https://pas.bikhoki.cc", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:34:57", "100", "False", "None", "a25ee28cbbb467ba56cb86c45a2edf9e,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-10 06:17:54", "1871470", "mzpdgxi.graphicstabletreviews.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 06:17:53", "1871438", "https://vokhmiwmncjba.vivaldinotabot.com/s/psc4?cl", "url", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "", "100", "False", "", "None", "0", "0xKyle"
"2026-08-10 06:17:53", "1871440", "130.94.14.110:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "50", "False", "None", "2914,c2,censys,cobalt strike", "0", "sojubear"
"2026-08-10 06:17:52", "1871439", "206.237.12.167:10443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "50", "False", "None", "932,c2,censys,cobalt strike", "0", "sojubear"
"2026-08-10 06:17:51", "1871441", "34.11.43.142:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "50", "False", "None", "396982,asyncrat,c2,censys", "0", "sojubear"
"2026-08-10 06:17:50", "1871445", "130.12.180.51:43782", "ip:port", "botnet_cc", "elf.redtail", "None", "RedTail", "", "100", "False", "", "C2,redtail", "0", "botnetkiller"
"2026-08-10 06:17:50", "1871446", "blackjacktrailerjacks.com.au", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "carrier,compromised,EtherHiding", "1", "anonymous"
"2026-08-10 06:17:49", "1871455", "137.184.70.190:9035", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-10 06:17:48", "1871459", "https://rne.sm188auto.top", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:32:45", "100", "False", "None", "a25ee28cbbb467ba56cb86c45a2edf9e,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-10 06:17:48", "1871463", "https://xop.sm188auto.top", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-10 10:25:57", "100", "False", "None", "a25ee28cbbb467ba56cb86c45a2edf9e,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-10 06:17:47", "1871468", "expressbatteryreplacement.com", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "100", "False", "None", "ClickFix", "1", "anonymous"
"2026-08-10 06:17:35", "1871469", "pdlgsg.shop-cognisurge.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 05:27:29", "1871467", "kfbhnux.grannygshemporium.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 05:26:03", "1871466", "ehhzba.rsfoodproducts.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 05:08:00", "1871465", "lh3i8c4x.en-energyrevolution.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-10 04:44:25", "1871464", "qtu3bnjl.eng-en-cognisurge.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xfb64,macos", "1", "anonymous"
"2026-08-10 04:36:13", "1871462", "masvingocity.org.zw", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-10 04:35:03", "1871461", "hcbjmx.nurvearmor.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 04:33:17", "1871460", "zwaorbx.fungame777.co", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 04:06:12", "1871458", "apartments-vrfy5123.sbs", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "False", "None", "ClickFix,compromised", "1", "anonymous"
"2026-08-10 03:46:27", "1871457", "tdflhz.josephmichaelnh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 03:37:37", "1871456", "qspkxyl.finkfamilyautomotive.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 03:14:33", "1871454", "vfq871xi.eng-eng-slimsounds.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-10 03:05:56", "1871453", "meogaidw.en-en-eng-cognisurge.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-10 03:05:06", "1871451", "143.92.52.207:2078", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-08-10 03:05:06", "1871452", "169.58.150.130:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:18", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-10 02:54:55", "1871450", "qmxskr.healthfoodzone.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 02:47:13", "1871449", "lseeetm.federationofpbos.org", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 02:08:13", "1871448", "sxvgrh.havenchurchraleigh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 01:56:37", "1871447", "zgeetmr.enus-bpzone.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 01:13:27", "1871444", "hqwgki.habbofutbol.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 01:07:44", "1871443", "4lmn5pp8.eachway-multiplier.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-10 01:07:10", "1871442", "nojalsd.eng--cognisurge.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 00:34:16", "1871437", "5gghr1ol.eng-echoxen.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xfb64,macos", "1", "anonymous"
"2026-08-10 00:26:58", "1871436", "zwqbnl.gtacauto.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-10 00:15:47", "1871434", "aqfcvod.en-usa-sugarmute.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-10 00:05:49", "1871433", "http://tokjoza.shop:5200/files", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-10 01:09:53", "75", "False", "https://bazaar.abuse.ch/sample/43b7219764a030a1b3f8466421890f8433928152aee42a497d0d2e4ed1284a98/", "remus", "0", "abuse_ch"
"2026-08-10 00:05:48", "1871432", "http://shkpiva.shop:5627/attachments", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-10 01:09:53", "75", "False", "https://bazaar.abuse.ch/sample/43b7219764a030a1b3f8466421890f8433928152aee42a497d0d2e4ed1284a98/", "remus", "0", "abuse_ch"
"2026-08-10 00:05:46", "1871431", "http://beljaro.shop:2536/payments", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-10 01:09:53", "75", "False", "https://bazaar.abuse.ch/sample/43b7219764a030a1b3f8466421890f8433928152aee42a497d0d2e4ed1284a98/", "remus", "0", "abuse_ch"
"2026-08-10 00:04:39", "1871430", "xqsxioa.en-usa-sugarmute.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-09 23:33:41", "1871427", "ykmmud.en-us-en-gold-align.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-09 23:31:15", "1871426", "en-us-en-gold-align.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 23:31:33", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 23:12:42", "1871421", "wbdstjk.en-usa-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-09 23:04:16", "1871420", "hujg7soj.drubenginecologo.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-09 22:49:53", "1871418", "khivoeg.en-usa-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-09 22:43:40", "1871417", "kbagif.en-us-energyrevolutionsystem.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-09 22:40:49", "1871416", "en-us-energyrevolutionsystem.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 22:42:07", "100", "True", "None", "9August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-09 22:14:35", "1871415", "a0xhb08v.eng--slimsounds.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-09 21:58:51", "1871414", "qcijapw.en-usa-bpzone.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-09 21:50:48", "1871413", "pfnwcz.en-us-energyrevolution.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:44", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-09 21:08:33", "1871411", "vwychan.en-us-en-usa-audizen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-09 21:04:33", "1871410", "xlmr6eq6.crownconnectpk.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-09 21:01:19", "1871409", "pfbaej.enus-en-audizen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-09 20:59:43", "1871408", "enus-en-audizen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 21:00:47", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 20:50:49", "1871407", "http://tokjoza.shop:5200/settings", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-09 22:10:43", "75", "False", "https://bazaar.abuse.ch/sample/3f52c9d217c625a8e8b12be29c828d27dbec62bf021d5f0d481dcced080043e8/", "remus", "0", "abuse_ch"
"2026-08-09 20:50:46", "1871406", "http://shkpiva.shop:5627/notifications", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-09 22:10:43", "75", "False", "https://bazaar.abuse.ch/sample/3f52c9d217c625a8e8b12be29c828d27dbec62bf021d5f0d481dcced080043e8/", "remus", "0", "abuse_ch"
"2026-08-09 20:50:42", "1871405", "http://beljaro.shop:2536/folders", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-09 22:10:43", "75", "False", "https://bazaar.abuse.ch/sample/3f52c9d217c625a8e8b12be29c828d27dbec62bf021d5f0d481dcced080043e8/", "remus", "0", "abuse_ch"
"2026-08-09 20:23:40", "1871404", "3igbupne.eng-bpzone.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xfb64,macos", "1", "anonymous"
"2026-08-09 20:21:41", "1871403", "mgeehor.prostavve.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-09 20:14:14", "1871398", "fhodxy.en-us-echoxen.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-09 20:11:11", "1871397", "geraldmetroz.ch", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-09 20:09:33", "1871396", "en-us-echoxen.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 20:10:15", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 19:46:19", "1871395", "91.202.233.151:8443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:48:08", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-09 19:46:18", "1871394", "91.202.233.151:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:48:08", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-09 19:46:13", "1871393", "85.209.87.84:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:59", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 19:45:52", "1871392", "49.235.153.53:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:47:31", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-09 19:45:38", "1871390", "45.140.204.12:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:47:12", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-08-09 19:45:38", "1871391", "45.140.204.12:9000", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:47:12", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-08-09 19:45:16", "1871389", "217.60.77.60:4782", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:41", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 19:44:29", "1871388", "2.50.170.49:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:30", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-09 19:43:21", "1871387", "128.90.59.58:1110", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:30", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-09 19:43:12", "1871386", "107.172.133.190:56002", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:18", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-09 19:43:08", "1871385", "104.164.46.182:52203", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 19:28:46", "1871384", "rgutfmf.prosta--vive.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-09 19:21:44", "1871383", "bebnmr.enus-echoxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-09 19:21:10", "1871382", "otarires.ch", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-09 19:18:45", "1871381", "enus-echoxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 19:19:33", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 19:05:49", "1871380", "d9ycd24u.pro--prostavive.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-09 19:05:06", "1871378", "111.229.135.130:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-09 19:05:06", "1871379", "139.196.181.1:8808", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-09 18:36:16", "1871375", "hasebtb.en-us--gold-align.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 18:36:38", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-09 18:35:34", "1871374", "en-usgold-align.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 18:30:16", "1871373", "ezhlrk.en-usechoxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-09 18:28:12", "1871372", "en-usechoxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 18:28:50", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 18:01:03", "1871371", "http://tokjoza.shop:5200/orders", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-09 19:21:33", "75", "False", "https://bazaar.abuse.ch/sample/cfa7e41d09f3d4fa04300b72f0f71f6b8af79369de528eeaf03a813ee1636ee5/", "remus", "0", "abuse_ch"
"2026-08-09 18:00:58", "1871370", "http://onesdto.shop:2535/collections", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-09 19:21:32", "75", "False", "https://bazaar.abuse.ch/sample/cfa7e41d09f3d4fa04300b72f0f71f6b8af79369de528eeaf03a813ee1636ee5/", "remus", "0", "abuse_ch"
"2026-08-09 18:00:54", "1871369", "http://beljaro.shop:2536/tags", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-09 19:21:33", "75", "False", "https://bazaar.abuse.ch/sample/cfa7e41d09f3d4fa04300b72f0f71f6b8af79369de528eeaf03a813ee1636ee5/", "remus", "0", "abuse_ch"
"2026-08-09 17:47:06", "1871368", "uaawnpt.en-us-en-us-echoxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-09 17:45:03", "1871367", "en-us-en-us-echoxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 17:46:03", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 17:38:31", "1871366", "tfgrzf.enus-bpzone.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-09 17:37:42", "1871365", "enus-bpzone.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 01:55:50", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 17:13:00", "1871364", "h0snck00.elcornerderaulmorote.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-09 17:05:06", "1871363", "64.90.11.101:8089", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-09 17:03:21", "1871362", "od8872b0.nurvearmor.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-09 16:59:54", "1871361", "kiavqge.en-us-en-usa-audizen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-09 16:54:31", "1871360", "en-us-en-usa-audizen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 21:07:38", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 16:39:07", "1871359", "qkyear.en-usa-sugarmute.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-09 16:14:09", "1871358", "uv8fudow.eng--keyslimdrops.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xfb64,macos", "1", "anonymous"
"2026-08-09 16:05:04", "1871356", "64.90.11.101:8001", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-09 15:58:59", "1871355", "uamidyb.en-us-en-prostawive.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-09 15:54:00", "1871353", "en-us-en-prostawive.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 07:08:45", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 15:36:52", "1871350", "khypcp.en-usa-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-09 15:05:06", "1871348", "64.90.11.101:3306", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-09 15:05:06", "1871349", "64.90.11.101:9321", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-09 15:05:05", "1871347", "64.90.11.101:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-09 15:03:56", "1871346", "5j5spglj.engus-prostavive.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-09 14:57:05", "1871345", "wxfruqi.shop-digestistart.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-09 14:41:20", "1871344", "prozenith-en-us.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 14:41:53", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 14:35:56", "1871343", "bhnyau.en-usa-bpzone.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-09 14:31:26", "1871342", "prozeanith.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 14:32:13", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 14:27:51", "1871341", "prozeanith.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 14:28:15", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 14:05:06", "1871339", "8.218.211.108:3232", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-09 14:05:06", "1871340", "64.90.11.101:8888", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-09 14:05:05", "1871338", "31.7.62.178:12583", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-09 14:01:05", "1871337", "72.61.112.206:2536", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-08-11 13:00:59", "75", "False", "https://bazaar.abuse.ch/sample/1a51a0bda4c9e0659b94221fe0001d55038ceb742767df9b49e6e610b8592ebe/", "remus", "0", "abuse_ch"
"2026-08-09 14:01:04", "1871336", "http://beljaro.shop:2536", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-09 15:18:23", "75", "False", "https://bazaar.abuse.ch/sample/1a51a0bda4c9e0659b94221fe0001d55038ceb742767df9b49e6e610b8592ebe/", "remus", "0", "abuse_ch"
"2026-08-09 13:41:08", "1871335", "walsercup.ch", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-09 13:36:07", "1871334", "hkzkwr.shop-gutdrops.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-09 13:34:29", "1871333", "shop-gutdrops.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 07:58:20", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 13:27:18", "1871330", "prostavve.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 20:17:00", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 12:27:12", "1871317", "prosta--vive.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 10:32:22", "100", "True", "None", "9August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-09 12:20:57", "1871234", "159.203.172.232:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-10 06:22:00", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-09 12:20:56", "1871250", "38.207.178.195:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 10:20:45", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-09 11:26:47", "1871305", "pro--prostavive.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 19:02:47", "100", "True", "None", "9August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-09 10:04:07", "1871292", "nurvearmor.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 17:02:58", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 09:46:40", "1871285", "72.14.136.55:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:46:40", "1871286", "72.14.136.55:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:46:40", "1871287", "72.14.136.55:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:46:39", "1871284", "69.164.245.180:4000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:47:48", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-09 09:46:06", "1871282", "43.134.169.103:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:47:06", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-09 09:46:06", "1871283", "43.134.169.103:40056", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:47:07", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-09 09:44:59", "1871281", "212.103.26.10:54321", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:45:48", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-09 09:44:57", "1871280", "209.99.190.23:55010", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:49", "1871279", "20.243.82.8:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:33", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-09 09:44:43", "1871278", "198.37.105.30:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:24", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-09 09:44:28", "1871277", "185.247.208.91:55555", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:10", "1871275", "172.252.172.33:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:10", "1871276", "172.252.172.33:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:09", "1871272", "172.252.172.29:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:09", "1871273", "172.252.172.30:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:09", "1871274", "172.252.172.31:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:08", "1871269", "172.245.136.99:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:22", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:08", "1871270", "172.245.136.99:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:22", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:08", "1871271", "172.245.136.99:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:22", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:04", "1871268", "168.222.251.83:56012", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:43:33", "1871264", "138.2.87.233:25745", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:43:40", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-09 09:43:33", "1871265", "138.2.87.233:30462", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:43:40", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-09 09:43:33", "1871266", "138.2.87.233:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:43:40", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-09 09:43:33", "1871267", "139.162.113.221:64321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:41", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-09 09:43:29", "1871263", "134.122.132.3:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-09 09:43:26", "1871262", "130.12.182.39:2700", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:33", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-09 09:43:24", "1871261", "124.221.215.82:9090", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:30", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-09 09:43:14", "1871260", "105.108.109.255:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:27:36", "1871258", "shop-digestistart.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 07:08:33", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 09:04:08", "1871254", "nurvearmor.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 04:34:55", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 08:27:04", "1871251", "shop-cognisurge.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 06:16:28", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-09 08:05:08", "1871243", "45.61.136.78:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:20", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-09 08:05:05", "1871240", "207.189.23.189:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:41", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-09 06:30:56", "1871174", "fashion-chicken.com", "domain", "botnet_cc", "unknown_loader", "None", "Unknown Loader", "2026-08-09 23:45:32", "100", "False", "", "c2,gate", "0", "varysz"
"2026-08-09 06:30:54", "1871187", "rogethat231.icu", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "2026-08-10 07:21:56", "100", "False", "None", "ClickFix,injected-loader", "1", "anonymous"
"2026-08-09 06:05:06", "1871218", "202.60.232.182:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:34", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-09 06:05:05", "1871217", "34.26.129.189:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:56", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-08 23:47:03", "1871165", "68.64.183.64:9088", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-08 21:19:06", "1871153", "jyhdzq.eng-us--goldalign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 01:37:24", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-08 19:46:26", "1871134", "91.92.40.5:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-11 12:48:09", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-08 19:46:05", "1871133", "57.182.128.31:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-08-11 12:47:40", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-08-08 19:46:03", "1871131", "52.128.231.157:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 19:46:03", "1871132", "52.128.231.158:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 19:46:02", "1871129", "52.128.231.155:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 19:46:02", "1871130", "52.128.231.156:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 19:45:40", "1871128", "43.139.114.212:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:07", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 19:45:33", "1871127", "34.150.91.139:19443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:56", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-08 19:44:39", "1871126", "207.189.18.213:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:41", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:44:25", "1871125", "194.69.162.217:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:16", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 19:44:19", "1871123", "191.111.244.175:8443", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:45:00", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-08-08 19:43:58", "1871122", "172.252.172.33:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:55", "1871121", "169.58.64.151:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:18", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-08 19:43:49", "1871120", "159.203.69.210:48202", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:07", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-08 19:43:43", "1871119", "157.10.52.2:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:58", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:37", "1871118", "151.242.170.219:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:22", "1871116", "125.62.77.141:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:22", "1871117", "125.62.77.141:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:17", "1871112", "112.121.176.3:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:17", "1871113", "112.121.176.4:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:17", "1871114", "112.121.176.5:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:17", "1871115", "112.121.176.6:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:11", "1871111", "104.239.66.95:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:01", "1871110", "1.92.135.168:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:02", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 18:05:08", "1871094", "38.60.227.165:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:04", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-08 18:05:07", "1871093", "37.72.168.212:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:59", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-08 17:35:06", "1871084", "217.60.241.48:421", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:06", "1871085", "130.12.182.79:421", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:05", "1871071", "130.12.182.79:427", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:05", "1871072", "130.12.182.79:430", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:05", "1871073", "130.12.182.79:420", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:05", "1871074", "217.60.241.31:422", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:05", "1871075", "217.60.241.50:422", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:05", "1871076", "130.12.182.79:422", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:05", "1871077", "217.60.241.48:422", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:05", "1871078", "217.60.241.48:423", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:05", "1871079", "130.12.182.79:423", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:05", "1871080", "217.60.241.50:423", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:05", "1871081", "217.60.241.31:423", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:05", "1871082", "217.60.241.31:421", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:05", "1871083", "217.60.241.50:421", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871058", "217.60.241.31:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:54", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871059", "130.12.182.79:428", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:54", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871060", "130.12.182.79:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:54", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871061", "217.60.241.31:431", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:54", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871062", "130.12.182.79:431", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:54", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871063", "130.12.182.79:416", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:54", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871064", "130.12.182.79:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:54", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871065", "217.60.241.31:424", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871066", "217.60.241.50:424", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871067", "130.12.182.79:424", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871068", "217.60.241.48:424", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871069", "130.12.182.79:418", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871070", "130.12.182.79:425", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:03", "1871056", "217.60.241.48:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:54", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:03", "1871057", "217.60.241.50:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:54", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:16:25", "1870822", "eng-usa-sugarmute.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 23:16:25", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-08 16:45:34", "1870807", "bpiaasi.en-slimsounds.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 21:25:14", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-08 14:14:42", "1870782", "eng-usa-sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 12:03:59", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-08 13:41:21", "1870772", "engus-prostavive.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 15:02:16", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-08 12:05:06", "1870756", "192.255.236.156:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-10 06:28:15", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-08 11:47:11", "1870752", "185.92.190.177:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:48", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-08 11:40:32", "1870750", "eng-usa--goldalign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 05:47:03", "100", "True", "None", "8August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-08 10:39:49", "1870724", "eng-usa-echoxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 06:26:23", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-08 09:52:07", "1870715", "eng-usa-digestistart.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 13:04:42", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-08 09:46:41", "1870714", "95.133.229.173:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 09:46:32", "1870713", "88.129.145.223:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:48:03", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-08-08 09:46:21", "1870712", "68.178.202.150:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:47", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-08 09:45:58", "1870710", "45.56.165.197:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 09:45:58", "1870711", "45.56.165.197:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 09:45:54", "1870709", "45.157.117.186:27487", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:14", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 09:45:42", "1870708", "34.81.234.183:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:46:57", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-08 09:45:41", "1870707", "31.77.145.53:4443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:55", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-08 09:45:29", "1870706", "217.60.195.187:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-11 12:46:39", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-08 09:44:45", "1870705", "209.99.190.23:55011", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 09:44:39", "1870704", "203.98.68.17:1111", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:36", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-08 09:44:36", "1870703", "2.59.133.115:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 09:44:33", "1870702", "2.26.30.62:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 12:45:26", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-08 09:44:30", "1870701", "195.242.119.86:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:45:20", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-08 09:44:28", "1870700", "194.59.31.175:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:15", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 09:43:59", "1870699", "172.252.172.32:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 09:43:27", "1870698", "136.244.96.75:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:37", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-08 09:43:26", "1870697", "134.122.132.35:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 09:43:22", "1870696", "129.146.57.192:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:31", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 09:42:08", "1870694", "eng--sightfresh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:44", "100", "True", "None", "8August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-08 09:06:39", "1870688", "eng-usa-bpzone.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 12:02:30", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-08 07:05:05", "1870641", "192.169.176.54:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:03", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-08 06:47:37", "1870636", "njdwpg.eng--nitrilean.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:44", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-08 06:35:55", "1870481", "https://set.turbo88galaxy.top", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:31:04", "100", "False", "None", "c2,c948db7ccfb97f2f0bfa248274085e2d,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-08 06:35:31", "1870600", "versionpi81.icu", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "2026-08-10 07:21:52", "100", "False", "None", "ClickFix,injected-loader", "1", "anonymous"
"2026-08-08 06:35:28", "1870614", "139.59.144.8:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-10 23:42:32", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-08 05:21:09", "1870625", "axinjur.eng--slimsounds.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 09:17:17", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-08 05:16:43", "1870622", "eng--neuroxen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:44", "100", "True", "None", "8August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-08 04:05:05", "1870610", "68.178.205.17:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:47", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-08 02:17:06", "1870584", "eng-energyrevolution.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 05:06:02", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-08 01:31:32", "1870566", "eng-en-cognisurge.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 04:43:59", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-08 01:28:28", "1870563", "eng--keyslimdrops.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 16:12:22", "100", "True", "None", "8August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-08 00:46:20", "1870558", "eng-echoxen.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 00:33:50", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-07 23:57:23", "1870522", "eng-en-slimsounds.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 08:54:24", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-07 23:46:45", "1870520", "121.5.27.17:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:37", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-07 23:46:29", "1870519", "1302768123-l3a4w496qm.ap-shanghai.tencentscf.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:18", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-07 23:11:51", "1870509", "eng-eng-slimsounds.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 03:14:07", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-07 19:46:31", "1870254", "94.154.32.48:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 19:46:22", "1870253", "87.120.196.221:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-11 12:48:01", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-07 19:45:42", "1870252", "43.135.34.69:43911", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:07", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-07 19:45:39", "1870251", "38.18.229.217:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:01", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 19:45:24", "1870250", "217.60.97.106:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 19:44:41", "1870249", "207.231.104.146:1447", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 19:44:40", "1870248", "207.189.18.213:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:41", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 19:44:18", "1870247", "186.169.88.130:9002", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:57", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 19:44:13", "1870246", "185.212.128.59:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-07 19:43:59", "1870244", "172.239.45.42:82", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:44:21", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-07 19:43:59", "1870245", "172.86.117.104:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 19:43:55", "1870243", "167.172.145.141:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:15", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-08-07 19:43:49", "1870242", "159.203.69.210:11088", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 19:43:22", "1870241", "124.198.131.130:1907", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:29", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 19:43:11", "1870240", "104.238.57.23:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 19:43:06", "1870239", "103.158.191.249:442", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 19:24:26", "1870235", "eng--bpzone.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 20:23:24", "100", "True", "None", "7August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-07 18:40:35", "1870225", "en-en-eng-cognisurge.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 04:16:51", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-07 17:53:48", "1870209", "byqpgf.digeststart.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 06:26:39", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-07 15:45:05", "1869964", "https://ttf.slotmacau188e.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:27:31", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-07 15:45:04", "1869963", "ttf.slotmacau188e.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:27:31", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-07 15:25:05", "1869958", "https://ttf.bayototo.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:27:45", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-07 15:25:04", "1869957", "ttf.bayototo.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:27:45", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-07 14:59:47", "1869884", "167.172.188.177:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-09 18:56:16", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-07 14:12:06", "1869863", "161.35.48.40:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-10 15:32:56", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-07 14:05:23", "1869870", "buy-ignitra.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 10:57:57", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-07 13:23:31", "1869855", "165.245.178.39:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-10 18:44:30", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-07 10:05:08", "1869794", "43.139.87.203:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 07:32:29", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-07 09:56:53", "1869784", "id-verif-code.info", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "2026-08-10 07:21:59", "100", "False", "None", "ClickFix", "0", "threatcat_ch"
"2026-08-07 09:46:36", "1869781", "85.209.87.84:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:59", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 09:46:29", "1869780", "78.17.71.8:5025", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:51", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 09:46:24", "1869779", "64.89.161.196:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:44", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 09:46:10", "1869778", "45.89.48.12:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 09:45:46", "1869777", "34.106.101.107:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:55", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 09:45:43", "1869776", "3.75.210.48:7777", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:46:51", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-08-07 09:44:48", "1869775", "207.32.217.227:21903", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:42", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 09:44:45", "1869774", "203.98.68.17:1009", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:36", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 09:44:19", "1869773", "185.212.129.152:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:50", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-07 09:44:18", "1869772", "185.212.128.170:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:48", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-07 09:43:53", "1869771", "159.203.69.210:35203", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 09:43:42", "1869769", "154.30.132.30:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:53", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 09:43:42", "1869770", "154.40.62.125:9001", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:43:53", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-08-07 09:43:22", "1869768", "124.198.131.169:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 09:43:06", "1869767", "103.249.116.184:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 09:39:43", "1869755", "139.59.144.8:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-09 20:30:11", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-07 09:05:08", "1869750", "203.98.68.17:2222", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:36", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-07 09:05:07", "1869748", "114.67.204.86:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 07:32:28", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-07 08:29:37", "1869729", "bp-zone.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 14:22:50", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-07 08:02:48", "1869710", "https://65.109.127.15/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:45", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-07 08:02:47", "1869708", "https://178.105.30.143/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:41", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-07 07:25:12", "1869593", "139.59.144.8:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 10:44:45", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-06 23:46:46", "1869592", "151.242.125.190:9527", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:42", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-06 19:46:26", "1869558", "91.92.40.56:8888", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:46:15", "1869556", "80.76.49.3:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:46:15", "1869557", "80.76.49.3:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:46:09", "1869555", "64.89.161.42:13834", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:45:33", "1869554", "31.59.137.166:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:45:21", "1869553", "217.60.97.106:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-06 19:44:11", "1869552", "185.212.128.232:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-06 19:43:43", "1869551", "156.251.16.212:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:58", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:43:38", "1869550", "154.37.154.36:1443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:43:37", "1869549", "153.75.88.67:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:28:07", "1869524", "196.251.121.185:80", "ip:port", "payload_delivery", "elf.mirai", "Katana", "Mirai", "2026-08-10 12:48:16", "80", "False", "https://twitter.com/NullBlue67", "apex,botnet,payload-delivery", "0", "nullblue67"
"2026-08-06 19:28:06", "1869525", "5.182.210.174:80", "ip:port", "payload_delivery", "elf.mirai", "Katana", "Mirai", "2026-08-10 12:48:09", "75", "False", "https://twitter.com/NullBlue67", "docker-api,honeypot", "0", "nullblue67"
"2026-08-06 15:35:05", "1869498", "https://web.bayototo.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-10 12:20:08", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-06 14:05:06", "1869453", "103.213.248.61:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:08", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-06 13:15:37", "1869414", "143.198.206.191:9035", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-10 04:48:53", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-06 13:05:05", "1869415", "154.221.25.38:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 07:32:42", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-06 13:05:05", "1869416", "154.221.25.38:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 07:32:45", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-06 12:45:00", "1869410", "tadkaindiaka.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-09 14:42:06", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-06 11:55:05", "1869385", "https://ign.bayototo.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-10 11:14:44", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-06 11:47:32", "1869383", "8.135.68.39:2087", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-06 11:47:16", "1869382", "185.92.190.176:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:48", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-06 11:47:15", "1869381", "185.92.190.173:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:47", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-06 11:47:09", "1869380", "139.199.3.92:2087", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:41", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-06 09:46:43", "1869339", "94.154.32.48:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 09:46:35", "1869338", "88.214.26.49:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 09:46:27", "1869337", "80.225.83.93:4444", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-11 12:47:53", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-06 09:46:15", "1869336", "57.154.16.251:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:39", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-06 09:45:42", "1869335", "31.77.145.53:4444", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:55", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-06 09:44:47", "1869334", "209.99.190.23:56013", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 09:44:43", "1869333", "207.174.0.234:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:40", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 09:44:42", "1869332", "206.123.129.171:7720", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:45:38", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-06 09:44:38", "1869331", "20.168.52.142:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:32", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-06 09:44:37", "1869330", "20.150.148.238:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:31", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-06 09:44:32", "1869329", "196.64.146.72:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:22", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 09:44:19", "1869327", "186.112.66.56:8443", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:44:56", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-08-06 09:44:19", "1869328", "186.169.88.130:9031", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:57", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-06 09:43:59", "1869326", "172.239.45.42:81", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:44:21", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-06 09:43:50", "1869324", "159.203.69.210:22555", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-06 09:43:50", "1869325", "159.203.69.210:5800", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:07", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-06 09:43:25", "1869323", "134.122.132.28:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-06 08:32:18", "1869302", "54.80.154.193:5751", "ip:port", "botnet_cc", "win.grandoreiro", "None", "Grandoreiro", "2026-08-11 12:59:45", "75", "False", "https://bazaar.abuse.ch/sample/3a2584e9d358beacb1c65df6697c26e08d3bbd40febb1f4d94e3bc615b55a126/", "geo,MEX", "0", "abuse_ch"
"2026-08-06 08:05:06", "1869296", "64.89.161.65:4444", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:45", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-08-06 07:02:53", "1869273", "188.166.222.192:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:11:28", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-06 05:10:22", "1869082", "38.207.178.195:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:27:09", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-06 05:10:20", "1869122", "167.172.188.177:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:12:38", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-06 05:10:19", "1869123", "159.65.136.5:7647", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-08-11 04:06:23", "100", "False", "None", "0f81469cc7638ba7c82eaddbd6b3c20a,c2,remus", "0", "Bitsight"
"2026-08-06 05:10:18", "1869124", "159.203.172.232:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:13:14", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-06 05:10:18", "1869125", "188.166.222.192:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 12:40:32", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-06 05:10:16", "1869126", "161.35.48.40:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:11:42", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-06 05:10:15", "1869127", "165.245.178.39:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:11:56", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-06 05:10:15", "1869128", "139.59.144.8:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:12:52", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-06 05:10:14", "1869133", "38.207.178.195:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 02:25:03", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-05 23:47:16", "1869105", "217.154.212.25:4444", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:55", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 23:46:54", "1869104", "100.82.195.65:4444", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:26", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 23:46:49", "1869103", "hp.tailc223d4.ts.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:21", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 19:47:11", "1869057", "94.250.176.76:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-08-11 12:48:15", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-05 19:46:59", "1869055", "85.209.87.84:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:59", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 19:46:59", "1869056", "86.48.16.94:30200", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:48:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:46:50", "1869054", "72.14.136.55:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 19:46:47", "1869052", "64.95.13.164:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:45", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-05 19:46:47", "1869053", "64.95.13.164:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:45", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-05 19:46:26", "1869051", "45.59.120.82:5656", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:20", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:44:59", "1869050", "206.123.129.171:8081", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:39", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:44:48", "1869047", "196.251.107.131:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:44:48", "1869048", "196.64.146.72:5000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:22", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:44:48", "1869049", "196.64.146.72:5001", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:22", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:44:31", "1869046", "185.212.129.31:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:51", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 19:44:30", "1869044", "185.212.129.170:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:50", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 19:44:30", "1869045", "185.212.129.25:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:50", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 19:44:29", "1869043", "185.212.128.181:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:48", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 19:44:28", "1869042", "185.212.128.124:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:48", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 19:44:27", "1869041", "185.174.103.243:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 19:44:19", "1869040", "178.16.53.222:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 19:44:13", "1869039", "172.81.132.75:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 19:44:00", "1869038", "159.203.69.210:23501", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:43:48", "1869037", "154.247.251.74:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 19:43:28", "1869036", "130.12.181.96:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:32", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:05:06", "1869030", "158.220.100.51:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:05", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-05 19:05:05", "1869029", "134.209.146.147:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:36", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-05 18:40:05", "1869026", "https://spc.y8slot.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:34:36", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-05 17:05:05", "1869000", "8.156.69.157:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:12", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-05 12:03:11", "1868835", "54.91.223.28:6675", "ip:port", "botnet_cc", "win.grandoreiro", "None", "Grandoreiro", "2026-08-11 12:59:46", "75", "False", "https://bazaar.abuse.ch/sample/4a6fef3f7173891b062a37a7b956cca2d2295590840e7582141da7612e3fc7f1/", "geo,MEX", "0", "abuse_ch"
"2026-08-05 11:47:40", "1868828", "47.83.3.103:10443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 11:47:36", "1868827", "45.8.159.205:8596", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:01", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 11:47:30", "1868826", "209.200.246.194:16556", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:53", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 11:47:25", "1868825", "169.58.82.229:7788", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:46", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 11:46:59", "1868823", "acac.hopto.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:18", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 11:43:45", "1868789", "161.35.153.254:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-10 09:27:46", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-05 11:43:44", "1868790", "104.248.195.124:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-10 09:24:14", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-05 11:43:44", "1868791", "104.248.196.94:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-10 09:30:00", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-05 11:43:42", "1868792", "159.223.214.253:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-10 09:23:51", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-05 11:43:42", "1868793", "64.227.73.206:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-10 09:27:34", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-05 11:43:41", "1868794", "64.227.67.30:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-10 09:24:03", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-05 11:43:41", "1868795", "152.42.134.198:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-10 09:27:18", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-05 11:43:41", "1868796", "161.35.159.53:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-10 09:28:51", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-05 11:43:40", "1868797", "159.223.220.225:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-10 09:28:39", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-05 11:20:23", "1868811", "smc.tb88cuka.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:48:58", "75", "False", "None", "Vidar", "1", "anonymous"
"2026-08-05 10:19:02", "1868776", "104.248.199.73:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-10 09:26:58", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-08-05 09:46:52", "1868757", "65.1.70.222:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 09:46:51", "1868756", "64.227.159.29:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:43", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-05 09:46:50", "1868755", "64.20.61.215:5000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:47:42", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 09:46:46", "1868754", "57.154.16.246:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:38", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-05 09:46:29", "1868753", "45.38.20.38:8491", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:46:19", "1868752", "43.135.26.173:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 09:46:13", "1868751", "36.248.232.165:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:58", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-05 09:45:56", "1868750", "217.60.97.106:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:44:55", "1868748", "203.98.68.17:1008", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:36", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:44:55", "1868749", "203.98.68.29:30300", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:36", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:44:47", "1868747", "196.251.107.131:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:44:44", "1868746", "194.87.239.245:7682", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:16", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:44:40", "1868745", "193.149.185.215:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:11", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:44:34", "1868744", "186.244.227.52:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:58", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:44:33", "1868740", "186.169.88.130:5012", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:56", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:44:33", "1868741", "186.169.88.130:9140", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:57", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:44:33", "1868742", "186.244.227.104:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:58", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:44:33", "1868743", "186.244.227.27:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:58", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:44:29", "1868736", "185.212.129.70:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:51", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 09:44:29", "1868737", "185.212.129.89:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:51", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 09:44:29", "1868738", "185.212.131.112:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:51", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 09:44:29", "1868739", "185.212.131.113:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:52", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 09:44:26", "1868735", "185.174.102.28:55555", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 09:44:12", "1868734", "172.81.132.75:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 09:44:06", "1868733", "164.132.199.212:8089", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:44:13", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-05 09:44:00", "1868732", "160.20.109.52:32333", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:08", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:43:43", "1868731", "149.28.163.119:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:49", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-05 09:43:27", "1868730", "128.90.59.58:7070", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:31", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:43:26", "1868729", "122.51.212.92:39901", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-11 12:43:29", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-08-05 08:05:05", "1868683", "169.58.82.229:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-10 08:08:25", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-05 07:36:43", "1868671", "207.57.134.202:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 07:32:29", "100", "False", "None", "CobaltStrike,cs-watermark-391144938", "0", "abuse_ch"
"2026-08-05 06:37:56", "1868506", "137.184.70.190:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-09 22:12:51", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-05 06:05:05", "1868636", "43.108.51.124:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:58", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-04 23:47:37", "1868569", "210.56.48.227:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:54", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-04 23:47:37", "1868570", "222.255.215.42:30005", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:55", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-04 21:45:06", "1868535", "https://psk.y8slot.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:31:34", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-04 21:45:05", "1868533", "https://psk.sinism188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 09:25:30", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-04 21:45:04", "1868532", "psk.sinism188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 09:25:30", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-04 19:46:40", "1868505", "93.82.26.41:8000", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:48:14", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-08-04 19:46:26", "1868504", "80.96.109.107:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:45:49", "1868503", "43.134.169.103:8080", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:47:07", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-04 19:45:43", "1868502", "35.202.238.13:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:46:57", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-04 19:45:42", "1868501", "31.76.96.193:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:46:55", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-04 19:45:38", "1868500", "3.122.223.106:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:50", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-04 19:44:44", "1868499", "207.189.25.132:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:41", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:44:42", "1868498", "203.98.68.17:30200", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:36", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-04 19:44:33", "1868497", "195.177.94.71:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:44:09", "1868495", "176.97.114.8:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:44:09", "1868496", "176.97.114.8:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:34", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:44:03", "1868494", "172.182.216.158:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:20", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-04 19:43:55", "1868492", "161.97.154.193:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:43:55", "1868493", "161.97.154.193:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:43:41", "1868491", "153.75.88.67:6666", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:43:15", "1868490", "105.108.17.137:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:43:02", "1868489", "100.31.3.235:8082", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-08-11 12:43:03", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-04 18:00:04", "1868453", "61.54.27.211:8082", "ip:port", "botnet_cc", "vbs.vbrevshell", "None", "VBREVSHELL", "2026-08-11 13:24:02", "50", "False", "https://tracker.viriback.com/index.php?q=61.54.27.211", "ViriBack,Vshell", "0", "abuse_ch"
"2026-08-04 14:40:06", "1868335", "https://com.y8slot.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:34:52", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-04 14:40:05", "1868334", "https://com.sinism188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-10 12:30:56", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-04 14:05:07", "1868328", "130.12.182.39:7001", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:33", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-04 14:05:06", "1868327", "130.12.182.39:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:33", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-04 13:05:09", "1868319", "130.12.182.39:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:33", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-04 11:47:25", "1868287", "79.110.49.186:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-04 11:47:08", "1868286", "169.58.82.229:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:46", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-04 11:46:52", "1868285", "102.204.223.230:5554", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:28", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-04 09:46:41", "1868255", "91.92.42.152:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:48:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-04 09:46:38", "1868254", "89.36.231.206:65432", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:06", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-04 09:46:30", "1868253", "81.177.222.11:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:54", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-04 09:46:05", "1868252", "45.61.176.146:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:47:21", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-04 09:45:57", "1868251", "45.139.226.224:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:12", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-04 09:45:40", "1868250", "27.124.36.136:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 09:44:09", "1868247", "178.16.53.68:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:37", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 09:44:09", "1868248", "178.16.53.68:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:37", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-04 09:44:00", "1868246", "172.111.232.133:7775", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:19", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-04 09:43:59", "1868244", "172.111.134.94:56011", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 09:43:59", "1868245", "172.111.134.94:56012", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 09:43:31", "1868241", "140.228.29.61:55555", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:42", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 09:43:30", "1868240", "138.124.62.3:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-04 09:43:25", "1868239", "130.12.182.39:5333", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:33", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-04 09:43:23", "1868238", "122.51.212.92:39905", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-11 12:43:29", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-08-04 09:43:14", "1868237", "104.251.181.111:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 09:43:12", "1868236", "104.239.66.36:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 09:43:11", "1868235", "104.223.98.68:2028", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:13", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-04 08:50:29", "1868193", "178.16.55.104:8848", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:38", "75", "False", "https://bazaar.abuse.ch/sample/e7303de39d7b302ea161b61c4200b40ec9303dd848893096dced28351e2f4370/", "asyncrat", "0", "abuse_ch"
"2026-08-04 08:18:19", "1868177", "206.238.42.153:4433", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 07:32:27", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-08-04 06:05:07", "1868107", "136.115.85.178:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:37", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-04 06:05:06", "1868106", "195.177.94.210:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:18", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-04 05:21:19", "1867971", "189.249.195.86:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:00", "100", "False", "https://platform.censys.io/hosts/189.249.195.86?at_time=2026-08-03T16%3A58%3A19.500825484Z", "AS 8151,c2,censys,mythic,online", "0", "f1nd3r"
"2026-08-04 05:21:08", "1868044", "109.104.155.94:5326", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-08-10 20:41:01", "100", "False", "None", "440d77642bde0cd5bdd42e3b046983f2,c2,remus", "0", "Bitsight"
"2026-08-04 02:05:06", "1868042", "157.230.83.73:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:03", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-03 19:54:25", "1867932", "https://nonobody123.com/a85e9a98b9364c5d8f74.php", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-08-11 13:12:08", "100", "False", "None", "c2,loader,NEWN1,StealC,stealer", "0", "Bitsight"
"2026-08-03 19:45:50", "1867961", "5.56.25.151:6680", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:32", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-03 19:45:41", "1867960", "45.61.176.146:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:47:21", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-03 19:45:40", "1867959", "45.59.120.79:7001", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:20", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-03 19:45:16", "1867958", "23.160.168.51:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-03 19:45:13", "1867957", "217.60.195.197:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:40", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-03 19:44:25", "1867956", "198.46.173.17:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:24", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-03 19:43:49", "1867955", "161.97.154.193:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-03 19:43:23", "1867954", "130.12.182.39:6666", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:33", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-03 12:43:11", "1867807", "185.194.218.82:4930", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-08-10 04:41:01", "100", "False", "None", "c2,e1c021a2a661457101d90095eb3b4696,remus", "0", "Bitsight"
"2026-08-03 09:46:43", "1867786", "91.206.178.155:443", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:48:09", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-08-03 09:46:33", "1867785", "80.76.49.38:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-03 09:46:06", "1867784", "45.61.176.146:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:47:20", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-03 09:44:45", "1867783", "207.56.28.111:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:42", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-03 09:44:44", "1867782", "207.56.28.111:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:42", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-03 09:44:27", "1867781", "193.112.169.214:30727", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:10", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-03 09:44:24", "1867780", "192.159.99.55:8989", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:45:00", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-03 09:43:28", "1867779", "135.136.132.74:55555", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-03 09:43:12", "1867777", "104.207.90.3:2030", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:43:12", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-03 09:43:12", "1867778", "104.207.90.93:2030", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:43:12", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-03 09:05:14", "1867752", "178.105.99.239:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-10 08:21:42", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 09:04:36", "1867725", "vog.peluangsm188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:26:30", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:30", "1867710", "https://2.28.15.55/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:32:38", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:30", "1867711", "https://65.108.201.76/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:36", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:30", "1867712", "https://116.202.186.230/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:32", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:30", "1867714", "https://62.238.55.102/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:32:47", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:28", "1867700", "https://37.27.193.182/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:34:23", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:28", "1867701", "https://37.27.204.215/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 07:12:41", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:28", "1867702", "https://37.27.197.184/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:31:20", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:26", "1867690", "https://65.108.197.205/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:49:19", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:26", "1867691", "https://2.28.9.232/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:38", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:26", "1867692", "https://65.109.165.156/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:49:51", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:26", "1867693", "https://178.105.99.239/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:35:04", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:24", "1867683", "https://91.99.123.205/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:24", "1867684", "https://138.201.157.90/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:48:53", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:20", "1867668", "https://vog.peluangsm188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:26:30", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:18", "1867657", "https://steamcommunity.com/profiles/76561198667588759", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 07:12:42", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:40:47", "1867634", "137.184.199.120:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-09 20:43:47", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-03 07:05:06", "1867640", "92.119.158.20:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:48:12", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-03 05:45:46", "1867546", "198.98.53.100:34567", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-10 15:49:20", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-03 01:05:05", "1867590", "82.156.11.154:8082", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:14", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-02 19:45:45", "1867535", "38.60.230.135:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-02 19:45:45", "1867536", "38.60.230.135:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-02 19:45:45", "1867537", "38.60.230.135:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-02 19:45:35", "1867534", "27.124.36.153:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 19:45:28", "1867532", "217.60.77.60:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:41", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 19:45:28", "1867533", "217.60.77.60:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:41", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 19:44:42", "1867530", "207.56.28.108:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:42", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 19:44:42", "1867531", "207.56.28.111:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:43", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 19:44:33", "1867529", "198.46.173.17:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:24", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-02 19:44:07", "1867528", "176.97.114.8:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:34", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-02 19:43:18", "1867527", "109.248.151.114:9829", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:22", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-02 14:54:06", "1867317", "mfoguyg.josephmichaelnh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 03:15:56", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-02 14:37:15", "1867310", "85.31.60.169:5627", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-08-11 13:01:04", "100", "False", "None", "c2,ca8ec1b5a0a17aa5d1b792ebceadba97,remus", "0", "Bitsight"
"2026-08-02 11:46:58", "1867274", "106.75.249.202:6666", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:29", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-02 10:05:06", "1867257", "43.131.251.190:8088", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:06", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-02 09:46:59", "1867254", "91.124.98.42:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 09:46:21", "1867253", "45.61.114.217:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:20", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-02 09:46:08", "1867251", "38.247.147.37:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:03", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 09:46:08", "1867252", "38.247.147.37:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:03", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 09:46:07", "1867250", "38.247.147.37:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:03", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 09:45:57", "1867248", "31.57.147.182:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 09:45:57", "1867249", "31.57.147.182:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 09:44:44", "1867247", "198.46.187.30:65528", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:25", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-02 09:44:39", "1867246", "194.59.30.183:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 09:44:17", "1867245", "178.16.55.237:6443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:38", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-02 09:44:03", "1867244", "162.35.187.214:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:11", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-02 09:43:44", "1867243", "15.235.204.51:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:43:50", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-02 09:29:59", "1867236", "104.168.123.242:3276", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-08-11 06:21:19", "100", "False", "None", "945c9f3c8cddcb7f33efce50a9a949ad,c2,remus", "0", "Bitsight"
"2026-08-02 06:54:47", "1867155", "wqok85qtq.net", "domain", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-11 12:16:40", "100", "False", "", "Mirai", "0", "paradiseisnear"
"2026-08-02 00:26:48", "1867146", "oitavwl.dusanperisicmd.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 05:24:27", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-01 23:47:05", "1867044", "54.178.100.27:8022", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-01 23:46:49", "1867043", "185.92.190.177:8696", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:48", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-01 23:46:46", "1867042", "156.224.18.21:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:44", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-01 23:46:25", "1867041", "cs.rainbowrain.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:20", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-01 19:46:16", "1866972", "64.20.61.215:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:47:42", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-01 19:46:07", "1866971", "46.246.82.10:6490", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:29", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-01 19:45:56", "1866970", "45.192.211.77:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 19:45:32", "1866969", "217.60.77.60:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:41", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 19:44:38", "1866968", "195.177.94.61:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 19:43:46", "1866967", "155.2.192.251:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:56", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 19:43:31", "1866966", "139.199.160.80:32408", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:41", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 19:43:16", "1866963", "104.251.181.111:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 19:43:16", "1866964", "106.53.107.131:30943", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 19:43:16", "1866965", "107.152.42.223:34321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 19:43:07", "1866962", "103.148.58.18:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 19:43:03", "1866960", "101.36.123.12:34321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:04", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 19:43:03", "1866961", "102.117.164.193:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:04", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-01 16:49:50", "1866905", "oxrdcm.gtacauto.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 19:14:04", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-01 16:41:36", "1866903", "upnbvji.healthfoodzone.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 01:14:59", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-01 16:24:47", "1866902", "9pulblfs.drubenginecologo.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 11:27:24", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-01 15:55:50", "1866897", "qdmwlwx.havenchurchraleigh.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 23:15:06", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-01 15:44:36", "1866896", "dwdqhepzawjuizzspp.fungame777.co", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:43", "100", "False", "None", "ClearFake,win-0xa770,windows", "1", "anonymous"
"2026-08-01 15:18:57", "1866679", "nfbjoi.greenestreetchurch.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 11:18:15", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-01 14:37:38", "1866673", "ybfrvo.greaternewzionbc.org", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 09:17:45", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-01 13:51:45", "1866670", "padpoh.graphicstabletreviews.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:17:10", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-01 13:06:48", "1866664", "mbbzfh.grannygshemporium.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:43", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-08-01 12:08:51", "1866654", "swspyli.habbofutbol.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 21:14:32", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-08-01 09:46:41", "1866624", "87.199.203.248:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:48:01", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-01 09:46:39", "1866622", "85.11.167.134:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:46:39", "1866623", "85.11.167.134:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:58", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:46:33", "1866621", "77.246.111.132:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:47:50", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-01 09:46:18", "1866620", "47.87.84.177:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:30", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-01 09:45:59", "1866618", "43.213.166.7:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:09", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-01 09:45:59", "1866619", "43.213.254.221:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:10", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-01 09:45:50", "1866617", "31.57.38.232:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:45:47", "1866616", "3.115.55.199:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-08-11 12:46:50", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-08-01 09:45:39", "1866615", "217.60.195.197:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:39", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:45:38", "1866614", "217.60.195.197:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:39", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:44:46", "1866613", "202.182.108.40:21157", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:34", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-01 09:44:44", "1866612", "20.125.96.116:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:31", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-01 09:44:41", "1866611", "198.46.187.30:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:24", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-01 09:44:31", "1866609", "192.159.99.70:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:01", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:44:31", "1866610", "192.162.199.180:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:01", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 09:44:30", "1866608", "192.159.99.70:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:01", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:44:05", "1866607", "168.144.89.89:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:44:17", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-01 09:43:58", "1866606", "16.76.80.179:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-08-11 12:44:08", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-08-01 09:43:16", "1866603", "104.251.181.111:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:43:16", "1866604", "104.251.181.111:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:43:16", "1866605", "104.253.79.117:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 09:43:09", "1866602", "103.148.58.8:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:43:08", "1866597", "103.148.58.10:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:43:08", "1866598", "103.148.58.10:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:43:08", "1866599", "103.148.58.18:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:43:08", "1866600", "103.148.58.18:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:43:08", "1866601", "103.148.58.8:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 06:28:01", "1866367", "137.184.70.190:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:12:00", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-01 06:28:01", "1866374", "103.214.146.46:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:30:57", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-01 06:28:00", "1866401", "206.189.81.41:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:08:13", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-01 06:28:00", "1866418", "167.99.64.180:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-10 12:34:33", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-01 06:27:58", "1866467", "167.99.64.180:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-09 16:11:24", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-01 06:27:58", "1866470", "167.172.71.69:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 06:23:00", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-01 06:27:53", "1866530", "206.189.81.41:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 07:04:32", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-01 02:05:06", "1866518", "124.222.145.172:8084", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:39", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-01 01:38:22", "1866471", "jldrbcv.fitprotracker-campaign.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 04:26:56", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-07-31 23:46:44", "1866405", "185.92.190.175:8696", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:48", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 23:46:44", "1866406", "185.92.190.176:8696", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:48", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 23:46:43", "1866402", "185.182.65.34:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:47", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 23:46:43", "1866403", "185.92.190.173:8696", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:47", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 23:46:43", "1866404", "185.92.190.174:8696", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:47", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 23:17:18", "1866400", "gpfbmfo.finkfamilyautomotive.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 07:57:43", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-07-31 21:00:30", "1866378", "fkgynbq.federationofpbos.org", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 02:46:33", "100", "False", "None", "ClearFake,win-0x4679,windows", "1", "anonymous"
"2026-07-31 19:49:36", "1866354", "167.99.64.180:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:19:40", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-07-31 19:46:12", "1866366", "93.152.223.242:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:48:13", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-31 19:46:11", "1866365", "93.115.27.97:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:48:12", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 19:45:26", "1866364", "38.240.37.142:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:02", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 19:45:21", "1866363", "31.57.38.232:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 19:45:14", "1866362", "23.227.196.18:43655", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:44", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-31 19:44:21", "1866361", "194.62.248.129:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 19:44:18", "1866360", "193.138.195.29:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 19:44:09", "1866359", "185.174.102.5:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 19:43:52", "1866358", "167.172.142.69:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:44:15", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-31 19:43:20", "1866357", "118.107.46.207:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 19:43:19", "1866355", "118.107.46.204:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 19:43:19", "1866356", "118.107.46.207:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 19:28:12", "1866335", "206.189.81.41:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:34:31", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-07-31 19:28:10", "1866336", "143.198.206.191:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:30:56", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-07-31 19:28:09", "1866339", "137.184.199.120:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:15:36", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-07-31 19:28:09", "1866340", "167.172.71.69:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:23:20", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-07-31 16:25:35", "1866310", "https://vog.akasia988.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:35:09", "75", "False", "None", "e99set,Vidar", "0", "abuse_ch"
"2026-07-31 11:47:13", "1866062", "156.239.47.223:6005", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:45", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 11:47:12", "1866061", "156.224.18.21:8083", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:44", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 10:05:08", "1866034", "188.166.238.207:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:58", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-31 09:46:54", "1866020", "95.133.166.43:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:48:16", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-31 09:46:47", "1866019", "89.213.118.63:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:46:40", "1866018", "82.22.204.150:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:56", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:45:48", "1866017", "27.124.36.153:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:44:55", "1866015", "209.99.190.97:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:45:46", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-31 09:44:51", "1866014", "207.174.0.103:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:40", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:44:40", "1866013", "195.177.94.169:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:18", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 09:44:38", "1866011", "194.59.30.109:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 09:44:38", "1866012", "194.59.30.183:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:44:19", "1866010", "181.215.242.84:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:42", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:43:56", "1866009", "157.254.194.126:1447", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 09:43:27", "1866008", "13.205.246.212:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:31", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:43:15", "1866007", "104.243.248.63:3608", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 07:14:40", "1865459", "web.ugelparuro.gob.pe", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-10 09:20:36", "100", "True", "", "ClickFix,etherhiding", "0", "varysz"
"2026-07-31 07:12:32", "1865178", "www.pvlive.eu", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-09 17:36:09", "100", "True", "", "ClickFix,etherhiding", "0", "varysz"
"2026-07-31 07:12:31", "1865167", "www.piforschools.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-11 08:59:03", "100", "True", "", "ClickFix,etherhiding", "0", "varysz"
"2026-07-31 05:45:43", "1865067", "27.71.16.98:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:55", "50", "False", "None", "7552,c2,censys,cobalt strike", "0", "sojubear"
"2026-07-31 05:45:41", "1865072", "124.220.34.180:6666", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:39", "50", "False", "None", "45090,c2,censys,cobalt strike", "0", "sojubear"
"2026-07-31 05:45:40", "1865074", "111.170.148.141:113", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:30", "50", "False", "None", "151185,c2,censys,cobalt strike", "0", "sojubear"
"2026-07-31 01:05:06", "1865068", "114.132.155.197:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:25", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-30 23:46:22", "1865052", "151.244.243.42:4443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:42", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-30 19:46:08", "1864997", "51.79.209.228:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:35", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 19:46:08", "1864998", "51.79.209.228:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:35", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 19:46:08", "1864999", "51.79.209.228:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:35", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 19:46:00", "1864996", "46.246.14.5:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:28", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:45:58", "1864995", "46.149.71.165:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:26", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:45:39", "1864994", "35.72.170.195:21672", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:57", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:45:33", "1864993", "27.124.36.136:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 19:44:37", "1864992", "20.236.181.110:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:33", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:44:30", "1864988", "195.177.94.109:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 19:44:30", "1864989", "195.177.94.69:27220", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:44:30", "1864990", "195.177.94.69:27221", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:44:30", "1864991", "195.242.118.106:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:20", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:44:29", "1864986", "194.59.31.142:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:44:29", "1864987", "194.59.31.142:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:44:15", "1864985", "185.139.228.93:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:45", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:44:12", "1864984", "185.103.167.150:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:44:11", "1864983", "18.178.127.205:21672", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:42", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:44:10", "1864982", "18.139.36.190:24610", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:44:04", "1864981", "172.96.137.123:8443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:29", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:43:41", "1864980", "154.215.14.139:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:53", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:43:26", "1864979", "132.226.72.148:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:43:21", "1864976", "118.107.46.177:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:43:21", "1864977", "118.107.46.177:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:43:21", "1864978", "118.107.46.204:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:43:16", "1864975", "107.175.32.45:8761", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:19", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:43:12", "1864974", "104.207.90.244:2030", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:43:12", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-30 19:43:09", "1864973", "103.53.80.201:3312", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:37:16", "1864968", "https://t.me/gk6p2s", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 07:12:42", "100", "False", "https://bazaar.abuse.ch/sample/ec0078d806fcb7b0ef538a51ae03217888ce1bd3e96a73beceecc2c12675d77d/", "e99set,Vidar", "0", "abuse_ch"
"2026-07-30 09:46:46", "1864706", "93.152.223.221:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:48:13", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-30 09:46:19", "1864705", "51.79.185.253:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:35", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 09:46:18", "1864704", "50.114.184.63:444", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 09:46:17", "1864703", "50.114.184.63:442", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 09:46:11", "1864702", "46.151.182.16:2202", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:27", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 09:45:43", "1864701", "27.124.36.151:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 09:45:35", "1864700", "217.60.241.73:7011", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:40", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 09:44:46", "1864699", "209.99.190.23:45001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 09:44:36", "1864698", "2.27.248.116:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:45:27", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-30 09:44:08", "1864697", "176.65.148.198:7777", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 09:44:06", "1864696", "173.199.70.174:14321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:29", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 09:43:35", "1864694", "144.172.93.33:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:43:45", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-30 09:43:08", "1864693", "103.148.58.8:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 09:34:33", "1864665", "195.177.94.109:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:18", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-07-30 09:34:33", "1864666", "195.177.94.109:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:17", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-07-30 09:34:33", "1864673", "103.148.58.10:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:06", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-07-30 09:34:32", "1864645", "188.209.158.220:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:59", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-07-30 09:34:32", "1864649", "184.174.20.138:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:44", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-07-30 09:34:32", "1864652", "85.11.167.61:8000", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:58", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-07-30 09:34:31", "1864643", "188.209.158.220:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:59", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-07-30 09:34:31", "1864644", "188.209.158.220:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:59", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-07-30 08:53:38", "1864479", "147.93.62.224:7527", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-08-11 09:32:33", "100", "False", "None", "91b8bca4002c9ac9274dd008d8155424,c2,remus", "0", "Bitsight"
"2026-07-30 07:01:37", "1863982", "arco-iris.tms-muenster.de", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-10 09:00:35", "100", "True", "", "Base,c2,ClickFix,etherhiding", "0", "varysz"
"2026-07-29 23:46:20", "1863827", "156.224.18.21:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:44", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-29 23:34:06", "1863825", "qrcjab.rsfoodproducts.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 05:15:56", "100", "False", "None", "ClearFake,win-0x0cd5,windows", "1", "anonymous"
"2026-07-29 19:46:26", "1863594", "92.118.39.95:3043", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-11 12:48:11", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-07-29 19:46:24", "1863593", "91.199.133.133:8080", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-11 12:48:07", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-07-29 19:46:13", "1863592", "78.153.149.82:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-11 12:47:51", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-07-29 19:46:10", "1863590", "67.210.97.40:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:46", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 19:46:10", "1863591", "67.210.97.40:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:46", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 19:46:04", "1863589", "57.129.92.151:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:38", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-29 19:46:01", "1863587", "51.79.185.253:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:34", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:46:01", "1863588", "51.79.185.253:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:35", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:45:46", "1863586", "45.195.8.67:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-29 19:45:41", "1863585", "43.213.254.221:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:09", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-29 19:45:30", "1863583", "27.124.36.151:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:45:30", "1863584", "27.124.36.151:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:44:28", "1863579", "194.59.31.51:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:16", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 19:44:28", "1863580", "195.20.17.146:56776", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:19", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-29 19:44:27", "1863578", "194.59.31.51:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 19:44:25", "1863577", "192.71.244.238:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:09", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-29 19:44:24", "1863576", "192.253.245.178:2026", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:45:08", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 19:44:16", "1863575", "185.212.128.207:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:48", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-29 19:44:15", "1863574", "185.174.102.28:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:44:08", "1863573", "178.16.53.65:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:37", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:44:02", "1863572", "172.86.89.227:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:26", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:54", "1863571", "162.216.231.230:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:10", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-29 19:43:45", "1863570", "155.2.192.251:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:42", "1863569", "154.194.50.252:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:39", "1863568", "149.56.30.94:3122", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 12:43:50", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-07-29 19:43:33", "1863567", "142.93.52.11:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:43", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-29 19:43:26", "1863566", "130.12.182.209:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:14", "1863563", "104.239.66.154:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:14", "1863564", "104.239.66.154:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:14", "1863565", "104.239.66.154:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:12", "1863562", "103.97.131.179:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 17:41:00", "1863471", "134.209.42.122:9895", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-08-11 13:19:27", "100", "False", "None", "6ed07eee8b090ad8c77052912c8a29a6,c2,remus", "0", "Bitsight"
"2026-07-29 11:47:01", "1863378", "14.225.212.124:30005", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:41", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-29 09:46:12", "1863346", "93.152.223.222:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:48:13", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-29 09:46:12", "1863347", "93.152.223.224:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:48:13", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-29 09:46:05", "1863345", "86.106.119.24:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:48:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 09:46:02", "1863344", "84.201.20.74:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 09:45:54", "1863341", "67.210.97.40:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:46", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 09:45:29", "1863340", "43.206.219.14:10002", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:08", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-29 09:45:17", "1863339", "23.94.252.80:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:46:47", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-29 09:44:21", "1863337", "195.177.94.11:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:18", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 09:44:19", "1863336", "193.233.198.62:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 09:44:01", "1863335", "178.16.53.65:1907", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:36", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 09:43:54", "1863333", "168.222.97.120:1447", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:17", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 09:43:54", "1863334", "169.58.50.199:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:18", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-29 09:43:52", "1863332", "167.148.41.137:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 09:43:36", "1863329", "15.235.151.49:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 09:43:36", "1863330", "15.235.151.49:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 09:43:36", "1863331", "15.235.151.49:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:54", "1863315", "94.26.3.166:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:52", "1863313", "93.152.221.67:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:52", "1863314", "94.154.32.252:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:50", "1863312", "91.92.40.56:9267", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:48", "1863311", "89.213.118.63:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:34", "1863310", "64.224.17.110:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:43", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:29", "1863309", "51.79.185.253:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:34", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:27", "1863308", "5.253.86.251:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:22", "1863305", "45.89.48.12:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:22", "1863306", "45.89.48.12:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:22", "1863307", "45.89.48.12:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:26", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:16", "1863304", "45.192.211.63:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:15", "1863301", "45.157.233.124:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:15", "1863302", "45.157.233.124:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:15", "1863303", "45.157.233.124:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:14", "1863300", "45.153.34.203:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:00", "1863299", "27.124.36.151:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:59", "1863298", "27.124.36.136:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:52", "1863295", "217.156.122.76:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:38", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:52", "1863296", "217.60.195.153:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:39", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:52", "1863297", "217.60.195.167:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:46:39", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:17", "1863294", "209.99.190.23:55012", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:05", "1863292", "194.9.6.82:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:02", "1863255", "193.164.5.4:9991", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:01", "1863241", "192.229.115.162:56004", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:00", "1863230", "192.229.115.154:56004", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:00", "1863234", "192.229.115.156:56004", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:00", "1863237", "192.229.115.162:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:56", "1863164", "185.247.208.91:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:56", "1863169", "185.254.99.153:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:52", "1863089", "185.174.101.235:55555", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:48", "1863051", "181.215.242.78:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:42", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:48", "1863052", "181.215.242.84:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:43", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:46", "1863050", "178.211.155.64:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:39", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:45", "1863049", "178.16.53.65:2828", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:44", "1863048", "176.96.136.230:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:43", "1863047", "176.96.136.230:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:36", "1863045", "163.5.210.173:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:36", "1863046", "167.148.41.137:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:14", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:33", "1863044", "160.119.69.21:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:32", "1863043", "158.94.210.70:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:05", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:21", "1863041", "151.242.63.129:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:21", "1863042", "151.242.97.15:56831", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:12", "1863040", "140.228.29.61:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:41", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:56:51", "1862853", "103.114.218.145:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:05", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 07:42:09", "1861775", "176.96.136.230:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:33", "50", "False", "", "PureRat", "0", "RacWatchin8872"
"2026-07-29 07:42:09", "1861777", "45.192.211.7:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:16", "50", "False", "", "PureRat", "0", "RacWatchin8872"
"2026-07-29 07:42:08", "1861778", "103.68.109.13:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:10", "50", "False", "", "PureRat", "0", "RacWatchin8872"
"2026-07-29 07:42:08", "1861780", "176.96.136.230:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:44:33", "50", "False", "", "PureRat", "0", "RacWatchin8872"
"2026-07-29 07:42:07", "1861784", "130.94.7.119:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:35", "75", "False", "", "AsynRat,Server", "0", "RacWatchin8872"
"2026-07-29 07:41:53", "1861793", "104.200.67.224:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:12", "75", "False", "", "AsynRat,Server", "0", "RacWatchin8872"
"2026-07-29 07:32:16", "1862621", "154.12.94.16:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 07:32:30", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-07-29 07:32:11", "1862620", "117.72.199.102:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:34", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-07-29 07:31:57", "1862618", "154.12.94.16:2087", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 07:32:31", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-07-29 05:46:21", "1862523", "102.204.223.106:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:28", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-28 19:46:24", "1861820", "89.213.118.199:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:48:05", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-28 19:46:24", "1861821", "89.213.118.199:8080", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:48:05", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-28 19:46:24", "1861822", "89.213.118.199:8443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:48:05", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-28 19:45:50", "1861819", "45.62.170.226:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 19:45:36", "1861818", "31.58.179.22:10140", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:54", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-28 19:45:34", "1861817", "31.57.184.154:2504", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:52", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 19:45:30", "1861816", "23.94.148.17:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:46", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 19:45:25", "1861815", "217.60.241.88:7008", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 19:44:36", "1861814", "204.44.69.230:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:37", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 19:44:26", "1861813", "194.59.30.53:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 19:44:00", "1861812", "172.111.232.195:7775", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:20", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 19:43:27", "1861811", "130.94.7.119:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:34", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 19:43:15", "1861810", "104.248.185.92:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:43:15", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-28 19:43:14", "1861809", "104.200.67.224:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 16:59:29", "1861744", "45.192.211.7:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:16", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:29", "1861745", "45.192.211.7:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:16", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:29", "1861746", "80.76.49.3:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:53", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861736", "45.119.98.140:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:11", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861737", "45.119.98.140:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:11", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861738", "45.119.98.140:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:11", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861739", "45.192.211.19:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:15", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861740", "45.192.211.19:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:15", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861741", "45.192.211.19:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:15", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861742", "45.192.211.63:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:16", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861743", "45.192.211.77:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:17", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:27", "1861722", "193.233.198.62:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:11", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:27", "1861730", "45.119.98.111:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:11", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:27", "1861731", "45.119.98.111:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:11", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:27", "1861732", "45.119.98.111:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:11", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861710", "108.187.4.116:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:20", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861711", "108.187.4.145:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:21", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861712", "108.187.4.145:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:21", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861713", "108.187.4.145:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:21", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861714", "112.121.176.2:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:23", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861715", "112.121.176.3:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:23", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861717", "112.121.176.5:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:23", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861718", "112.121.176.6:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:23", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:25", "1861705", "103.68.109.13:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:10", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:25", "1861706", "103.68.109.13:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:10", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:25", "1861707", "104.164.46.39:8080", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:11", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:25", "1861708", "108.187.4.116:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:20", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:25", "1861709", "108.187.4.116:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:20", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:54:50", "1861640", "phiplips.click", "domain", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "2026-08-11 12:08:41", "100", "True", "https://infosec.exchange/@monitorsg/116998473477272648", "KongTuke", "0", "monitorsg"
"2026-07-28 13:19:49", "1861573", "griffihhs.click", "domain", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "2026-08-11 08:09:48", "100", "True", "None", "KongTuke", "0", "monitorsg"
"2026-07-28 09:46:46", "1861522", "96.126.176.92:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:48:17", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-28 09:46:44", "1861521", "93.152.223.158:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:48:12", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-28 09:46:12", "1861520", "49.235.50.231:14486", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:47:31", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-07-28 09:46:11", "1861519", "46.246.6.7:2222", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:29", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 09:46:09", "1861518", "46.151.182.76:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:27", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 09:45:42", "1861516", "23.94.252.87:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:46:48", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-28 09:45:42", "1861517", "24.244.73.237:40056", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:48", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-28 09:45:41", "1861515", "23.94.252.55:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:46:47", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-28 09:45:35", "1861514", "217.165.57.247:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:38", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 09:44:46", "1861513", "207.246.75.30:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:42", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 09:44:45", "1861512", "206.189.167.120:65000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:39", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-28 09:44:40", "1861511", "2.27.63.244:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:29", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-28 09:44:13", "1861510", "178.16.53.68:3009", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:37", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 09:43:56", "1861509", "158.94.210.161:2222", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:05", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 09:43:54", "1861508", "157.245.228.139:65000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:04", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-28 09:43:26", "1861507", "130.12.182.249:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:32", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 08:37:26", "1861477", "https://193.111.117.131", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:34:27", "100", "False", "None", "c2,f3f52941b868d54e7936351d349364fb,loader,stealer,Vidar", "0", "Bitsight"
"2026-07-28 07:23:35", "1861464", "106.14.243.66:5555", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-10 06:28:17", "100", "False", "None", "CobaltStrike,cs-watermark-391144938", "0", "abuse_ch"
"2026-07-27 23:45:57", "1861354", "158.94.211.163:24443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:45", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-27 23:45:57", "1861355", "159.94.211.163:24443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:45", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-27 22:05:05", "1861326", "189.249.193.61:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:59", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-27 21:05:07", "1861181", "36.139.36.124:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:58", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-07-27 19:45:24", "1860744", "46.151.182.76:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:27", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 19:44:20", "1860743", "204.44.69.230:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:38", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 19:43:38", "1860742", "155.138.203.207:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:55", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 19:43:24", "1860740", "137.220.155.44:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:39", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 19:43:24", "1860741", "137.220.155.44:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:39", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 19:43:22", "1860739", "130.12.182.249:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:33", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 19:43:21", "1860738", "130.12.182.249:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:33", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 19:43:16", "1860737", "109.122.18.38:5552", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 18:05:07", "1860713", "173.249.212.231:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:30", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-07-27 15:55:43", "1860683", "ovq3ncff.eachway-multiplier.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-10 01:05:01", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-07-27 15:21:52", "1860583", "yvesrxkzcdxycnarab.crownconnectpk.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 01:26:40", "100", "False", "None", "ClearFake,win-0xa770,windows", "1", "anonymous"
"2026-07-27 13:42:57", "1860536", "160.119.71.120:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 13:32:47", "75", "False", "None", "AISURU", "0", "abuse_ch"
"2026-07-27 13:25:21", "1860247", "193.233.198.62:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:11", "100", "False", "", "None", "1", "anonymous"
"2026-07-27 11:46:45", "1860224", "47.103.214.7:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:04", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-27 09:46:11", "1860093", "94.154.32.56:27221", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:48:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 09:46:10", "1860092", "94.154.32.56:27220", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:48:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 09:46:09", "1860091", "91.92.40.96:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:48:10", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-27 09:46:01", "1860090", "84.200.154.216:4000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:47:57", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-27 09:45:41", "1860089", "46.151.182.76:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:27", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 09:45:36", "1860088", "45.59.160.198:52203", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:20", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 09:44:29", "1860087", "204.44.69.230:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:37", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 09:44:23", "1860086", "2.26.26.153:43216", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:26", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-27 09:44:20", "1860085", "194.233.80.96:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:14", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-27 09:43:55", "1860084", "172.245.232.49:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:22", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-27 09:43:24", "1860083", "130.12.182.184:1339", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:32", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-26 23:45:57", "1859700", "141.255.162.234:37422", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:42", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-26 21:46:16", "1859680", "47.113.98.42:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:05", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-26 21:45:45", "1859678", "dns1.dreamls.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:21", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-26 21:45:45", "1859679", "dns2.dreamls.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:21", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-26 20:17:43", "1859008", "agroflow.co.za", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-11 08:58:59", "50", "True", "", "ClearFake,ClickFix", "0", "skocherhan"
"2026-07-26 19:45:49", "1858981", "93.152.221.140:1010", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:48:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-26 19:44:16", "1858980", "2.27.248.237:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:45:28", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-26 19:44:08", "1858979", "192.162.199.143:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:45:01", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-26 19:43:54", "1858978", "176.65.149.209:3043", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-11 12:44:33", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-07-26 19:43:42", "1858977", "157.20.182.22:4442", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-26 10:55:50", "1857981", "198.98.53.100:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 12:40:58", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-07-26 09:45:52", "1858181", "5.181.181.12:5443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:32", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-26 09:44:26", "1858180", "199.246.88.101:5432", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:25", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-07-26 09:43:12", "1858179", "103.67.163.201:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-26 09:40:44", "1858178", "lb.propertyfind.cc", "domain", "botnet_cc", "js.clearfake", "None", "ClearFake", "2026-08-11 04:50:54", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-07-25 23:46:33", "1857979", "54.178.100.27:8021", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-25 23:05:05", "1857976", "157.20.182.22:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:03", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-07-25 19:46:06", "1857725", "82.158.88.41:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:55", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-25 19:45:46", "1857724", "46.246.12.2:6490", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:28", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-25 19:45:29", "1857723", "37.244.233.190:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-08-11 12:46:58", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-07-25 19:45:23", "1857722", "27.124.20.3:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:48", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 19:44:25", "1857720", "2.27.248.209:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:27", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 19:44:10", "1857719", "185.147.83.59:48321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:45", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 19:43:34", "1857718", "146.70.87.23:43225", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:47", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 19:43:33", "1857717", "144.208.127.87:10443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:46", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 19:43:29", "1857716", "141.255.164.33:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:43:42", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-25 19:43:11", "1857715", "103.67.163.201:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-25 11:46:12", "1857363", "38.54.89.235:6688", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-25 11:45:55", "1857362", "117.28.246.18:8067", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:33", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-25 10:43:43", "1857339", "157.20.182.21:6666", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-25 09:46:00", "1857317", "74.249.84.175:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:49", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:45:51", "1857316", "51.107.74.185:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:33", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:45:47", "1857315", "46.246.12.2:2003", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:28", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-25 09:45:30", "1857313", "31.76.96.194:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:46:55", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-25 09:45:30", "1857314", "31.76.96.195:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:46:55", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-25 09:45:27", "1857311", "27.124.20.5:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:49", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:45:27", "1857312", "27.124.20.6:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:49", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:44:42", "1857310", "207.57.123.129:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:43", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:44:36", "1857308", "2.27.28.207:42153", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:29", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:44:36", "1857309", "2.27.29.171:42216", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:29", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:44:33", "1857307", "196.251.107.131:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-25 09:44:18", "1857306", "182.161.12.169:8050", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-08-11 12:44:43", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-07-25 09:43:31", "1857305", "146.103.38.224:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:46", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-25 09:43:30", "1857304", "144.172.118.84:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:45", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:43:20", "1857303", "119.28.212.86:44321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:28", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:43:10", "1857302", "103.67.163.201:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 23:46:13", "1857015", "209.200.246.194:34586", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:54", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-24 23:45:54", "1857014", "103.193.150.74:8087", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:28", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-24 19:45:44", "1856912", "87.251.64.204:63812", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:02", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-24 19:45:23", "1856911", "46.246.12.2:2512", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:28", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:45:13", "1856910", "45.11.59.152:43200", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:10", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-24 19:45:10", "1856909", "38.60.220.51:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:04", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-24 19:44:59", "1856908", "23.94.252.7:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:46:47", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-24 19:44:16", "1856907", "2.27.248.80:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:45:29", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-24 19:44:11", "1856906", "193.93.194.42:57301", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:14", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-24 19:44:03", "1856905", "185.212.129.117:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-24 19:43:43", "1856904", "158.94.211.191:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:05", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:41", "1856903", "157.20.182.21:1992", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:39", "1856897", "156.247.47.108:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:57", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:39", "1856898", "156.247.47.108:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:57", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:39", "1856899", "156.247.47.109:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:58", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:39", "1856900", "156.247.47.109:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:58", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:39", "1856901", "156.247.47.110:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:58", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:39", "1856902", "156.247.47.110:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:58", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:38", "1856895", "156.247.47.106:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:57", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:38", "1856896", "156.247.47.106:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:57", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:33", "1856894", "151.236.21.109:2096", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:43:51", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-24 19:43:28", "1856893", "143.110.132.139:65000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:43", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-24 19:43:21", "1856890", "13.143.139.239:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:31", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:21", "1856891", "13.143.139.239:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:31", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:21", "1856892", "13.143.139.239:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:31", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 15:05:06", "1856814", "111.228.62.67:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-10 06:28:27", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-24 13:50:06", "1856791", "https://sup.merahsm188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:25:54", "100", "True", "None", "vidar", "0", "crep1x"
"2026-07-24 13:50:05", "1856790", "sup.merahsm188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:25:54", "100", "True", "None", "vidar", "0", "crep1x"
"2026-07-24 09:46:45", "1856711", "79.110.49.148:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 09:46:44", "1856709", "79.110.49.148:1009", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 09:46:44", "1856710", "79.110.49.148:60", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 09:45:54", "1856708", "23.94.145.121:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:46:46", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-24 09:44:39", "1856707", "198.211.101.176:443", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:45:23", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-07-24 09:44:15", "1856706", "178.16.54.132:1987", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:38", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 09:43:56", "1856705", "157.20.182.22:4443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 09:43:55", "1856704", "157.20.182.21:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 07:25:20", "1856675", "42.193.22.177:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:58", "100", "False", "None", "CobaltStrike,cs-watermark-391144938", "0", "abuse_ch"
"2026-07-24 06:20:07", "1856638", "198.98.53.100:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-10 17:14:53", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-07-23 19:46:19", "1856292", "93.152.224.94:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:48:13", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:46:18", "1856291", "93.152.223.159:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:48:13", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:45:40", "1856290", "45.207.222.132:15847", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:18", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-23 19:45:33", "1856289", "38.255.43.22:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-23 19:44:28", "1856288", "2.27.248.75:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:45:29", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:44:27", "1856285", "2.27.248.232:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:45:27", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:44:27", "1856286", "2.27.248.236:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:45:28", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:44:27", "1856287", "2.27.248.72:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:45:28", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:43:44", "1856284", "155.117.232.184:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:55", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-23 19:43:14", "1856283", "104.239.66.79:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-23 15:46:56", "1856216", "8.135.47.140:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-23 15:46:43", "1856215", "38.244.52.101:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:56", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-23 15:46:20", "1856214", "102.204.223.106:2053", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:27", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-23 15:46:18", "1856213", "www.ai2.qzz.io", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:25", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-23 15:46:13", "1856212", "cloud-svc.site", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:20", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-23 09:45:56", "1855969", "64.224.17.167:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-23 09:44:27", "1855967", "2.27.160.24:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:45:27", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 09:44:27", "1855968", "2.27.248.234:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:45:27", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 09:44:03", "1855966", "178.156.186.93:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:35", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-23 09:43:57", "1855964", "172.239.45.42:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:44:21", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-23 09:43:57", "1855965", "172.245.27.162:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:22", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-23 09:43:48", "1855963", "157.20.182.22:9992", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-23 09:43:47", "1855962", "157.20.182.21:1444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-23 09:43:39", "1855961", "151.243.145.220:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:43:51", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-23 09:43:28", "1855960", "137.220.158.10:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:39", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-23 09:43:25", "1855959", "130.17.9.209:36806", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:43:34", "75", "False", "None", "drb-ra,NetSupport,RAT", "0", "abuse_ch"
"2026-07-23 09:43:18", "1855958", "109.122.18.70:20703", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-23 08:05:07", "1855925", "64.177.113.11:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:42", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-23 08:05:05", "1855923", "174.138.9.149:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:31", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-23 05:46:03", "1855877", "cdn.pixelcss.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:19", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-22 19:45:15", "1855460", "43.228.157.252:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 19:45:14", "1855459", "43.213.142.102:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:09", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-22 19:43:50", "1855457", "172.245.27.162:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:22", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 19:43:50", "1855458", "172.245.27.162:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:23", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 19:43:47", "1855456", "165.22.129.73:65000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:14", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-22 19:43:42", "1855454", "157.20.182.21:4442", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 19:43:42", "1855455", "157.20.182.22:1444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 19:43:25", "1855453", "137.184.163.27:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:38", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-22 19:43:24", "1855452", "134.209.114.97:8080", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:43:36", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-22 19:43:21", "1855451", "12.187.175.73:8797", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:28", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 19:43:16", "1855450", "107.175.114.221:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 17:05:52", "1855382", "43.134.38.218:4543", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:07", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-22 09:45:30", "1855249", "45.142.141.139:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-22 09:45:17", "1855248", "23.94.197.120:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:47", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 09:44:26", "1855247", "203.99.149.78:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:37", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 09:44:24", "1855246", "20.200.61.22:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:33", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-22 09:44:15", "1855245", "192.227.219.71:3341", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 09:43:50", "1855244", "167.160.190.182:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:14", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-22 09:43:45", "1855243", "157.20.182.21:1338", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 09:43:44", "1855242", "157.20.182.21:1337", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 09:43:34", "1855241", "147.50.253.241:4415", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:47", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 09:43:26", "1855240", "137.220.158.10:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:39", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 09:43:25", "1855239", "132.145.210.148:8443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:35", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-22 09:43:14", "1855238", "104.248.69.160:65000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:15", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-22 08:55:56", "1855226", "217.60.241.34:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:40", "75", "False", "https://bazaar.abuse.ch/sample/40b95ef52169126b3732d14479f1497715ec0f5bf1bc6fd0104188f7911f5fef/", "asyncrat", "0", "abuse_ch"
"2026-07-22 08:55:56", "1855227", "217.60.241.34:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:40", "75", "False", "https://bazaar.abuse.ch/sample/40b95ef52169126b3732d14479f1497715ec0f5bf1bc6fd0104188f7911f5fef/", "asyncrat", "0", "abuse_ch"
"2026-07-22 08:50:03", "1855221", "217.60.241.34:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:40", "100", "False", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2026-07-22 08:06:59", "1855202", "http://vriclactrina.cz/index.php", "url", "botnet_cc", "win.smokeloader", "Dofoil,Sharik,Smoke,Smoke Loader", "SmokeLoader", "2026-08-11 12:40:08", "100", "False", "None", "c2,SmokeLoader", "0", "Bitsight"
"2026-07-21 19:46:20", "1855047", "86.48.16.94:30100", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:48:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-21 19:46:19", "1855046", "85.208.69.45:80", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-11 12:47:59", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-07-21 19:45:46", "1855045", "45.59.120.31:5656", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:20", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-21 19:45:42", "1855044", "45.142.141.139:80", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-21 19:45:41", "1855043", "43.213.171.100:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:09", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-21 19:45:40", "1855041", "43.213.142.102:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:09", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-21 19:45:40", "1855042", "43.213.171.100:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:09", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-21 19:45:33", "1855039", "34.106.101.107:6932", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:56", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-21 19:45:33", "1855040", "34.28.220.109:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:56", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-21 19:44:32", "1855038", "2.27.122.16:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:45:26", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-21 19:43:52", "1855037", "159.203.187.219:8080", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:06", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-21 19:43:38", "1855036", "147.50.253.241:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-21 19:43:32", "1855035", "141.253.195.133:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:42", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-21 19:43:28", "1855034", "132.145.210.148:11235", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:35", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-21 09:44:16", "1854871", "185.33.86.141:29292", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:55", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-21 05:59:06", "1854752", "lifeisabouthavingfun448.duckdns.org", "domain", "botnet_cc", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "2026-08-11 12:16:39", "100", "False", "https://bazaar.abuse.ch/sample/1cf3a473824ecd73dd246db96a9a11a3b094cf1052a085f86fa5327f550eecdf/", "Gafgyt", "0", "abuse_ch"
"2026-07-20 19:45:56", "1854508", "94.154.43.77:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-11 12:48:15", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-07-20 19:45:43", "1854507", "77.237.114.150:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-08-11 12:47:50", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-07-20 19:45:29", "1854506", "46.29.162.159:52310", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:29", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:45:07", "1854505", "23.94.197.120:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:47", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-20 19:45:02", "1854504", "220.154.3.197:9443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:42", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:44:22", "1854503", "203.83.238.164:9003", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:36", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:44:19", "1854502", "2.27.248.61:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:45:28", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-20 19:43:58", "1854501", "181.234.136.109:8443", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:44:43", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-07-20 19:43:54", "1854500", "176.12.79.82:8443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:31", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:43:37", "1854498", "151.243.101.44:21343", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:51", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:43:29", "1854496", "14.22.75.6:9003", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:41", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:43:29", "1854497", "14.22.75.6:9443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:41", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:43:22", "1854495", "12.202.180.13:6745", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:28", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-20 09:45:58", "1854201", "89.124.104.192:49999", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:04", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-20 09:45:09", "1854200", "220.154.3.197:8766", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:42", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 09:44:25", "1854198", "203.83.238.164:8766", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:35", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 09:44:25", "1854199", "203.83.238.164:9443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:36", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 09:44:15", "1854197", "192.227.219.71:34471", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-20 09:44:09", "1854196", "185.212.131.28:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:52", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-20 09:44:07", "1854195", "185.212.128.155:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:48", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-20 09:43:51", "1854193", "169.58.12.228:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:18", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-20 09:43:39", "1854192", "154.83.186.39:8443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-11 12:43:53", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-07-20 09:43:35", "1854191", "147.93.191.75:20800", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-20 09:43:34", "1854190", "147.93.191.75:20700", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-20 09:43:11", "1854188", "103.185.249.13:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:07", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 07:50:53", "1854130", "https://167.233.225.221/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:49:24", "100", "False", "", "Vidar", "0", "crep1x"
"2026-07-20 07:50:52", "1854120", "https://62.60.156.9/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:44", "100", "False", "", "Vidar", "0", "crep1x"
"2026-07-20 07:50:51", "1854116", "https://62.60.156.150/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:49:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-07-20 07:50:51", "1854118", "https://168.119.108.231/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:00", "100", "False", "", "Vidar", "0", "crep1x"
"2026-07-20 07:50:50", "1854114", "https://46.224.109.175/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:49:58", "100", "False", "", "Vidar", "0", "crep1x"
"2026-07-19 19:45:39", "1853904", "89.223.24.227:52709", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 12:48:06", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-07-19 19:44:23", "1853903", "213.160.77.221:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:45:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-19 19:44:19", "1853902", "209.160.115.136:8624", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:45:44", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-19 19:43:50", "1853901", "178.105.144.206:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-19 19:43:41", "1853900", "159.65.232.209:8080", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:07", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-19 19:43:40", "1853899", "157.230.235.215:8080", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:03", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-19 19:43:26", "1853898", "14.22.75.6:8766", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:41", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-19 17:27:03", "1853839", "https://qar.arizonafamilylawfirm.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:25:31", "75", "False", "None", "bhipk,Vidar", "0", "abuse_ch"
"2026-07-19 17:27:03", "1853840", "qar.arizonafamilylawfirm.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:25:31", "75", "False", "None", "bhipk,Vidar", "0", "abuse_ch"
"2026-07-19 10:16:42", "1853729", "154.12.85.75:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:43", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-07-19 09:46:24", "1853718", "91.92.47.95:56999", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:48:11", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-19 09:44:11", "1853717", "185.147.83.58:64213", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:45", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-18 23:46:07", "1853568", "38.76.169.75:870", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-18 23:45:54", "1853567", "130.94.34.66:6666", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-18 19:45:54", "1853534", "64.89.161.190:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-18 19:45:46", "1853533", "5.35.91.124:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:32", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-18 19:44:24", "1853531", "198.23.185.95:20100", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:23", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-18 19:44:24", "1853532", "198.23.185.95:8888", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:23", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-18 19:44:20", "1853530", "193.93.193.135:9090", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-11 12:45:13", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-07-18 19:43:34", "1853529", "147.93.191.75:20100", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-18 19:43:31", "1853528", "144.172.88.233:5656", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:45", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-18 17:31:55", "1853428", "103.86.65.202:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:28", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-07-18 09:47:35", "1853338", "159.94.211.163:14443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:45", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-18 09:47:34", "1853337", "158.94.211.163:14443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:45", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-18 09:46:23", "1853335", "46.246.12.19:2703", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:28", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-18 09:46:14", "1853334", "45.55.98.175:60560", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-08-11 12:47:18", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-07-18 09:45:59", "1853333", "31.57.93.182:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:54", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-18 09:45:49", "1853331", "217.217.97.111:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:38", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-18 09:44:45", "1853330", "2.59.132.84:7434", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:30", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-18 09:44:41", "1853329", "198.23.185.95:1000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:23", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-18 09:43:33", "1853328", "138.124.90.26:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-17 21:46:50", "1852991", "45.194.17.39:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-17 21:05:07", "1852912", "20.2.87.168:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:32", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-17 19:45:58", "1852892", "62.109.10.128:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:40", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-07-17 19:45:49", "1852890", "46.225.160.243:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:47:28", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-17 19:45:49", "1852891", "46.246.82.7:2003", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:29", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-17 19:45:23", "1852889", "221.212.219.56:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:46:43", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-17 19:44:34", "1852888", "207.180.29.217:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:40", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-17 19:44:27", "1852887", "198.23.185.95:50", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:23", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-17 19:44:05", "1852886", "181.235.4.60:5010", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-17 19:44:03", "1852885", "178.83.226.199:9091", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:39", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-17 19:43:48", "1852884", "157.20.182.17:1665", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:59", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-17 19:43:41", "1852883", "15.235.149.212:9443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:43:50", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-17 19:43:39", "1852881", "147.93.191.75:50", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-17 19:43:39", "1852882", "149.104.110.202:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:48", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-17 19:43:17", "1852880", "104.249.10.121:80", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-11 12:43:15", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-07-17 19:43:15", "1852879", "104.168.0.147:1989", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-17 18:05:06", "1852872", "175.43.223.223:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:31", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-17 11:10:08", "1852802", "https://okx.kliksm188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 12:24:40", "100", "True", "None", "vidar", "0", "crep1x"
"2026-07-17 11:10:07", "1852801", "okx.kliksm188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 12:24:40", "100", "True", "None", "vidar", "0", "crep1x"
"2026-07-16 19:46:46", "1852649", "80.240.21.145:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:53", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-16 19:46:37", "1852648", "64.177.120.228:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:42", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-16 19:46:28", "1852647", "5.200.192.159:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:32", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-16 19:46:15", "1852646", "45.32.90.122:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:18", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-16 19:46:09", "1852645", "43.225.157.146:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-16 19:45:50", "1852644", "217.60.241.10:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:40", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-16 19:44:42", "1852643", "199.247.22.101:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:25", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-16 19:44:38", "1852642", "194.32.142.225:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:45:14", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-16 19:44:30", "1852641", "188.166.40.236:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:58", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-16 19:43:49", "1852640", "154.19.229.197:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:52", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-16 09:47:53", "1852491", "203.91.75.89:5005", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:53", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-16 09:46:58", "1852490", "85.120.217.235:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:58", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-16 09:46:46", "1852489", "64.89.161.190:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-16 09:46:37", "1852486", "5.56.25.238:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:32", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-16 09:46:37", "1852487", "5.56.25.238:6723", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:33", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-16 09:46:37", "1852488", "5.56.25.238:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:33", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-16 09:46:12", "1852485", "37.60.239.250:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:58", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-16 09:45:57", "1852484", "217.60.241.10:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:40", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-16 09:45:04", "1852483", "209.99.189.225:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:45", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-16 09:44:58", "1852482", "207.180.250.181:20300", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:40", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-16 09:44:56", "1852480", "204.44.93.75:14641", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:38", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-16 09:44:56", "1852481", "204.44.93.75:14642", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:38", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-16 09:44:40", "1852479", "192.142.37.30:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:00", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-16 09:43:52", "1852478", "154.19.229.85:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:52", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-16 09:43:47", "1852477", "147.124.219.0:8805", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:47", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-16 09:43:25", "1852475", "109.123.230.199:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:21", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-16 09:43:25", "1852476", "109.123.230.199:8443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:21", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-16 09:43:19", "1852474", "104.168.134.25:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-16 04:05:05", "1851397", "14.29.160.181:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:41", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-15 21:46:16", "1851315", "107.174.254.62:9443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:30", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-15 19:46:03", "1851289", "64.23.182.12:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:47:43", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-15 19:46:03", "1851290", "64.89.160.127:2026", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-15 19:45:56", "1851288", "5.56.25.238:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:33", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-15 19:45:24", "1851286", "216.250.249.83:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:37", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-15 19:45:24", "1851287", "216.250.249.83:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:37", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-15 19:44:38", "1851284", "204.44.93.75:14648", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:38", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-15 19:44:38", "1851285", "204.44.93.75:14649", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:38", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-15 19:44:19", "1851283", "185.212.131.22:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:52", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-15 19:44:13", "1851282", "185.115.164.59:7723", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:44:44", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-15 19:44:08", "1851281", "178.73.192.16:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:39", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-15 19:43:55", "1851280", "162.35.175.224:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:11", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-15 19:43:16", "1851279", "104.225.104.237:3020", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:13", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-15 19:43:15", "1851278", "104.168.134.25:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-15 19:43:14", "1851277", "103.83.86.48:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:11", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-15 19:43:06", "1851276", "103.11.41.10:17328", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:04", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-15 09:46:24", "1850972", "82.47.101.76:8080", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-15 09:46:18", "1850971", "74.0.32.137:80", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:47:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-15 09:45:31", "1850969", "216.250.254.245:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:37", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-15 09:44:48", "1850967", "213.152.186.188:18856", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:49", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-15 09:44:41", "1850966", "204.44.69.214:14646", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:37", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-15 09:44:28", "1850965", "192.255.195.147:14645", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:09", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-15 09:44:26", "1850964", "191.104.219.22:8443", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:45:00", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-07-15 09:43:27", "1850962", "124.198.132.119:5220", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:29", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-15 09:43:17", "1850961", "104.225.104.237:2030", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:13", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-15 09:43:08", "1850960", "103.11.41.10:62452", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:04", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-15 09:43:06", "1850959", "103.11.41.10:10443", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:04", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-15 05:20:03", "1850805", "217.217.97.75:8787", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:38", "100", "False", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2026-07-14 21:46:37", "1850746", "206.119.178.109:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:53", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-14 19:46:04", "1850712", "87.232.83.18:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:48:02", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-14 19:46:01", "1850711", "85.206.168.238:4646", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:59", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-14 19:45:50", "1850710", "64.89.161.190:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-14 19:45:34", "1850709", "45.74.7.107:5691", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:21", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-14 19:45:31", "1850708", "45.155.69.254:1488", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:14", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-14 19:45:13", "1850707", "217.60.241.10:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:40", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-14 19:44:18", "1850704", "192.169.7.60:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-14 19:44:18", "1850705", "192.169.7.60:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-14 19:44:17", "1850703", "191.101.130.245:5199", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-14 19:44:12", "1850702", "185.223.57.86:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:52", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-14 19:44:06", "1850701", "185.115.164.59:53353", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:44:44", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-14 19:43:47", "1850700", "158.94.211.63:32333", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:06", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-14 19:43:43", "1850699", "155.103.71.115:15608", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:55", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-14 19:43:39", "1850698", "151.145.34.33:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 13:24:03", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-07-14 19:43:36", "1850697", "147.182.143.172:8080", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:43:47", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-14 19:43:35", "1850696", "147.124.214.170:4056", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:47", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-14 19:43:14", "1850695", "103.83.86.48:1616", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:10", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-14 18:05:08", "1850666", "45.55.232.28:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:18", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-07-14 09:47:18", "1850217", "96.9.231.213:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-14 09:46:38", "1850216", "47.109.181.81:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:30", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-14 09:46:14", "1850215", "35.78.107.61:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:57", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-14 09:45:59", "1850214", "216.9.225.38:14649", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:46:38", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-14 09:44:51", "1850213", "204.44.69.214:14647", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:37", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-14 09:44:48", "1850212", "20.226.72.17:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:33", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-14 09:44:41", "1850211", "198.135.49.85:62025", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:22", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-14 09:44:34", "1850210", "192.255.195.147:14647", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:09", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-14 09:44:21", "1850209", "185.115.164.60:65531", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:44:44", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-14 09:44:19", "1850208", "185.115.164.60:11883", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:44:44", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-14 09:44:05", "1850207", "172.232.122.241:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:20", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-14 09:44:01", "1850206", "164.90.202.48:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-14 09:43:35", "1850205", "139.199.87.99:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:41", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-14 09:43:30", "1850204", "130.49.214.23:59838", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:34", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-14 09:43:26", "1850203", "118.89.121.171:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:28", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-13 19:45:28", "1849979", "85.8.149.156:444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:48:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-13 19:45:13", "1849978", "5.175.218.71:5691", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:32", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-13 19:45:03", "1849977", "45.59.114.202:9090", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:47:19", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-13 19:44:54", "1849976", "37.235.54.142:53236", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:46:58", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-13 19:44:48", "1849974", "23.27.52.106:28736", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:46", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-13 19:44:18", "1849973", "212.180.120.35:1604", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-13 19:44:13", "1849972", "204.44.69.214:14641", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:37", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-13 19:44:03", "1849970", "192.255.195.147:14641", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:08", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-13 19:44:03", "1849971", "192.255.195.147:14644", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:08", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-13 19:44:00", "1849968", "188.209.158.161:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:59", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-13 19:44:00", "1849969", "188.209.158.161:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:59", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-13 19:43:57", "1849967", "185.212.131.27:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:52", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-13 19:43:44", "1849966", "172.86.119.141:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:44:26", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-13 19:43:19", "1849965", "128.90.105.247:7998", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:30", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-13 19:43:17", "1849964", "113.31.102.219:21935", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:24", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-13 19:43:11", "1849963", "103.83.87.107:4098", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:11", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-13 19:05:07", "1849957", "36.140.162.173:7777", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:56", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-13 14:05:50", "1849758", "133.18.165.80:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:35", "75", "False", "https://bazaar.abuse.ch/sample/dc14aa1d739c79a92ae7342a7f6941aab24df1b03fedd0a99d9a57cd972d569d/", "asyncrat", "0", "abuse_ch"
"2026-07-13 14:00:05", "1849751", "133.18.165.80:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:35", "100", "False", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2026-07-13 09:46:37", "1849657", "91.92.42.50:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-11 12:48:10", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-07-13 09:45:31", "1849656", "216.9.225.38:14645", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:46:38", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-13 09:44:45", "1849655", "211.159.223.14:22005", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:48", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-13 09:44:23", "1849654", "188.209.158.161:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:59", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-13 09:43:27", "1849653", "136.111.38.101:6932", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:37", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-13 07:03:02", "1849604", "103.214.146.46:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-11 12:47:01", "100", "False", "https://github.com/deepfield/public-research/blob/main/aisuru/README.md", "airashi,aisuru,botnet,c2,ddos,mirai", "0", "deepfield"
"2026-07-12 19:46:07", "1849096", "85.206.168.238:23501", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:58", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-12 19:45:37", "1849094", "45.198.224.93:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-12 19:45:18", "1849092", "23.106.52.176:2489", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-12 19:45:18", "1849093", "23.106.52.176:3984", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-12 19:44:38", "1849091", "211.159.223.14:22003", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:47", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-12 19:44:04", "1849090", "178.73.218.4:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:39", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-12 19:43:47", "1849089", "157.20.182.18:1665", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-12 19:43:29", "1849088", "137.220.152.132:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:38", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-12 19:43:28", "1849087", "137.220.152.131:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:38", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-12 19:43:14", "1849086", "104.164.46.55:62721", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:11", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-12 19:43:09", "1849071", "103.11.41.19:52811", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:04", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-12 19:43:09", "1849072", "103.11.41.19:64045", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:05", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-12 11:05:05", "1848961", "196.251.121.120:35630", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:45:21", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-07-12 09:46:09", "1848949", "93.95.226.207:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:48:14", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-12 09:45:32", "1848946", "45.61.149.187:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 08:46:43", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-12 09:45:32", "1848947", "45.61.149.187:8004", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 08:46:44", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-12 09:45:32", "1848948", "45.61.149.187:8005", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 08:46:44", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-12 09:45:30", "1848945", "45.198.224.94:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-12 09:45:25", "1848944", "38.54.8.74:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:04", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-12 09:45:16", "1848943", "27.102.137.139:465", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 08:46:14", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-12 09:45:11", "1848942", "216.9.225.38:14642", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 08:46:03", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-12 09:43:56", "1848940", "172.86.77.116:5656", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:26", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-12 09:43:23", "1848937", "118.107.45.29:50555", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-08-11 12:43:26", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-07-12 09:43:23", "1848938", "118.107.45.70:50555", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-08-11 12:43:26", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-07-12 09:43:23", "1848939", "118.107.45.73:50555", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-08-11 12:43:27", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-07-12 09:43:18", "1848936", "107.172.90.117:4322", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-12 09:43:14", "1848933", "104.207.93.150:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:13", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-12 09:43:14", "1848934", "104.207.93.150:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:13", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-11 23:46:14", "1848815", "186.241.75.134:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:51", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-11 19:46:05", "1848772", "82.158.229.189:18443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:54", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 19:46:05", "1848773", "82.158.229.30:18443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:55", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 19:46:04", "1848771", "82.158.229.143:18443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:54", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 19:45:53", "1848770", "62.109.10.128:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:40", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-07-11 19:45:41", "1848769", "45.74.7.201:3305", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:24", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-11 19:45:23", "1848768", "31.207.4.197:9872", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:51", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 19:45:19", "1848767", "23.106.52.176:59838", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 19:45:16", "1848766", "216.9.225.38:14648", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:46:38", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-11 19:44:14", "1848765", "185.244.149.240:61443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-11 12:44:54", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-07-11 19:43:59", "1848764", "178.104.249.136:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 19:43:43", "1848759", "156.234.43.100:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 19:43:43", "1848760", "156.234.43.101:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 19:43:43", "1848761", "156.234.43.102:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 19:43:43", "1848762", "156.234.43.98:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 19:43:43", "1848763", "156.234.43.99:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 19:43:33", "1848758", "144.91.76.114:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:46", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-11 19:43:27", "1848756", "137.220.152.131:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:38", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 19:43:27", "1848757", "137.220.152.132:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:38", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 19:43:03", "1848755", "1.14.234.68:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:02", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 15:02:20", "1848585", "https://91.98.111.49/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:48:52", "100", "False", "https://bazaar.abuse.ch/sample/4992cb5f29594ae1cea78e028a2e6a51d571a610ceeb4442b605953b916dd1c4/", "c2,vidar", "0", "burger"
"2026-07-11 11:46:39", "1848617", "139.155.157.79:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-11 11:46:37", "1848616", "123.58.64.57:50040", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:38", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-11 11:46:31", "1848615", "115.190.237.175:6677", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:32", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-11 11:05:05", "1848599", "172.174.154.130:1024", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:20", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-07-11 09:46:53", "1848583", "137.220.194.15:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-11 09:46:35", "1848582", "r0.erloro.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:24", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-11 09:46:21", "1848581", "89.144.10.64:1604", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:48:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 09:46:08", "1848580", "69.10.49.136:2005", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-10 18:46:42", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 09:46:07", "1848578", "66.97.33.99:4444", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-10 18:46:41", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-11 09:46:07", "1848579", "67.211.221.131:65291", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-10 18:46:42", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-07-11 09:43:11", "1848575", "103.195.238.98:8080", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-11 12:43:07", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-07-11 08:52:51", "1848544", "81.70.21.248:8088", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:14", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-07-11 05:55:11", "1848482", "157.20.182.81:421", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-07-10 23:46:33", "1848358", "8.134.70.73:6111", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-10 23:46:08", "1848357", "137.220.194.15:8011", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-10 23:46:00", "1848356", "115.190.237.175:23333", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:32", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-10 23:45:58", "1848355", "112.124.106.45:8887", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:31", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-10 19:46:10", "1848289", "93.115.172.235:7579", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:12", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-10 19:46:04", "1848288", "87.232.83.18:8080", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:48:02", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-10 19:45:36", "1848287", "45.74.7.199:7312", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:24", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-10 19:45:35", "1848286", "45.74.7.191:1202", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:23", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-10 19:45:12", "1848285", "216.133.157.16:21935", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-10 08:45:42", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-10 19:43:41", "1848284", "155.103.71.115:13508", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-09 18:43:39", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-10 19:43:32", "1848283", "144.31.117.38:47825", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:46", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-10 19:43:13", "1848282", "103.83.86.48:1818", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:11", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-10 13:27:06", "1848062", "bdm.kencangsm188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:24:43", "75", "False", "None", "mp44s1,Vidar", "0", "abuse_ch"
"2026-07-10 13:27:05", "1848061", "https://bdm.kencangsm188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:24:43", "75", "False", "None", "mp44s1,Vidar", "0", "abuse_ch"
"2026-07-10 11:46:34", "1847999", "101.42.255.92:2234", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:27", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-10 10:05:08", "1847977", "101.42.255.92:8081", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:27", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-10 09:46:22", "1847971", "85.206.168.238:26076", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:59", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-10 09:46:14", "1847970", "74.0.32.137:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:47:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-10 09:46:07", "1847969", "54.65.16.199:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-08-11 12:47:38", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-07-10 09:45:53", "1847967", "45.74.7.195:8015", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:23", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-10 09:45:41", "1847966", "38.207.176.218:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:02", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-10 09:44:38", "1847964", "20.204.61.204:21891", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-09 18:44:32", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-10 09:44:08", "1847963", "179.43.149.253:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:40", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-10 09:43:38", "1847961", "147.124.218.54:62025", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-09 18:43:33", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-10 09:43:27", "1847960", "13.73.107.136:443", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-09 18:43:22", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-10 09:43:16", "1847959", "104.250.161.126:2061", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:16", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-10 09:43:13", "1847957", "103.212.187.217:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:43:07", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-10 09:43:13", "1847958", "103.212.187.217:8889", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:43:07", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-10 09:43:12", "1847956", "103.146.231.107:7771", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:05", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-10 09:43:03", "1847955", "100.31.133.28:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:43:03", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-10 06:05:05", "1847905", "119.45.160.160:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:36", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-10 03:46:14", "1847878", "38.54.61.225:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-10 08:47:35", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-10 03:10:21", "1847868", "158.178.230.77:7443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:45", "100", "False", "None", "CobaltStrike", "0", "abuse_ch"
"2026-07-09 23:46:10", "1847818", "78.17.212.136:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-10 08:47:44", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-09 23:46:08", "1847817", "59.110.23.216:8181", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-09 19:45:23", "1847753", "37.72.172.58:4212", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:59", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 19:45:12", "1847752", "216.9.225.38:14641", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:46:37", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-09 19:44:37", "1847751", "213.209.159.91:22", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:50", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 19:44:36", "1847750", "212.46.38.117:4445", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:45:49", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-09 19:43:58", "1847748", "179.43.149.251:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:40", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-09 19:43:41", "1847747", "156.244.11.247:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:57", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-09 19:43:40", "1847746", "155.103.71.115:13507", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-10 18:43:47", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-09 19:43:22", "1847744", "122.114.12.155:17891", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:29", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-09 19:43:21", "1847743", "115.42.60.122:7912", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:25", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 14:05:07", "1847105", "157.20.182.18:4442", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:00", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-07-09 11:47:21", "1847068", "203.91.75.89:5006", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:53", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-09 09:46:37", "1847007", "91.92.242.180:1880", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:48:09", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-09 09:46:32", "1847005", "88.151.72.143:8443", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:48:03", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-09 09:46:28", "1847004", "84.247.142.79:8877", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:57", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-09 09:46:19", "1847002", "68.183.36.161:8080", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-10 18:46:42", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-09 09:46:14", "1847001", "62.60.226.157:1664", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:41", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-09 09:46:09", "1847000", "5.230.201.242:1995", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:32", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 09:45:58", "1846998", "45.74.7.194:9405", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:23", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-09 09:45:58", "1846999", "45.74.7.196:7312", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:24", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-09 09:45:52", "1846997", "45.150.36.229:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:47:13", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-09 09:45:48", "1846996", "38.60.125.143:12599", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:04", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 09:45:45", "1846995", "37.72.172.58:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:59", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 09:45:41", "1846992", "31.57.216.62:14642", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:46:53", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-09 09:45:41", "1846993", "31.57.216.62:14643", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:46:54", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-09 09:45:41", "1846994", "31.57.216.62:14645", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-10 18:45:58", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-09 09:45:33", "1846991", "216.9.225.38:14644", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:46:37", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-09 09:44:39", "1846990", "202.1.31.83:2234", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-09 18:44:32", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-09 09:44:21", "1846989", "186.169.89.64:5471", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 08:44:37", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-09 09:44:06", "1846988", "179.43.149.252:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:40", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-09 09:44:05", "1846987", "179.43.149.251:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:40", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-09 09:44:04", "1846986", "178.16.53.193:9999", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:36", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 09:44:00", "1846984", "176.120.22.129:443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-08-11 12:44:32", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-07-09 09:43:59", "1846983", "173.249.22.152:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:30", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-09 09:43:58", "1846982", "172.94.44.154:7775", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:29", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 09:43:46", "1846979", "157.20.182.17:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-09 18:43:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 09:43:46", "1846980", "157.20.182.18:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 08:43:57", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 09:43:45", "1846977", "157.173.195.214:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:43:59", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-09 09:43:45", "1846978", "157.173.195.214:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:43:59", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-09 09:43:33", "1846976", "144.208.127.243:8080", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:43:46", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-09 09:43:32", "1846975", "144.208.127.243:80", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:43:46", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-09 09:43:30", "1846974", "142.202.191.251:8624", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-09 18:43:30", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 07:10:42", "1846921", "https://172.235.191.111/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:49:43", "100", "False", "", "Vidar", "0", "crep1x"
"2026-07-09 06:51:11", "1846913", "39.105.201.165:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:57", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-07-09 02:05:05", "1846849", "193.29.13.44:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:12", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-09 00:46:41", "1846829", "159.75.152.237:6654", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-10 08:47:27", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-08 19:45:51", "1846741", "89.32.41.50:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-11 12:48:06", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-07-08 19:45:50", "1846740", "89.106.83.84:9405", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:48:04", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-08 19:45:24", "1846738", "45.74.7.192:2428", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:23", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-08 19:45:24", "1846739", "45.74.7.193:4509", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:23", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-08 19:45:00", "1846737", "216.9.225.38:14643", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-10 08:45:43", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-08 19:44:32", "1846736", "213.209.159.91:4556", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-08 19:44:24", "1846735", "202.61.130.106:8321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-08 19:43:55", "1846734", "179.43.149.252:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:40", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-08 19:43:45", "1846733", "164.68.123.50:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-08 19:43:14", "1846731", "104.64.192.34:6933", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:17", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-08 13:34:06", "1846597", "217.60.195.113:80", "ip:port", "payload_delivery", "elf.mirai", "Katana", "Mirai", "2026-08-10 12:48:07", "75", "False", "https://twitter.com/NullBlue67", "docker-api,honeypot", "0", "nullblue67"
"2026-07-08 11:46:49", "1846504", "185.92.190.185:8898", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:49", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-08 11:46:49", "1846505", "185.92.190.187:8898", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:49", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-08 09:46:12", "1846462", "89.106.83.75:8015", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:48:04", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-08 09:44:32", "1846458", "202.61.130.170:8321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-08 09:43:47", "1846454", "162.248.102.130:8848", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:44:10", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-08 07:40:42", "1846419", "139.226.191.149:2082", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:41", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-07-07 23:46:32", "1846237", "185.92.190.183:8898", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:48", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-07 23:46:32", "1846238", "185.92.190.184:8898", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:48", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-07 23:46:32", "1846239", "185.92.190.186:8898", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:49", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-07 19:45:48", "1846191", "8.133.197.201:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-10 18:46:45", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-07 19:45:41", "1846190", "62.192.173.164:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:47:41", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-07 19:43:50", "1846182", "172.93.144.150:8580", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:27", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-07 19:43:29", "1846179", "144.172.88.9:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:43:45", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-07-07 09:46:09", "1846003", "93.152.224.44:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:48:13", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-07 09:46:08", "1846002", "91.92.33.250:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:48:09", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-07 09:46:04", "1846001", "89.106.83.79:7312", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:48:04", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-07 09:44:33", "1845999", "209.54.103.155:14646", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-10 18:44:55", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-06 19:45:03", "1845803", "217.60.97.2:3000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:46:42", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-06 10:58:18", "1845588", "38.46.218.34:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-08-11 11:28:20", "100", "False", "None", "loader,Vo1d", "0", "Bitsight"
"2026-07-06 09:46:17", "1845507", "82.23.248.76:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:47:56", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-06 09:45:31", "1845505", "23.95.217.96:6745", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-06 09:45:29", "1845504", "222.167.211.55:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:46:43", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-06 09:45:27", "1845503", "216.203.20.22:18190", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-06 09:44:36", "1845502", "203.161.57.75:8234", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-06 09:44:34", "1845501", "2.56.212.64:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:45:30", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-06 09:44:33", "1845499", "2.27.122.16:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:45:26", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-06 09:44:31", "1845498", "2.137.3.71:3085", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:25", "75", "False", "None", "drb-ra,NetSupport,RAT", "0", "abuse_ch"
"2026-07-06 09:43:59", "1845497", "173.249.41.141:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:44:30", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-06 09:43:45", "1845496", "157.245.54.75:9000", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:44:04", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-07-06 09:43:32", "1845493", "143.198.120.167:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:43:44", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-06 06:50:15", "1845374", "https://167.233.156.78/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:49:53", "100", "False", "", "Vidar", "0", "crep1x"
"2026-07-06 06:50:14", "1845369", "https://167.233.158.81/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:49:42", "100", "False", "", "Vidar", "0", "crep1x"
"2026-07-06 06:50:14", "1845372", "https://167.233.159.57/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:48:57", "100", "False", "", "Vidar", "0", "crep1x"
"2026-07-06 06:50:13", "1845365", "https://167.233.150.198/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:39", "100", "False", "", "Vidar", "0", "crep1x"
"2026-07-06 06:50:12", "1845363", "https://91.98.96.199/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:49:46", "100", "False", "", "Vidar", "0", "crep1x"
"2026-07-06 05:05:04", "1845348", "35.239.131.165:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:57", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-07-05 19:45:53", "1845295", "77.105.169.126:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:47:49", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-05 19:45:18", "1845294", "31.220.93.222:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:52", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-05 19:44:18", "1845293", "194.26.192.117:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:14", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-05 18:05:04", "1845266", "141.94.121.162:8888", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:42", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-07-05 13:33:27", "1845011", "111.229.248.198:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:30", "100", "False", "None", "CobaltStrike,cs-watermark-1234567890", "0", "abuse_ch"
"2026-07-05 13:33:13", "1845009", "47.96.254.114:5555", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-10 06:28:16", "100", "False", "None", "CobaltStrike,cs-watermark-305419896", "0", "abuse_ch"
"2026-07-05 11:46:59", "1844990", "141.255.162.234:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:42", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-05 09:50:45", "1844960", "http://91.202.233.134/4d95d68e3fc64f3bbbf5.php", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-08-11 13:04:27", "75", "False", "https://bazaar.abuse.ch/sample/1095cf2951bbc8b1ecd33798afad192449a102aa1b976fb60bf566a08d693587/", "stealc", "0", "abuse_ch"
"2026-07-05 09:43:57", "1844953", "170.168.15.43:4322", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-05 09:43:36", "1844951", "144.31.62.81:56123", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:46", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-05 09:43:35", "1844949", "143.92.43.241:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:44", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-05 09:43:35", "1844950", "143.92.43.246:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:45", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-05 09:43:34", "1844948", "143.92.43.160:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:44", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-04 23:45:52", "1844861", "110.40.147.249:60010", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:30", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-04 19:45:47", "1844840", "92.4.65.88:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:48:12", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-04 19:43:50", "1844835", "179.43.149.250:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:39", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-04 19:43:33", "1844834", "155.103.69.30:14642", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:54", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-04 15:05:05", "1844655", "103.42.30.154:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:28", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-04 09:46:00", "1844476", "46.151.182.138:7312", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:27", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-04 09:43:25", "1844471", "130.12.182.95:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:34", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-04 07:10:33", "1844085", "186.169.89.64:5010", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:57", "75", "False", "", "AsyncRat,DDNS", "0", "navneeet"
"2026-07-04 07:10:33", "1844087", "186.169.89.64:9140", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:58", "75", "False", "", "AsyncRat,DDNS", "0", "navneeet"
"2026-07-03 19:46:03", "1844166", "86.109.75.177:17635", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:00", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-03 19:45:39", "1844165", "46.246.6.3:9999", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:29", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-03 19:45:22", "1844164", "37.244.255.240:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-08-11 12:46:58", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-07-03 19:44:34", "1844163", "212.193.23.223:8089", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-08-11 12:45:48", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-07-03 09:46:03", "1843961", "94.156.179.168:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:48:15", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-03 09:43:35", "1843958", "155.103.69.30:14644", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:54", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-03 09:43:18", "1843956", "113.31.102.219:21915", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:24", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-02 23:45:57", "1843816", "106.13.78.105:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:29", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-02 19:43:58", "1843762", "177.22.119.174:9001", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-08-11 12:44:34", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-07-02 19:43:55", "1843760", "172.94.18.103:70", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:28", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-02 19:43:39", "1843757", "155.103.69.30:14641", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:54", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-02 19:43:31", "1843754", "143.92.43.160:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:44", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-02 19:43:31", "1843755", "143.92.43.241:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:44", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-02 19:43:31", "1843756", "143.92.43.246:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:45", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-02 12:05:06", "1843500", "82.157.78.201:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:14", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-02 11:59:55", "1843495", "157.20.182.81:422", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-07-02 11:59:54", "1843488", "157.20.182.81:423", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-07-02 11:59:54", "1843490", "196.251.121.90:423", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-07-02 11:59:54", "1843491", "217.60.241.17:423", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-07-02 11:59:54", "1843493", "217.60.241.14:423", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:57", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-07-02 11:44:21", "1843418", "220.154.3.197:9003", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:42", "75", "False", "", "Mythic,MythicC2", "0", "navneeet"
"2026-07-02 11:44:19", "1843426", "167.99.166.159:8686", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:16", "75", "False", "", "Mythic,MythicC2", "0", "navneeet"
"2026-07-02 10:05:08", "1843475", "39.106.80.126:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:57", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-02 09:45:46", "1843465", "82.165.79.60:12001", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:47:55", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-02 09:45:46", "1843466", "82.165.79.60:12002", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:47:55", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-02 09:45:42", "1843463", "70.34.251.19:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:47:48", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-07-02 09:44:25", "1843461", "209.54.103.155:14644", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:45", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-02 09:44:08", "1843460", "192.162.242.202:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 12:45:02", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-07-02 09:43:39", "1843456", "162.243.54.45:8080", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-10 08:43:58", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-02 09:43:38", "1843455", "159.65.42.43:60560", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-08-11 12:44:07", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-07-02 09:43:24", "1843453", "141.94.121.162:6060", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:42", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-02 09:43:21", "1843452", "136.111.38.101:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:36", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-02 08:15:52", "1843432", "121.43.181.37:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:37", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-07-02 05:00:09", "1843356", "23.132.164.13:44444", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:55", "50", "False", "None", "60223,c2,censys,cobalt strike", "0", "sojubear"
"2026-07-02 03:05:05", "1843364", "158.160.191.88:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 08:44:00", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-01 23:46:22", "1843350", "209.200.246.194:37865", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:54", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-01 19:46:10", "1843300", "94.156.179.168:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:48:15", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-01 19:45:50", "1843298", "62.4.0.66:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:41", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-01 19:44:34", "1843294", "209.54.103.155:14641", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:45", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-01 19:44:11", "1843292", "185.235.138.19:3000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:53", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-01 19:43:58", "1843290", "181.225.233.172:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:43", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-01 11:47:08", "1840759", "82.156.235.177:13321", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:14", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-01 09:44:17", "1840745", "195.242.118.161:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:45:20", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-01 09:43:24", "1840741", "137.184.216.236:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:43:38", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-01 09:43:22", "1840740", "130.12.182.95:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:34", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-01 09:43:17", "1840739", "109.237.64.48:44704", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-01 08:05:06", "1840722", "119.91.243.238:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:36", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-01 07:20:28", "1840709", "https://159.69.77.223/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:30", "100", "False", "", "Vidar", "0", "crep1x"
"2026-07-01 07:05:06", "1840704", "43.144.19.224:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:59", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-30 23:45:49", "1840432", "107.173.42.123:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:29", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-30 23:45:40", "1840431", "cdn.soft-update.click", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:19", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-30 19:46:09", "1840388", "91.92.43.194:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:48:11", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:46:09", "1840389", "91.92.43.195:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:48:11", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:46:09", "1840390", "91.92.43.196:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:48:11", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:46:08", "1840387", "91.92.43.193:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:48:11", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:46:05", "1840386", "89.125.153.29:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:48:05", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:44:22", "1840380", "193.58.122.50:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:13", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-30 19:44:21", "1840379", "193.24.123.25:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:45:12", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:44:14", "1840378", "185.45.193.84:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:44:55", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:43:26", "1840375", "138.124.240.76:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:43:39", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:43:26", "1840376", "138.124.240.76:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:43:39", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:43:26", "1840377", "138.124.240.77:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-08-11 12:43:39", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:43:15", "1840372", "107.172.22.3:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:43:18", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-06-30 17:45:50", "1840357", "89.110.90.71:4444", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:04", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-30 17:45:21", "1840353", "45.74.7.172:1488", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:23", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-30 17:45:13", "1840352", "41.216.189.153:2096", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:47:05", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-06-30 17:44:15", "1840351", "2.26.1.177:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:25", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-30 17:43:56", "1840350", "185.117.90.47:3000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:45", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-30 17:43:47", "1840348", "173.249.41.192:773", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:44:30", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-30 17:43:45", "1840347", "172.94.18.103:69", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:27", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-30 09:54:11", "1840271", "152.32.132.177:8899", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 07:32:46", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-06-30 09:43:50", "1840265", "170.64.130.99:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:19", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-30 09:43:27", "1840262", "141.94.121.162:6666", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:42", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-30 09:43:24", "1840261", "136.113.49.8:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:37", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-30 05:05:05", "1840203", "130.12.182.95:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:34", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-06-29 19:45:30", "1840153", "81.90.31.253:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:54", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-29 19:05:06", "1840094", "104.251.181.73:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:43:17", "100", "True", "None", "havoc", "1", "anonymous"
"2026-06-29 11:46:48", "1839241", "209.200.246.194:35885", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:54", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-29 11:46:18", "1839238", "updatesrv.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:25", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-29 11:46:18", "1839239", "web-analyzer-serv32.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:25", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-29 09:45:31", "1839220", "45.92.158.150:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:26", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-29 09:45:08", "1839218", "27.102.137.139:14645", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:46:48", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-29 09:44:44", "1839207", "https://167.233.207.52/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 11:40:27", "100", "False", "", "Vidar", "0", "crep1x"
"2026-06-29 09:44:44", "1839208", "https://167.233.193.229/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 04:50:47", "100", "False", "", "Vidar", "0", "crep1x"
"2026-06-29 09:44:42", "1839196", "https://steamcommunity.com/profiles/76561198680197300", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 11:11:31", "100", "False", "", "Vidar", "0", "crep1x"
"2026-06-29 09:44:42", "1839197", "https://telegram.me/af97ri", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 11:11:30", "100", "False", "", "Vidar", "0", "crep1x"
"2026-06-28 19:45:13", "1838803", "54.180.147.42:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:36", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-28 19:45:00", "1838800", "45.94.23.42:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:26", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-28 19:44:54", "1838799", "45.150.38.95:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-28 19:05:05", "1838789", "104.248.201.191:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:28", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-28 09:45:16", "1838757", "45.74.7.173:9521", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:23", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-28 09:43:55", "1838755", "185.212.128.231:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-28 09:43:21", "1838751", "141.98.10.150:14648", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:43", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-28 09:43:09", "1838750", "103.83.87.87:25900", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:11", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-27 19:45:43", "1838674", "80.211.129.141:1234", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:53", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-27 19:45:22", "1838668", "45.74.7.170:3305", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:22", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-27 19:45:21", "1838666", "45.74.7.165:8455", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:22", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-27 19:45:21", "1838667", "45.74.7.169:7312", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:22", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-27 19:45:17", "1838665", "45.141.234.47:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:12", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-27 19:43:58", "1838663", "185.212.128.139:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:48", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-27 19:43:32", "1838660", "155.94.163.75:8797", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:56", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-27 19:43:20", "1838659", "138.124.84.7:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-27 19:43:12", "1838656", "107.173.160.177:2850", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:43:18", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-27 15:46:40", "1838629", "47.86.184.71:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-27 15:46:01", "1838628", "test.officeplustool.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:24", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-27 08:05:05", "1838555", "188.212.158.4:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:59", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-06-27 07:05:05", "1838532", "8.152.212.104:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:12", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-27 06:24:31", "1838478", "47.108.60.27:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:04", "50", "False", "None", "37963,c2,censys,cobalt strike", "0", "sojubear"
"2026-06-27 03:05:08", "1838492", "20.69.167.4:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:45:34", "100", "True", "None", "havoc", "1", "anonymous"
"2026-06-26 19:45:25", "1838183", "82.165.79.60:1336", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:47:55", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-06-26 12:25:15", "1838123", "https://k1h.hopesm188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:23:44", "75", "False", "None", "k5yss1,Vidar", "0", "abuse_ch"
"2026-06-26 12:25:15", "1838124", "k1h.hopesm188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:23:44", "75", "False", "None", "k5yss1,Vidar", "0", "abuse_ch"
"2026-06-26 07:18:38", "1837880", "122.51.221.207:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:38", "50", "False", "None", "45090,c2,censys,cobalt strike", "0", "sojubear"
"2026-06-25 19:45:00", "1837840", "217.60.97.3:8899", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:42", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-25 18:54:02", "1837476", "45.192.211.64:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:16", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:54:02", "1837477", "45.192.211.64:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:16", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:54:02", "1837478", "45.192.211.64:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:16", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:53:44", "1837499", "216.107.139.88:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:45:51", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:53:44", "1837500", "94.26.3.104:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:16", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:53:43", "1837501", "94.26.3.104:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:16", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:53:43", "1837502", "94.26.3.104:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:48:16", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 15:17:46", "1837441", "45.192.211.59:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:15", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 15:17:45", "1837442", "45.192.211.59:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:15", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 15:17:44", "1837443", "45.192.211.59:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:15", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 09:45:43", "1837293", "45.74.7.166:1377", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:22", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-25 09:43:11", "1837286", "104.250.167.40:9093", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:16", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-25 08:21:13", "1837265", "45.192.211.63:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:15", "75", "False", "", "PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-06-25 08:08:03", "1837243", "169.239.128.43:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:46", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-06-25 05:28:28", "1837197", "196.251.121.90:421", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-24 19:45:18", "1837088", "45.74.7.163:6448", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:22", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-24 19:45:18", "1837089", "45.74.7.164:6913", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:22", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-24 19:45:17", "1837087", "45.74.7.155:1202", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:21", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-24 19:43:22", "1837080", "146.190.80.105:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:43:46", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-06-24 09:45:56", "1836784", "95.81.79.153:8443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-24 09:45:24", "1836783", "45.74.7.160:9405", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:22", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-24 09:43:30", "1836775", "154.219.98.36:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-10 08:43:44", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-06-24 09:43:30", "1836776", "154.219.98.36:8080", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-10 08:43:44", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-06-24 09:43:23", "1836774", "141.98.10.150:14647", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-10 08:43:35", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-24 09:43:12", "1836771", "107.172.140.187:32333", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-24 07:46:37", "1836745", "45.192.211.77:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:47:17", "75", "False", "https://bazaar.abuse.ch/sample/d025a29613e300d7755f878eb1d23d8a8a042cb2d3eb9005d66664ab9b97c677/", "PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-06-24 03:45:54", "1836703", "www.rmsmarineservice.com.qwqqwq.ggff.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:26", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-23 19:44:02", "1836665", "188.23.173.69:8000", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:44:59", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-06-23 19:43:29", "1836662", "156.239.47.147:4221", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:56", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-23 07:14:51", "1836278", "111.231.173.74:4444", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:31", "100", "False", "None", "CobaltStrike", "0", "abuse_ch"
"2026-06-22 23:46:20", "1836201", "62.234.22.228:51123", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-22 09:43:56", "1835561", "185.212.128.215:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-22 09:43:03", "1835556", "102.220.160.250:7829", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-22 07:21:35", "1835399", "thisisafalsepositive.st", "domain", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 03:08:34", "100", "False", "https://bazaar.abuse.ch/sample/54a62444672de4d11e9a3ebd67289f1afc4401d7f7631ac02e404c7d0ca257ca/", "c2,SilentNet", "0", "burger"
"2026-06-22 07:05:53", "1835400", "216.250.250.247:4521", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:37", "75", "False", "https://bazaar.abuse.ch/sample/8c63a57313ad2479a758ca018134377043acbeade2b457f7f3392364b78a4a32/", "asyncrat", "0", "abuse_ch"
"2026-06-22 07:00:14", "1835392", "196.251.121.90:422", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-22 07:00:14", "1835393", "217.60.241.17:422", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-22 07:00:14", "1835395", "217.60.241.14:422", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-22 07:00:10", "1835384", "217.60.241.14:421", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-21 09:45:40", "1834771", "89.42.134.220:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:48:07", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-21 09:45:23", "1834770", "51.79.51.255:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-20 19:43:02", "1834540", "102.220.160.217:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-09 18:43:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-20 09:45:43", "1834279", "5.188.61.49:44443", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:47:32", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-06-20 09:45:31", "1834277", "45.32.64.12:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-20 09:45:10", "1834275", "217.60.195.176:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:46:39", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-19 23:46:13", "1834187", "23.141.12.111:8899", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:55", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-19 19:45:40", "1834170", "97.74.92.237:63334", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-19 19:44:17", "1834168", "211.235.43.192:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-19 19:44:13", "1834167", "205.209.106.158:5228", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:38", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-19 15:46:26", "1834132", "47.242.0.207:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-19 15:46:26", "1834133", "47.242.0.207:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-19 15:45:55", "1834131", "114.134.187.38:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:32", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-19 11:46:35", "1834098", "185.92.190.214:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:49", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-19 11:46:35", "1834099", "185.92.190.216:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:50", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-19 09:45:43", "1834063", "77.110.119.172:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:50", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-19 09:43:18", "1834053", "138.2.120.11:61234", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-19 09:43:05", "1834051", "103.153.254.32:6933", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:07", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-19 09:43:03", "1834050", "102.220.160.217:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-09 18:43:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-19 05:57:11", "1833837", "165.227.123.79:6504", "ip:port", "botnet_cc", "js.iclickfix", "None", "IClickFix", "2026-08-11 13:15:31", "75", "False", "", "AddType,ClickFix,DigitalOcean,FakeCAPTCHA,mtls,nginx,one-check.lol,PowerShell,TLS1.3", "0", "init_0"
"2026-06-18 19:43:17", "1833854", "141.98.10.150:14643", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:42", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-18 19:43:17", "1833856", "141.98.10.150:14645", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:43", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-18 19:43:11", "1833852", "115.190.108.6:54233", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-08-11 12:43:25", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-06-18 19:43:03", "1833848", "102.220.160.217:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-09 18:43:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-18 09:44:25", "1833744", "209.99.191.33:440", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:47", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-18 07:23:02", "1833660", "panelmienbac.com", "domain", "payload_delivery", "unknown_stealer", "None", "Unknown Stealer", "2026-08-11 11:03:07", "100", "True", "", "ClickFix,CloudflareHardwareFingerprinting", "0", "varysz"
"2026-06-17 23:45:31", "1833622", "106.13.189.138:56000", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:29", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-17 19:43:49", "1833598", "185.212.128.176:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:48", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-17 19:43:04", "1833593", "103.110.80.154:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-10 08:43:04", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-17 17:00:15", "1833500", "20.39.60.137:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:45:33", "100", "True", "None", "havoc", "1", "anonymous"
"2026-06-17 12:00:22", "1833440", "147.93.191.75:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:48", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-06-17 11:46:36", "1833435", "185.92.190.217:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:50", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-17 09:43:10", "1833392", "103.53.80.201:1235", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-16 23:46:00", "1833008", "212.14.244.222:807", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:54", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-16 23:46:00", "1833009", "212.14.244.222:809", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:54", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-16 19:43:12", "1832762", "119.59.118.75:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:28", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-16 11:00:15", "1832647", "39.106.205.6:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:57", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-16 09:45:48", "1832633", "91.132.161.21:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:07", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-16 09:44:09", "1832629", "2.26.229.254:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:26", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-16 09:43:15", "1832615", "136.111.38.101:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:37", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-16 09:43:15", "1832616", "136.111.38.101:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:37", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-16 09:43:12", "1832612", "118.107.5.209:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:28", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-15 15:46:19", "1832399", "23.95.170.223:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:55", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-15 15:45:49", "1832398", "cs.tpedu2metricstw.dpdns.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:20", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-15 14:00:16", "1832378", "79.175.189.207:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:11", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-15 09:45:54", "1832323", "89.42.134.220:1803", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:48:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-15 09:45:46", "1832320", "8.210.84.56:8000", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:52", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-15 09:44:22", "1832317", "213.193.20.192:9281", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:50", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-15 09:43:17", "1832313", "131.143.251.246:53921", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-15 06:24:08", "1832255", "https://204.168.163.225/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 12:23:06", "100", "False", "", "Vidar", "0", "crep1x"
"2026-06-15 06:24:08", "1832256", "https://178.104.208.168/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 12:23:08", "100", "False", "", "Vidar", "0", "crep1x"
"2026-06-14 19:45:30", "1832163", "89.42.134.220:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:48:07", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-14 19:44:54", "1832158", "43.133.164.200:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:06", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-14 11:45:50", "1832074", "23.254.129.251:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-10 08:47:34", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-14 11:45:27", "1832072", "sys.systemworld.info", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-10 08:47:12", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-14 09:45:07", "1831995", "64.225.102.218:31400", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:47:43", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-14 09:44:35", "1831992", "23.235.185.42:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:46:44", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-14 09:43:43", "1831987", "185.207.154.11:4848", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:47", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-13 19:45:34", "1831842", "85.121.176.239:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:58", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-13 09:46:08", "1831732", "89.42.134.220:1991", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:48:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-13 09:45:15", "1831727", "23.235.185.44:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:46:45", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-13 09:44:06", "1831725", "185.212.129.185:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-10 08:44:24", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-13 09:43:18", "1831722", "130.185.82.117:5641", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-13 09:43:12", "1831720", "108.181.115.254:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:43:20", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-06-13 09:43:12", "1831721", "108.181.115.254:7045", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:43:20", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-06-13 09:43:02", "1831717", "101.33.202.134:9989", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:03", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-12 09:45:24", "1830851", "78.141.208.70:46337", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:51", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-12 09:45:21", "1830849", "64.89.162.178:5903", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:45", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-12 09:44:45", "1830843", "31.57.184.154:7008", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:53", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-12 09:43:11", "1830834", "114.132.238.70:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:25", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-12 09:43:10", "1830833", "110.42.34.220:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-12 08:24:41", "1830673", "https://178.105.226.167/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 12:23:10", "100", "False", "", "Vidar", "0", "crep1x"
"2026-06-12 08:24:40", "1830666", "https://167.233.40.16/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 11:40:25", "100", "False", "", "Vidar", "0", "crep1x"
"2026-06-11 21:00:15", "1830416", "49.233.136.227:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:09", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-11 19:44:35", "1830392", "23.235.185.45:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:46:45", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-11 19:44:35", "1830393", "23.235.185.46:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:46:45", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-11 19:44:02", "1830390", "209.99.188.193:43221", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:45", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-11 19:43:50", "1830387", "192.3.139.18:15221", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-11 12:46:30", "1830291", "159.89.48.54:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:08", "50", "False", "https://www.shodan.io/host/159.89.48.54#7443", "c2,mythic,shodan", "0", "juroots"
"2026-06-11 12:42:24", "1830206", "117.72.159.215:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:33", "50", "False", "https://www.shodan.io/host/117.72.159.215#8080", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2026-06-11 09:44:07", "1830053", "206.81.21.156:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-11 06:43:05", "1830007", "45.87.53.6:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:01", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-06-11 06:43:04", "1830006", "120.55.3.157:10000", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:37", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-06-11 06:42:48", "1830004", "43.136.180.88:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:58", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-06-11 06:42:47", "1830002", "43.136.180.88:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:58", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-06-11 06:42:47", "1830003", "47.121.181.148:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:05", "100", "False", "None", "CobaltStrike,cs-watermark-666666", "0", "abuse_ch"
"2026-06-11 06:42:46", "1830001", "124.220.41.22:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:39", "100", "False", "None", "CobaltStrike,cs-watermark-100000", "0", "abuse_ch"
"2026-06-11 05:26:05", "1829957", "192.144.213.21:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:51", "50", "False", "None", "45090,c2,censys,cobalt strike", "0", "sojubear"
"2026-06-10 19:45:10", "1829907", "64.89.162.178:5902", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:45", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-10 19:44:35", "1829903", "23.235.185.43:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:46:45", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-10 19:44:33", "1829902", "216.158.235.73:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:46:36", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-10 19:43:51", "1829899", "193.135.137.240:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:10", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-10 19:43:34", "1829893", "172.94.18.103:71", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:28", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-10 19:43:32", "1829892", "170.39.185.141:2030", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:18", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-10 11:45:53", "1829779", "185.92.190.214:5896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:49", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-10 11:45:53", "1829780", "185.92.190.215:5896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:50", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-10 11:45:53", "1829781", "185.92.190.215:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:50", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-10 11:45:53", "1829782", "185.92.190.216:5896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:50", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-10 11:45:53", "1829783", "185.92.190.217:5896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:50", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-10 11:45:52", "1829777", "185.92.190.213:5896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:49", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-10 11:45:52", "1829778", "185.92.190.213:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:49", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-10 09:45:40", "1825867", "64.89.162.117:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:45", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-10 09:44:00", "1825853", "192.208.12.91:3000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:45:05", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-10 09:43:35", "1825850", "163.245.217.48:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:12", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-10 07:18:53", "1825788", "34.92.128.98:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:56", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-06-10 06:44:39", "1825759", "195.222.53.130:5200", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-08-11 13:01:07", "75", "False", "https://bazaar.abuse.ch/sample/438ddb05451660c60d9843e3a32faca34a448071c716083c96cc97c781878563/", "remus", "0", "abuse_ch"
"2026-06-10 06:00:25", "1825703", "8.163.59.20:8008", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:13", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-10 03:45:38", "1825678", "218.244.142.4:8889", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:55", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-09 21:45:51", "1825631", "198.46.199.110:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:52", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-09 20:00:17", "1825614", "45.87.53.6:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 07:32:25", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-09 19:44:51", "1825613", "46.151.182.16:1011", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:27", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-08 19:43:23", "1825226", "155.103.70.100:13407", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:54", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-08 09:51:50", "1824944", "https://telegram.me/d77xtr", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 11:41:55", "100", "False", "", "Vidar", "0", "crep1x"
"2026-06-08 09:51:49", "1824943", "https://steamcommunity.com/profiles/76561198694566254", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 11:41:55", "100", "False", "", "Vidar", "0", "crep1x"
"2026-06-08 09:43:22", "1824909", "155.103.70.100:13408", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:55", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-07 23:45:14", "1824508", "209.200.246.194:17568", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:53", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-07 19:45:00", "1824433", "82.156.224.184:8080", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:47:54", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-06-07 19:43:30", "1824426", "172.189.57.198:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:44:20", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-06-07 09:45:24", "1824259", "60.191.87.107:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:47:40", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-06-07 09:44:50", "1824255", "31.57.184.154:2505", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:52", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-07 09:44:10", "1824254", "209.99.188.193:4323", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:45", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-07 09:43:26", "1824251", "154.94.232.165:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:54", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-07 09:43:16", "1824247", "137.184.163.27:5613", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:38", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-06 19:44:30", "1824130", "46.151.182.243:55380", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-06 11:45:14", "1824029", "154.12.86.154:55555", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:43", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-06 11:45:14", "1824030", "154.12.86.154:8889", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:43", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-06 11:45:14", "1824031", "154.12.86.154:9004", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:43", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-06 10:32:30", "1824012", "47.101.51.235:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:03", "100", "False", "None", "CobaltStrike,cs-watermark-666666", "0", "abuse_ch"
"2026-06-06 05:24:31", "1823853", "https://pas.sm188star.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:22:25", "75", "False", "None", "ar3k0,Vidar", "0", "abuse_ch"
"2026-06-06 05:24:31", "1823854", "pas.sm188star.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:22:25", "75", "False", "None", "ar3k0,Vidar", "0", "abuse_ch"
"2026-06-05 09:43:29", "1822764", "158.247.194.144:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:44:05", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-06-04 23:45:28", "1822600", "34.202.161.96:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:56", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-04 23:45:07", "1822599", "updates.fisgloval.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:25", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-04 19:43:27", "1822526", "163.172.174.237:443", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-08-11 12:44:12", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-06-04 19:43:27", "1822527", "163.172.174.237:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-08-11 12:44:12", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-06-04 14:50:35", "1822415", "120.26.208.96:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:36", "50", "False", "", "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon", "0", "whoamix302"
"2026-06-04 11:46:46", "1822346", "154.12.86.154:44444", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:43", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-04 09:45:35", "1822301", "82.23.246.160:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-04 09:43:29", "1822296", "156.247.40.190:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:57", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-04 09:43:28", "1822295", "155.103.70.198:13408", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:55", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-03 19:43:33", "1822011", "168.144.36.228:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:16", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-03 15:24:07", "1821798", "13.236.153.60:8888", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:32", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-06-03 15:23:52", "1821844", "47.82.234.12:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:07", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-03 14:36:55", "1821877", "4.240.85.243:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:05", "50", "False", "https://www.shodan.io/host/4.240.85.243#7443", "c2,mythic,shodan", "0", "juroots"
"2026-06-03 09:45:37", "1821716", "82.23.246.160:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-03 09:43:30", "1821713", "156.247.40.190:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:57", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-02 19:45:08", "1821517", "45.198.224.19:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-02 19:43:27", "1821514", "155.103.70.198:13407", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:43:55", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-06-02 14:06:11", "1821233", "172.236.10.250:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-10 18:44:07", "50", "False", "https://www.shodan.io/host/172.236.10.250#443", "c2,havoc,shodan", "0", "juroots"
"2026-06-02 14:05:08", "1821227", "198.13.51.245:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:22", "50", "False", "https://www.shodan.io/host/198.13.51.245#4321", "adaptixc2,c2,shodan", "0", "juroots"
"2026-06-02 14:04:12", "1821221", "34.61.52.162:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:56", "50", "False", "https://www.shodan.io/host/34.61.52.162#443", "c2,mythic,shodan", "0", "juroots"
"2026-06-01 20:49:16", "1820727", "23.235.185.46:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:46:46", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-06-01 20:49:15", "1820729", "23.235.185.43:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:46:45", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-06-01 20:49:15", "1820730", "23.235.185.42:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:46:45", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-06-01 19:43:43", "1820723", "178.16.54.48:443", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:44:38", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-06-01 19:43:42", "1820722", "178.16.52.47:443", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:44:35", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-06-01 06:44:52", "1820506", "165.22.225.218:5443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:46", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-05-31 21:46:19", "1820398", "154.38.114.115:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:44", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-31 21:45:54", "1820397", "ds.metric-take-datadqct.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:21", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-31 15:04:22", "1820327", "64.89.160.44:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:44", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-05-31 09:45:39", "1820291", "64.176.73.125:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:47:42", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-05-31 09:44:59", "1820290", "31.57.184.154:2503", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:52", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-31 06:48:28", "1820214", "64.89.160.44:1000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:44", "50", "False", "None", "205759,asyncrat,c2,censys", "0", "sojubear"
"2026-05-30 15:14:02", "1820025", "45.153.34.212:8181", "ip:port", "payload_delivery", "elf.mirai", "Katana", "Mirai", "2026-08-10 12:48:10", "80", "False", "https://twitter.com/NullBlue67", "docker-api,dropper,elf,Mirai", "0", "nullblue67"
"2026-05-30 09:45:23", "1820043", "38.54.63.135:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:04", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-30 09:43:14", "1820039", "114.132.190.121:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:25", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-30 07:04:38", "1819982", "40.85.252.198:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:47:05", "100", "True", "None", "havoc", "1", "anonymous"
"2026-05-29 19:45:46", "1819907", "49.233.81.84:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:31", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-29 19:45:33", "1819906", "43.140.219.30:7112", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 12:47:07", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-29 19:45:20", "1819904", "27.102.137.139:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:46:48", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-05-29 19:45:19", "1819903", "23.235.185.44:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:46:45", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-05-29 19:44:12", "1819901", "192.162.199.25:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:01", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-29 19:43:42", "1819895", "162.248.224.236:7492", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:10", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-29 19:43:42", "1819896", "162.248.225.165:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:11", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-29 19:43:42", "1819897", "162.248.225.165:8603", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:11", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-29 19:43:41", "1819894", "162.248.224.236:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:10", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-29 19:43:36", "1819893", "157.20.182.17:1444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:59", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-29 15:46:36", "1819866", "124.220.235.4:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:38", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-29 15:30:50", "1819842", "mub.depansm188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:22:04", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-29 15:30:50", "1819843", "https://mub.depansm188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:22:04", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-29 11:46:33", "1819786", "118.89.79.131:6528", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:35", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-29 09:43:47", "1819753", "168.144.36.228:9000", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:44:17", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-05-28 19:44:44", "1819593", "31.57.184.154:7005", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:53", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-28 19:43:28", "1819587", "157.20.182.18:1444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-28 19:43:13", "1819586", "13.209.95.4:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:31", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-28 09:46:09", "1819406", "91.215.85.212:45423", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-28 09:46:05", "1819405", "85.209.90.132:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:59", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-28 09:45:23", "1819402", "43.133.165.151:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:06", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-28 09:45:10", "1819401", "27.102.138.15:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-10 18:45:53", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-28 09:44:19", "1819396", "202.95.8.97:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-28 09:44:19", "1819397", "202.95.8.98:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-28 09:44:10", "1819394", "193.5.65.169:4348", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:45:13", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-28 09:44:10", "1819395", "193.5.65.169:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:45:13", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-28 09:43:13", "1819387", "113.31.106.85:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:24", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-27 19:45:55", "1819225", "91.200.84.198:8515", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:08", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-27 19:45:18", "1819224", "45.32.236.190:2096", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-27 19:45:12", "1819222", "43.106.14.139:8085", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:47:06", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-05-27 19:43:47", "1819220", "18.162.155.202:3350", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:44:41", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-27 19:43:09", "1819218", "104.243.248.63:1807", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-10 08:43:13", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-27 15:46:43", "1819146", "8.134.70.73:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-27 07:09:22", "1818956", "8.163.49.50:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:13", "50", "False", "None", "c2,censys,cobalt strike", "0", "sojubear"
"2026-05-26 19:43:28", "1818872", "155.102.136.60:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:43:54", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-26 11:29:33", "1818748", "chekbrow.beer", "domain", "payload_delivery", "unknown_webinject", "None", "Unknown Webinject", "2026-08-10 07:22:00", "100", "False", "", "ErrTraffic", "0", "Gi7w0rm"
"2026-05-26 09:44:02", "1818696", "193.24.123.160:45631", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:12", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-26 09:43:28", "1818694", "153.75.232.207:4000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:43:52", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-26 08:35:01", "1818605", "103.17.38.43:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-11 12:43:07", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-05-25 22:46:18", "1818480", "47.108.25.113:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:04", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-25 19:44:52", "1818434", "37.77.150.174:4333", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:47:00", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-05-25 19:44:51", "1818433", "37.77.150.174:4332", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:47:00", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-05-25 19:44:46", "1818432", "27.102.137.139:1243", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:46:48", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-05-25 19:44:05", "1818431", "202.95.8.92:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-25 19:43:27", "1818426", "157.20.182.17:1998", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-10 08:43:49", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-25 14:01:54", "1818351", "157.20.182.17:4443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:59", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-05-25 14:00:07", "1818346", "45.153.127.224:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 12:47:13", "50", "False", "https://tracker.viriback.com/index.php?q=45.153.127.224", "Chaos,ViriBack", "0", "abuse_ch"
"2026-05-25 06:57:09", "1818253", "134.175.78.181:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:40", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-05-24 19:45:21", "1818107", "31.171.131.118:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-24 19:43:36", "1818104", "157.20.182.18:9992", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-24 19:43:35", "1818103", "157.20.182.17:9992", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:59", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-24 14:46:49", "1818053", "45.154.12.150:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-24 14:46:17", "1818052", "103.210.236.87:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:28", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-24 14:46:12", "1818050", "wsus.227api.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:25", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-24 14:46:12", "1818051", "wsus2.227api.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:25", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-24 11:05:15", "1817829", "172.94.18.103:75", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:28", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-05-24 11:04:56", "1817873", "172.94.18.103:73", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:28", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-05-23 22:00:09", "1817758", "https://cyy.turbo88ml.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:21:39", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-23 22:00:08", "1817757", "cyy.turbo88ml.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:21:39", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-23 19:43:35", "1817704", "151.236.20.3:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:51", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-23 14:56:56", "1817663", "101.126.10.34:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:26", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-05-23 14:56:33", "1817658", "102.204.223.106:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:27", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-05-23 14:54:01", "1817632", "203.83.10.114:4444", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:52", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-05-22 19:45:35", "1817427", "88.119.167.142:8000", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:03", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-22 11:36:04", "1817206", "46.20.109.225:8999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:01", "75", "False", "", "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon", "0", "whoamix302"
"2026-05-22 09:45:23", "1817239", "88.119.167.143:8000", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:03", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-22 09:45:08", "1817238", "54.187.35.128:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:36", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-22 09:44:53", "1817236", "45.90.120.36:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:26", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-22 09:44:40", "1817235", "31.57.184.154:7006", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:53", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-22 09:44:39", "1817233", "31.171.131.118:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-22 09:44:39", "1817234", "31.171.131.118:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-22 08:11:29", "1817159", "143.14.9.56:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:44", "90", "False", "None", "adaptix_v1.2,adaptixc2,c2,panel", "0", "Lenny_3BO"
"2026-05-21 19:45:07", "1817054", "34.61.52.162:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:56", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-21 05:00:06", "1816725", "165.232.93.148:25001", "ip:port", "botnet_cc", "apk.kimwolf", "None", "Kimwolf", "2026-08-11 13:20:52", "100", "False", "None", "c2,Kimwolf", "0", "Bitsight"
"2026-05-20 19:44:41", "1816738", "41.216.189.163:43210", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:06", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-20 19:44:32", "1816737", "221.207.101.175:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:46:43", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-20 19:43:30", "1816735", "167.17.47.118:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:14", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-20 09:45:05", "1816585", "51.15.8.6:9998", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:47:34", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-05-20 09:43:56", "1816583", "202.1.31.83:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-20 09:43:39", "1816581", "178.212.13.29:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:39", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-20 05:25:02", "1816481", "114.134.187.38:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:31", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-05-19 20:46:09", "1816445", "43.142.137.169:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-19 19:45:18", "1816431", "91.202.233.214:44123", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:08", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-19 19:44:36", "1816427", "31.57.184.154:2502", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:52", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-19 09:43:37", "1816296", "176.120.22.127:443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-08-11 12:44:32", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-05-19 09:43:19", "1816294", "142.93.165.129:3334", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:43:43", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-19 05:16:15", "1816172", "47.82.234.12:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:08", "50", "False", "None", "c2,censys,cobalt strike", "0", "sojubear"
"2026-05-19 05:16:08", "1816167", "48.202.58.22:2055", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:30", "50", "False", "None", "8075,asyncrat,c2,censys", "0", "sojubear"
"2026-05-18 19:45:01", "1816106", "89.125.255.29:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:05", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-18 19:44:31", "1816100", "38.147.189.199:9001", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:47:01", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-05-18 19:43:13", "1816096", "138.124.90.26:51337", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-18 18:05:44", "1816037", "207.180.250.181:10001", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-10 08:44:53", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-05-18 09:43:30", "1815927", "163.181.46.56:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:44:12", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-18 08:09:23", "1815861", "217.60.241.17:421", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-05-18 07:33:49", "1815818", "47.236.91.172:8000", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:07", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-05-18 07:33:37", "1815773", "194.163.154.86:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-10 08:44:37", "100", "True", "None", "havoc", "1", "anonymous"
"2026-05-17 22:45:31", "1815762", "119.29.112.239:8005", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:36", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-16 19:45:35", "1815397", "45.155.69.153:43345", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:14", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-16 19:43:06", "1815392", "103.219.153.200:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-16 19:43:06", "1815393", "103.219.153.200:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-16 19:43:05", "1815391", "103.219.153.200:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-15 19:44:50", "1815137", "95.231.168.143:4483", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:48:16", "75", "False", "None", "drb-ra,NetSupport,RAT", "0", "abuse_ch"
"2026-05-15 19:44:19", "1815133", "34.69.130.10:80", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 12:46:57", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-15 16:00:12", "1815073", "pgo.fatherchrismas.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:21:16", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-15 16:00:12", "1815074", "https://pgo.fatherchrismas.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:21:16", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-14 19:43:12", "1812280", "104.243.248.63:1806", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-14 12:34:22", "1812073", "87.120.107.68:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:48:01", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-05-14 09:51:34", "1812126", "84.46.251.62:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:57", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-13 19:44:54", "1811945", "43.230.162.44:14321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:10", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-12 11:45:38", "1811412", "117.72.168.103:50011", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:33", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-12 09:45:14", "1811399", "85.158.57.247:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:58", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-12 09:43:06", "1811385", "104.243.248.63:1803", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-11 23:00:12", "1811187", "mpd.pegasus-77.biz.id", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:20:54", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-11 23:00:12", "1811188", "https://mpd.pegasus-77.biz.id/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:20:54", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-11 22:45:16", "1811186", "117.50.184.221:10080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:33", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-11 19:45:07", "1811129", "64.199.252.59:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:47:42", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-11 19:45:01", "1811128", "51.77.54.76:6769", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-11 19:44:49", "1811126", "45.77.89.29:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:24", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-11 19:43:08", "1811118", "109.73.193.242:10140", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-11 09:45:15", "1810965", "89.42.134.220:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:48:07", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-11 09:44:29", "1810959", "31.57.184.154:7007", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:53", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-11 09:43:46", "1810958", "20.114.142.61:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:31", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-11 09:43:35", "1810955", "185.242.245.27:44875", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:53", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-11 09:43:20", "1810950", "158.94.210.70:22532", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 08:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-10 19:44:31", "1810414", "31.57.184.154:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:52", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-10 19:43:45", "1810410", "195.123.240.236:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:45:17", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-10 19:43:45", "1810411", "195.123.240.236:8274", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:45:17", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-10 19:43:39", "1810408", "189.34.188.6:5406", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:00", "75", "False", "None", "drb-ra,NetSupport,RAT", "0", "abuse_ch"
"2026-05-10 19:43:39", "1810409", "189.34.188.6:5407", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:00", "75", "False", "None", "drb-ra,NetSupport,RAT", "0", "abuse_ch"
"2026-05-10 09:44:56", "1810170", "57.158.27.132:8080", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:47:39", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-05-09 19:43:46", "1809754", "213.130.25.141:44333", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:49", "75", "False", "None", "drb-ra,NetSupport,RAT", "0", "abuse_ch"
"2026-05-09 19:43:24", "1809750", "168.144.89.48:8443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-08 19:43:41", "1809039", "209.38.100.109:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:44", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-08 19:43:36", "1809038", "193.42.24.165:4848", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-08 19:43:28", "1809033", "180.97.214.70:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:44:42", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-08 19:43:19", "1809029", "160.25.82.142:80", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:44:08", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-05-08 08:43:45", "1808650", "45.56.91.55:2005", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:19", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-05-08 08:43:42", "1808648", "31.57.216.62:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:46:54", "75", "False", "None", "drb-ra,RAT,RemcosRAT", "0", "abuse_ch"
"2026-05-08 08:43:21", "1808643", "209.38.110.161:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:45", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-08 08:43:13", "1808637", "178.104.186.90:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-08 08:43:05", "1808628", "113.31.118.180:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:24", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-08 08:43:04", "1808623", "104.243.248.63:1802", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-07 20:44:32", "1808286", "101.33.225.32:8011", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:27", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-06 20:53:22", "1807868", "27.102.137.139:443", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:46:48", "75", "False", "", "Remcos,RemcosRAT,Remvio,Socmer", "0", "whoamix302"
"2026-05-06 20:45:39", "1807906", "45.207.192.190:30078", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-06 20:45:09", "1807904", "117.72.168.103:16337", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:33", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-06 18:43:14", "1807842", "154.18.238.18:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:52", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-05-06 08:43:54", "1807538", "31.57.184.154:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:53", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-05 08:44:56", "1806901", "172.245.156.179:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:46", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-04 20:45:07", "1806229", "8.130.80.145:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-04 20:44:43", "1806228", "154.219.115.123:61443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:43", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-04 20:44:36", "1806227", "119.29.198.193:8555", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:36", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-04 08:44:13", "1805766", "82.165.79.60:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:47:56", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-05-04 08:44:12", "1805765", "82.165.79.60:1337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:47:56", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-05-04 08:43:16", "1805757", "163.181.45.55:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:44:12", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-03 12:44:29", "1805268", "151.245.90.45:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:42", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-03 12:44:08", "1805267", "ap.johamp.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:18", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-02 20:44:31", "1804968", "203.160.54.22:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:52", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-02 20:44:06", "1804965", "h67as5d5x.m6p3wca1.cc", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:21", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-02 18:43:44", "1804928", "38.147.173.24:8562", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:00", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-02 14:44:30", "1804853", "47.101.172.178:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-02 08:43:53", "1804732", "8.160.216.91:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:47:52", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-02 08:43:06", "1804719", "124.95.172.200:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:43:30", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-02 05:24:17", "1803956", "https://arsimonopa.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:23:27", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-05-02 05:24:15", "1803960", "https://lemonimonakio.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:33:31", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-05-01 18:43:58", "1803896", "89.114.115.200:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 12:48:04", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 18:43:53", "1803894", "59.152.212.164:443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-11 12:47:40", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-05-01 18:43:45", "1803881", "45.10.164.177:45123", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:10", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-01 18:43:41", "1803874", "31.57.184.154:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:52", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 18:43:24", "1803866", "195.88.191.41:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:45:20", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-01 18:43:24", "1803867", "195.88.191.41:7666", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:45:21", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-01 18:43:19", "1803858", "185.212.128.80:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-01 18:43:03", "1803841", "103.79.79.105:9001", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:43:10", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-05-01 14:44:50", "1803693", "8.222.192.153:8000", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:47:52", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-01 14:44:44", "1803689", "47.236.91.172:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-01 14:30:24", "1803670", "frr.ambil-disini.web.id", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:20:29", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-01 14:30:24", "1803671", "https://frr.ambil-disini.web.id/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:20:29", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-01 08:43:48", "1803513", "64.89.163.114:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:45", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 08:43:44", "1803500", "47.103.106.26:2333", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:29", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 08:43:16", "1803473", "178.128.252.142:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:35", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-01 08:43:05", "1803448", "111.229.144.163:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:22", "75", "False", "None", "drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 07:08:49", "1803387", "203.160.54.22:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:52", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-05-01 02:43:32", "1803286", "94.176.3.228:48765", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:15", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:32", "1803291", "98.97.125.70:8883", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-08-11 12:48:17", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:31", "1803279", "91.202.233.153:43555", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:08", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:31", "1803280", "91.215.85.151:47653", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:48:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:30", "1803276", "85.155.186.2:3821", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:58", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:28", "1803262", "79.135.160.20:9999", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:51", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:27", "1803257", "66.163.115.78:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:46", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:26", "1803254", "62.81.188.1:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-08-11 12:47:41", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:26", "1803255", "66.163.115.78:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:46", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:26", "1803256", "66.163.115.78:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:46", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:25", "1803246", "46.101.77.223:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:47:26", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-01 02:43:24", "1803239", "45.155.69.175:42455", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:14", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:24", "1803240", "45.56.91.55:2003", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:19", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:24", "1803244", "45.81.243.52:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:24", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:23", "1803235", "45.125.67.171:8443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:11", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:23", "1803238", "45.155.69.106:42211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:22", "1803231", "43.134.133.177:8445", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-11 12:47:06", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:22", "1803232", "43.142.77.170:443", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 12:47:08", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:22", "1803233", "43.142.77.170:80", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 12:47:08", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:22", "1803234", "43.160.225.40:39001", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:08", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:20", "1803218", "222.255.100.119:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 12:46:43", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:20", "1803219", "23.227.203.6:42235", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:44", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:20", "1803222", "31.57.184.154:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:53", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:19", "1803211", "216.107.208.250:10444", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-11 12:45:51", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:19", "1803215", "219.142.15.101:4353", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-08-11 12:46:42", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:19", "1803216", "220.231.47.163:4353", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-08-11 12:46:42", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:19", "1803217", "221.130.42.19:4353", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-08-11 12:46:43", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:18", "1803205", "208.249.244.20:443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-11 12:45:43", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:18", "1803206", "209.151.145.164:8443", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:45:44", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:17", "1803202", "202.95.17.188:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:17", "1803203", "206.189.40.107:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:45:39", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-05-01 02:43:14", "1803180", "185.242.3.83:9909", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:54", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:14", "1803181", "185.247.224.40:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:55", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:13", "1803173", "185.212.128.81:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-01 02:43:13", "1803174", "185.212.129.23:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:50", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-01 02:43:13", "1803176", "185.212.129.29:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:51", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-01 02:43:13", "1803177", "185.212.129.30:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-11 12:44:51", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-01 02:43:13", "1803178", "185.213.20.250:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:52", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:13", "1803179", "185.242.245.120:42534", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:53", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:12", "1803166", "180.184.29.135:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:42", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:12", "1803167", "182.255.45.114:4848", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:43", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:11", "1803162", "178.16.52.22:8396", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:09", "1803152", "172.111.162.252:3030", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:09", "1803153", "172.9.165.216:8096", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 12:44:26", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:08", "1803141", "154.219.115.123:60001", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:53", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:08", "1803145", "161.248.179.92:1111", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:08", "1803146", "161.248.179.92:9999", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:08", "1803147", "162.14.124.25:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:10", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:07", "1803134", "149.104.28.204:3656", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:49", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:06", "1803127", "142.93.88.220:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:43:43", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-05-01 02:43:05", "1803124", "138.124.113.131:4211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:39", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:04", "1803114", "115.42.60.122:5440", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:25", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:04", "1803115", "117.72.101.55:9520", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 12:43:26", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:03", "1803109", "103.75.190.47:54630", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:43:10", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:03", "1803110", "104.234.174.93:57712", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:03", "1803113", "115.190.247.97:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:25", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-04-30 18:43:45", "1802897", "82.156.219.31:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:14", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-26 19:14:08", "1800528", "http://pillow.riverbridge.site", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:20:06", "75", "False", "None", "ipocalur,Vidar", "0", "abuse_ch"
"2026-04-26 18:36:03", "1800513", "91.92.242.236:80", "ip:port", "botnet_cc", "win.amadey", "None", "Amadey", "2026-08-11 13:20:12", "50", "False", "https://tracker.viriback.com/index.php?q=91.92.242.236", "Amadey,ViriBack", "0", "abuse_ch"
"2026-04-26 18:19:19", "1800509", "pillow.riverbridge.site", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:20:06", "100", "False", "https://bazaar.abuse.ch/sample/2199baf11d50dd10555f8aec122178e03b62570fc0d4614a8e928978dc547154/", "ipocalur,Vidar", "0", "abuse_ch"
"2026-04-26 18:11:00", "1800411", "http://91.92.242.236/oPvjr94jfe/index.php", "url", "botnet_cc", "win.amadey", "None", "Amadey", "2026-08-11 13:33:30", "100", "False", "None", "54e64e,amadey,c2", "0", "Bitsight"
"2026-04-24 15:18:06", "1797248", "psy.flise-mesteren.dk", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:19:42", "75", "False", "None", "r88vry,Vidar", "0", "abuse_ch"
"2026-04-24 15:18:01", "1797247", "https://psy.flise-mesteren.dk/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:19:42", "75", "False", "None", "r88vry,Vidar", "0", "abuse_ch"
"2026-04-23 04:45:34", "1796426", "http://196.251.107.248/kont2rt/index.php", "url", "botnet_cc", "win.amadey", "None", "Amadey", "2026-08-11 13:28:59", "100", "False", "None", "Amadey", "0", "abuse_ch"
"2026-04-22 20:53:22", "1796313", "192.210.174.149:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:51", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-22 14:30:19", "1796097", "47.94.162.43:2222", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:08", "100", "False", "", "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon", "0", "whoamix302"
"2026-04-22 11:17:13", "1796068", "wrath.bottlevacuum.shop", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:19:53", "75", "False", "None", "opiusra,Vidar", "0", "abuse_ch"
"2026-04-22 11:17:09", "1796067", "http://wrath.bottlevacuum.shop", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:19:53", "75", "False", "None", "opiusra,Vidar", "0", "abuse_ch"
"2026-04-19 18:25:29", "1794638", "http://213.5.130.87", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:24", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-04-17 18:15:06", "1793645", "http://213.5.130.147", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:25", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-04-17 17:13:27", "1793617", "ask.shurimaster.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:18:53", "75", "False", "None", "a10fsw,Vidar", "0", "abuse_ch"
"2026-04-17 17:13:25", "1793616", "https://ask.shurimaster.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:18:53", "75", "False", "None", "a10fsw,Vidar", "0", "abuse_ch"
"2026-04-16 16:13:58", "1792850", "pir.rapidphonebuyer.co.uk", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:16:32", "75", "False", "None", "d0b0p,Vidar", "0", "abuse_ch"
"2026-04-16 16:13:56", "1792849", "https://pir.rapidphonebuyer.co.uk/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:16:32", "75", "False", "None", "d0b0p,Vidar", "0", "abuse_ch"
"2026-04-16 11:16:20", "1792719", "gusto.brothbridge.space", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:19:19", "75", "False", "None", "odiznrio,Vidar", "0", "abuse_ch"
"2026-04-16 11:16:17", "1792718", "http://gusto.brothbridge.space", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:19:19", "75", "False", "None", "odiznrio,Vidar", "0", "abuse_ch"
"2026-04-16 10:56:58", "1792707", "43.167.177.224:7778", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-16 02:43:39", "1792532", "bxx2rghe05kng.cfc-execute.bj.baidubce.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:19", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-15 11:43:19", "1791747", "http://107.189.24.190:80", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:13:52", "75", "False", "None", "gr00n1,Vidar", "0", "abuse_ch"
"2026-04-15 11:39:45", "1791738", "139.224.23.63:8866", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:41", "100", "False", "", "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon", "0", "whoamix302"
"2026-04-15 08:15:17", "1791688", "venom.summertunnel.shop", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:19:07", "75", "False", "None", "ozpifus,Vidar", "0", "abuse_ch"
"2026-04-15 08:15:13", "1791687", "http://venom.summertunnel.shop", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:19:07", "75", "False", "None", "ozpifus,Vidar", "0", "abuse_ch"
"2026-04-15 07:10:10", "1791563", "46.151.182.19:423", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-04-14 14:11:23", "1790171", "dzodu.sparklingideas.space", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:18:20", "75", "False", "None", "odzdkzo,Vidar", "0", "abuse_ch"
"2026-04-14 14:11:18", "1790170", "http://dzodu.sparklingideas.space", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:18:20", "75", "False", "None", "odzdkzo,Vidar", "0", "abuse_ch"
"2026-04-14 14:10:11", "1790169", "http://kdije.weirdthings.site", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:15:29", "75", "False", "None", "okfueh,Vidar", "0", "abuse_ch"
"2026-04-13 07:47:21", "1785064", "pre.hifive.net.au", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:17:58", "100", "False", "", "Vidar", "0", "crep1x"
"2026-04-13 07:46:34", "1785049", "https://pre.hifive.net.au/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:17:58", "100", "False", "", "Vidar", "0", "crep1x"
"2026-04-12 06:34:43", "1784558", "47.104.248.7:8884", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:04", "100", "False", "", "Agentemis,BEACON,C2,Cobalt Strike,CobaltStrike,cobeacon", "0", "whoamix302"
"2026-04-09 14:48:47", "1783375", "39.102.125.11:4435", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-07 23:06:40", "1782524", "82.165.179.9:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:55", "75", "False", "https://bazaar.abuse.ch/sample/4c3b97c157d08ee298edb5d30fa86a3b90b04fedfbe517e7e0307b6013eacbf0/", "asyncrat", "0", "abuse_ch"
"2026-04-07 23:00:12", "1782522", "82.165.179.9:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:55", "100", "False", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2026-04-07 07:46:05", "1782182", "dzdi.serendipityhub.space", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:17:47", "100", "False", "", "Vidar", "0", "crep1x"
"2026-04-07 07:43:55", "1782152", "http://dzdi.serendipityhub.space/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:17:47", "100", "False", "", "Vidar", "0", "crep1x"
"2026-04-06 18:49:49", "1781907", "43.139.108.161:8192", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:58", "100", "False", "", "Agentemis,BEACON,C2,Cobalt Strike,CobaltStrike,cobeacon", "0", "whoamix302"
"2026-04-04 20:44:05", "1781225", "111.230.217.36:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:31", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-04 20:44:01", "1781224", "109.244.130.113:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:30", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-03 20:00:46", "1780847", "https://dnsnewtds.shop/jsrepo", "url", "payload_delivery", "unknown", "None", "Unknown malware", "2026-08-10 05:32:30", "100", "False", "", "ClickFix", "0", "HuntYethHounds"
"2026-04-03 20:00:36", "1780846", "dnsnewtds.shop", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "2026-08-10 05:32:31", "100", "False", "", "ClickFix", "0", "HuntYethHounds"
"2026-04-03 19:59:55", "1780845", "https://ntdnewtds.shop/jsrepo", "url", "payload_delivery", "unknown", "None", "Unknown malware", "2026-08-10 05:32:30", "100", "False", "", "ClickFix", "0", "HuntYethHounds"
"2026-04-03 16:13:22", "1780720", "hor.kaitorinihon.jp", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:16:54", "100", "False", "", "Vidar", "0", "crep1x"
"2026-04-03 16:12:59", "1780716", "https://hor.kaitorinihon.jp/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:16:54", "100", "False", "", "Vidar", "0", "crep1x"
"2026-04-03 12:11:33", "1780678", "46.151.182.19:422", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-04-03 12:11:33", "1780680", "31.57.216.27:422", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-04-03 12:11:33", "1780681", "130.12.182.175:422", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-04-03 12:11:33", "1780682", "31.57.216.28:422", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-27 21:24:29", "1777607", "pn2.skfilmsint.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:15:40", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:29", "1777609", "gre.syslicense.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:15:08", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:29", "1777611", "fefeo.iknowthat.space", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:16:01", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:17", "1777601", "https://pn2.skfilmsint.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:15:40", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:17", "1777603", "https://gre.syslicense.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:15:08", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:17", "1777605", "http://fefeo.iknowthat.space/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:16:01", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 12:01:30", "1777296", "185.242.3.83:2202", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:54", "100", "False", "https://search.censys.io/hosts/185.242.3.83", "AS60223,AsyncRAT,C2,censys,NETIFACE-AS,RAT", "0", "DonPasci"
"2026-03-24 12:01:13", "1774903", "37.72.172.58:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:59", "100", "False", "https://search.censys.io/hosts/37.72.172.58", "AS29802,AsyncRAT,C2,censys,HVC-AS,RAT", "0", "DonPasci"
"2026-03-24 12:00:35", "1774898", "47.92.208.27:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:08", "100", "False", "https://search.censys.io/hosts/47.92.208.27", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2026-03-24 07:09:06", "1774508", "thisisafalsepositive.ru", "domain", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 03:08:34", "100", "False", "https://app.any.run/tasks/1ef52a2b-2735-48b0-a673-8432a9b77898", "C2,SilentNet", "0", "burger"
"2026-03-23 21:06:09", "1774595", "154.83.12.132:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:44", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-03-23 13:42:00", "1774355", "kdije.weirdthings.site", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:15:29", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-23 08:02:27", "1774216", "msi.swadeshcomputer.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:14:35", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-23 08:01:55", "1774200", "https://msi.swadeshcomputer.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:14:35", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-23 06:53:11", "1774131", "46.151.182.19:421", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-23 04:01:29", "1774089", "195.250.25.176:58101", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:20", "100", "False", "https://search.censys.io/hosts/195.250.25.176", "AdaptixC2,AS36454,C2,censys,WHG-DAL", "0", "DonPasci"
"2026-03-23 04:01:28", "1774088", "23.227.199.67:42215", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:44", "100", "False", "https://search.censys.io/hosts/23.227.199.67", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2026-03-22 18:02:20", "1773536", "156.239.252.191:448", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:44", "100", "False", "", "BEACON,C2,CobaltStrike,Shodan", "0", "whoamix302"
"2026-03-22 12:01:29", "1773754", "138.226.236.52:13212", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:41", "100", "False", "https://search.censys.io/hosts/138.226.236.52", "AdaptixC2,AS205775,C2,censys,NEONCORENETWORKS", "0", "DonPasci"
"2026-03-20 13:59:59", "1772372", "pr2.codetohaven.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:14:24", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-20 13:59:49", "1772370", "https://pr2.codetohaven.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:14:24", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-20 04:19:09", "1771846", "51.222.87.16:433", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-03-20 04:08:17", "1771843", "cdn.sys-update.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:19", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-03-20 00:02:12", "1771791", "8.136.13.87:7001", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:52", "100", "False", "https://search.censys.io/hosts/8.136.13.87", "AdaptixC2,ALIBABA-CN-NET,AS37963,C2,censys", "0", "DonPasci"
"2026-03-19 20:02:51", "1771714", "45.136.13.247:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:12", "100", "False", "https://search.censys.io/hosts/45.136.13.247", "AdaptixC2,AS139659,C2,censys,LUCID-AS-AP", "0", "DonPasci"
"2026-03-19 20:02:47", "1771713", "167.17.47.121:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:14", "100", "False", "https://search.censys.io/hosts/167.17.47.121", "AdaptixC2,AS43180,C2,censys,TRUNKNETWORKS-AS", "0", "DonPasci"
"2026-03-19 13:11:25", "1771456", "dhzuadd.hellothere.sbs", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:14:57", "75", "False", "None", "drkfiz,Vidar", "0", "abuse_ch"
"2026-03-19 13:11:20", "1771455", "https://dhzuadd.hellothere.sbs", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:14:57", "75", "False", "None", "drkfiz,Vidar", "0", "abuse_ch"
"2026-03-16 20:01:10", "1768644", "35.179.229.71:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:46:57", "100", "False", "https://search.censys.io/hosts/35.179.229.71", "AMAZON-02,AS16509,C2,censys,Havoc", "0", "DonPasci"
"2026-03-16 20:01:02", "1768638", "64.227.105.70:8080", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:43", "100", "False", "https://search.censys.io/hosts/64.227.105.70", "AS14061,C2,censys,DIGITALOCEAN-ASN,Mythic", "0", "DonPasci"
"2026-03-16 12:00:11", "1767990", "43.155.169.245:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:59", "100", "False", "https://search.censys.io/hosts/43.155.169.245", "AS132203,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP-CN", "0", "DonPasci"
"2026-03-15 16:00:41", "1767077", "185.242.3.83:5505", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:54", "100", "False", "https://search.censys.io/hosts/185.242.3.83", "AS60223,AsyncRAT,C2,censys,NETIFACE-AS,RAT", "0", "DonPasci"
"2026-03-15 04:01:14", "1766764", "202.191.67.71:50003", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:34", "100", "False", "https://search.censys.io/hosts/202.191.67.71", "AdaptixC2,AS131262,C2,censys,KELNET-AS-AP", "0", "DonPasci"
"2026-03-14 08:24:37", "1765797", "31.57.216.28:421", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-14 08:24:37", "1765798", "130.12.182.175:421", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-14 08:24:37", "1765803", "31.57.216.27:421", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-14 08:00:55", "1765787", "5.101.82.60:2509", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:31", "100", "False", "https://search.censys.io/hosts/5.101.82.60", "AS-GLOBALTELEHOST,AS63023,C2,censys,RAT,Remcos", "0", "DonPasci"
"2026-03-13 15:06:16", "1765444", "pan.paihost.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:13:42", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-13 15:05:58", "1765442", "https://pan.paihost.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:13:42", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-13 04:01:11", "1764276", "46.151.182.205:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:27", "100", "False", "https://search.censys.io/hosts/46.151.182.205", "AS205759,AsyncRAT,C2,censys,GHOSTYNETWORKS,RAT", "0", "DonPasci"
"2026-03-11 16:01:48", "1763543", "159.138.31.252:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:06", "100", "False", "https://search.censys.io/hosts/159.138.31.252", "AS136907,C2,censys,HWCLOUDS-AS-AP,Mythic", "0", "DonPasci"
"2026-03-11 07:03:38", "1763170", "60.247.206.23:7443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:09", "100", "False", "None", "CobaltStrike,cs-watermark-391144938", "0", "abuse_ch"
"2026-03-11 04:00:36", "1763116", "118.25.10.65:65010", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:35", "100", "False", "https://search.censys.io/hosts/118.25.10.65", "AS45090,C2,censys,CobaltStrike,cs-watermark-666666666,TENCENT-NET-AP", "0", "DonPasci"
"2026-03-10 18:04:42", "1762899", "https://nonobody123.com", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-08-11 13:07:07", "100", "False", "https://tria.ge/260310-t5ja8aew7y", "C2,stealc,stealer,triage", "0", "DonPasci"
"2026-03-10 16:00:58", "1762854", "85.206.168.238:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:58", "100", "False", "https://search.censys.io/hosts/85.206.168.238", "AS61272,C2,censys,IST-AS,RAT,Remcos", "0", "DonPasci"
"2026-03-10 00:01:13", "1762492", "107.172.3.15:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:18", "100", "False", "https://search.censys.io/hosts/107.172.3.15", "AS-COLOCROSSING,AS36352,C2,censys,Mythic", "0", "DonPasci"
"2026-03-09 09:29:37", "1762153", "ooe.myserver.com.bd", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:13:31", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-09 09:29:17", "1762131", "https://ooe.myserver.com.bd/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:13:31", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-06 08:00:30", "1760216", "51.222.87.16:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 07:32:26", "100", "False", "https://search.censys.io/hosts/51.222.87.16", "AS16276,C2,censys,CobaltStrike,cs-watermark-426352781,OVH", "0", "DonPasci"
"2026-03-05 06:17:58", "1758456", "http://213.5.130.197", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:23", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:57", "1758457", "http://213.5.130.154", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:23", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:56", "1758458", "http://213.5.130.200", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:23", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:55", "1758459", "http://213.5.130.131", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:26", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:54", "1758460", "http://213.5.130.179", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:24", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:54", "1758461", "http://213.5.130.189", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:25", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-04 04:01:12", "1758006", "70.153.18.45:10002", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:48", "100", "False", "https://search.censys.io/hosts/70.153.18.45", "AS8075,censys,EvilGoPhish,MICROSOFT-CORP-MSN-AS-BLOCK,panel,Phishing", "0", "DonPasci"
"2026-03-02 15:30:09", "1756955", "104.243.248.63:1801", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:14", "100", "False", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2026-03-02 09:31:49", "1756664", "ctl.it-bd.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:12:59", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-02 09:30:33", "1756622", "https://ctl.it-bd.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:12:59", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-01 14:27:15", "1756333", "171.22.181.114:38990", "ip:port", "botnet_cc", "elf.pink", "None", "Pink", "2026-08-11 13:26:45", "100", "False", "None", "Pink", "0", "Bitsight"
"2026-02-26 06:26:20", "1754943", "31.57.216.27:423", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-02-26 06:26:20", "1754944", "31.57.216.28:423", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:56", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-02-26 06:26:20", "1754948", "130.12.182.175:423", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 06:17:55", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-02-25 20:02:24", "1754813", "47.120.20.86:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:05", "100", "False", "https://search.censys.io/hosts/47.120.20.86", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2026-02-25 19:01:08", "1754671", "115.190.250.28:5521", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:32", "100", "False", "https://search.censys.io/hosts/115.190.250.28", "AS137718,C2,censys", "0", "dyingbreeds_"
"2026-02-24 23:00:43", "1754344", "23.88.110.42:8443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-08-11 12:46:46", "100", "False", "https://search.censys.io/hosts/23.88.110.42", "AS24940,C2,censys,HETZNER-AS", "0", "dyingbreeds_"
"2026-02-24 12:02:30", "1754178", "169.40.135.36:8888", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:17", "100", "False", "https://search.censys.io/hosts/169.40.135.36", "AdaptixC2,AS209274,C2,censys,KRAKEN-NETWORK-ISP", "0", "DonPasci"
"2026-02-23 23:00:07", "1753846", "64.89.161.183:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:10", "100", "False", "https://search.censys.io/hosts/64.89.161.183", "AS205759,C2,censys,GHOSTYNETWORKS", "0", "dyingbreeds_"
"2026-02-23 10:07:22", "1753479", "glo.gadgetwalabd.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:12:27", "100", "False", "", "Vidar", "0", "crep1x"
"2026-02-23 10:06:47", "1753432", "https://glo.gadgetwalabd.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:12:27", "100", "False", "", "Vidar", "0", "crep1x"
"2026-02-23 00:02:15", "1752688", "149.28.242.44:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:49", "100", "False", "https://search.censys.io/hosts/149.28.242.44", "AdaptixC2,AS-VULTR,AS20473,C2,censys", "0", "DonPasci"
"2026-02-21 03:00:07", "1751453", "47.104.159.246:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:04", "100", "False", "https://search.censys.io/hosts/47.104.159.246", "AS37963,C2,censys", "0", "dyingbreeds_"
"2026-02-20 11:00:06", "1751104", "107.172.217.220:12096", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:29", "100", "False", "https://search.censys.io/hosts/107.172.217.220", "AS36352,C2,censys", "0", "dyingbreeds_"
"2026-02-20 08:47:26", "1751083", "185.180.198.3:2025", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:47", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-02-20 08:47:26", "1751084", "185.180.198.3:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:47", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-02-20 08:46:17", "1751080", "163.181.208.79:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:44:12", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-02-17 07:00:18", "1749811", "66.42.49.168:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:46", "100", "False", "https://search.censys.io/hosts/66.42.49.168", "AS20473,C2,censys,Mythic", "0", "dyingbreeds_"
"2026-02-16 09:05:30", "1749217", "111.228.4.54:4455", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:30", "50", "False", "https://www.shodan.io/host/111.228.4.54#4455", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2026-02-14 18:46:07", "1748314", "27.221.15.199:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:46:50", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-02-14 15:11:17", "1748256", "101.200.193.211:8086", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:27", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-02-13 14:01:35", "1747540", "gor.emiraride.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:12:05", "100", "False", "", "Vidar", "0", "crep1x"
"2026-02-13 14:01:02", "1747538", "https://gor.emiraride.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:12:05", "100", "False", "", "Vidar", "0", "crep1x"
"2026-02-13 06:59:13", "1747121", "117.72.191.140:8028", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:34", "50", "False", "https://www.shodan.io/host/117.72.191.140#8028", "c2,cobaltstrike,cs-watermark-391144938,shodan", "0", "juroots"
"2026-02-12 16:01:27", "1746911", "175.192.75.105:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:44:31", "100", "False", "https://search.censys.io/hosts/175.192.75.105", "AS4766,C2,censys,KIXS-AS-KR,Netsupport,RAT", "0", "DonPasci"
"2026-02-08 16:00:16", "1743398", "192.3.233.166:59850", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:52", "100", "False", "https://search.censys.io/hosts/192.3.233.166", "AS-COLOCROSSING,AS36352,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2026-02-08 15:42:41", "1743395", "1.15.25.148:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:38", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:40", "1743391", "106.52.208.143:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:37", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:40", "1743392", "106.13.137.229:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:37", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:40", "1743393", "101.43.2.116:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:38", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:40", "1743394", "101.133.148.66:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:38", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:39", "1743388", "115.190.178.249:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:36", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:39", "1743389", "114.132.150.96:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:36", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:39", "1743390", "110.40.176.194:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:36", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:37", "1743386", "120.48.50.33:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:35", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:37", "1743387", "117.72.214.50:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:35", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:36", "1743381", "124.223.199.39:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:36", "1743382", "124.221.32.87:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:36", "1743383", "124.220.48.168:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:36", "1743384", "124.220.164.98:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:36", "1743385", "121.41.167.80:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:35", "1743378", "152.136.139.105:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:35", "1743379", "129.204.103.151:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:35", "1743380", "124.223.47.219:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:34", "1743374", "172.245.215.43:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:34", "1743375", "165.154.125.212:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:34", "1743376", "156.233.233.134:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:34", "1743377", "154.201.91.224:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:33", "1743370", "38.190.224.63:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:33", "1743371", "222.255.214.236:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:33", "1743372", "192.252.187.60:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:33", "1743373", "178.16.52.194:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:32", "1743365", "43.139.146.100:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:32", "1743366", "43.133.41.106:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:32", "1743367", "42.192.49.72:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:32", "1743368", "39.107.85.83:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:32", "1743369", "39.106.144.162:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:31", "1743363", "47.100.168.4:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:31", "1743364", "43.139.169.60:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:30", "1743362", "47.111.146.110:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:29", "1743358", "47.243.175.24:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:29", "1743359", "47.239.188.48:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:29", "1743360", "47.122.30.177:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:29", "1743361", "47.122.1.243:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:28", "1743356", "61.166.154.109:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:28", "1743357", "49.235.177.231:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:27", "1743353", "81.70.255.195:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:27", "1743354", "81.69.98.230:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:27", "1743355", "8.210.78.137:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:26", "1743351", "83.229.126.65:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:26", "1743352", "81.71.159.99:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:15", "1743349", "83.229.123.61:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:15", "1743350", "83.229.126.183:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:14", "1743348", "8.153.205.30:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:13", "1743347", "8.137.149.67:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:12", "1743344", "47.93.28.103:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:12", "1743345", "60.205.139.210:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:11", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:12", "1743346", "lcowpowerlite.italynorth.cloudapp.azure.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:11", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:11", "1743340", "47.109.198.8:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:10", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:11", "1743341", "47.120.70.161:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:11", "1743342", "47.121.137.8:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:11", "1743343", "47.121.29.60:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:10", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:10", "1743336", "45.115.236.152:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:10", "1743338", "47.107.136.106:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:10", "1743339", "47.109.145.121:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:09", "1743333", "192.140.176.79:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:09", "1743334", "36.140.162.173:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:09", "1743335", "39.105.165.37:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:08", "1743330", "152.32.251.78:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:08", "1743331", "154.201.74.112:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:08", "1743332", "179.43.186.214:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:07", "1743326", "139.196.41.201:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:07", "1743327", "139.224.16.185:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:07", "1743328", "14.103.175.50:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:07", "1743329", "150.187.25.242:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:06", "1743322", "120.48.168.57:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:06", "1743323", "121.40.18.128:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:06", "1743324", "122.51.93.94:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:06", "1743325", "134.122.140.185:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:05", "1743320", "117.72.102.110:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:36", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:05", "1743321", "117.72.242.9:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:04", "1743318", "113.44.67.52:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:04", "1743319", "115.190.161.178:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:03", "1743314", "106.38.201.95:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:03", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:03", "1743315", "106.75.162.108:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:03", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:03", "1743316", "106.75.215.96:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:37", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:03", "1743317", "106.75.224.31:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:37", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:02", "1743312", "106.12.219.245:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:02", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:02", "1743313", "106.13.29.104:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:02", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-07 03:00:18", "1742595", "174.138.86.141:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:30", "100", "False", "https://search.censys.io/hosts/174.138.86.141", "AS14061,C2,censys,Mythic", "0", "dyingbreeds_"
"2026-02-05 13:01:59", "1741587", "57.158.27.132:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:47:39", "50", "False", "https://www.shodan.io/host/57.158.27.132#31337", "c2,shodan,sliver", "0", "juroots"
"2026-02-05 06:34:37", "1741375", "37.72.172.58:6066", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:59", "75", "False", "", "AS29802,asyncrat,c2,fofa,RAT", "0", "oxygen28"
"2026-02-04 15:54:23", "1741222", "3.121.234.29:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:50", "100", "False", "https://search.censys.io/hosts/3.121.234.29", "AS16509,C2,censys,Mythic", "0", "dyingbreeds_"
"2026-02-04 11:00:54", "1741132", "172.174.234.34:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:20", "100", "False", "https://search.censys.io/hosts/172.174.234.34", "AS8075,C2,censys,Mythic", "0", "dyingbreeds_"
"2026-02-04 00:02:27", "1740953", "188.166.244.201:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:44:58", "100", "False", "https://search.censys.io/hosts/188.166.244.201", "AdaptixC2,AS14061,C2,censys,DIGITALOCEAN-ASN", "0", "DonPasci"
"2026-01-31 00:05:33", "1739255", "98.85.71.175:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:48:17", "100", "False", "https://search.censys.io/hosts/98.85.71.175", "AMAZON-AES,AS14618,C2,censys,Mythic", "0", "DonPasci"
"2026-01-30 18:54:11", "1739209", "47.115.193.52:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:47:30", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-01-30 16:05:29", "1739169", "167.99.208.145:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:16", "100", "False", "https://search.censys.io/hosts/167.99.208.145", "AS14061,C2,censys,DIGITALOCEAN-ASN,Mythic", "0", "DonPasci"
"2026-01-30 16:04:48", "1739163", "107.150.105.91:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:04", "100", "False", "https://search.censys.io/hosts/107.150.105.91", "AS135377,C2,censys,CobaltStrike,cs-watermark-666666666,UCLOUD-HK-AS-AP", "0", "DonPasci"
"2026-01-30 08:04:49", "1739009", "111.92.243.40:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:04", "100", "False", "https://search.censys.io/hosts/111.92.243.40", "AS401696,C2,censys,CobaltStrike,COGNETCLOUD,cs-watermark-666666666", "0", "DonPasci"
"2026-01-30 02:55:25", "1738921", "45.82.85.50:13063", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:47:25", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-01-30 00:06:02", "1738909", "68.64.178.201:54321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:47", "100", "False", "https://search.censys.io/hosts/68.64.178.201", "AdaptixC2,AS139659,C2,censys,LUCID-AS-AP", "0", "DonPasci"
"2026-01-26 23:00:09", "1737790", "47.120.46.230:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:10", "100", "False", "https://search.censys.io/hosts/47.120.46.230", "AS37963,C2,censys", "0", "dyingbreeds_"
"2026-01-26 13:57:13", "1737664", "https://fluraresto.me/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:31:31", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-01-26 13:57:13", "1737665", "https://mastralakkot.live/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:23:28", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-01-25 22:49:35", "1737455", "167.179.76.179:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:46", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-01-25 22:48:35", "1737454", "ns1.ns-apache.jo3.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:23", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-01-23 08:45:57", "1736034", "158.158.8.193:443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-08-11 12:44:04", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-01-23 08:04:06", "1736014", "47.120.32.72:8075", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:05", "100", "False", "https://search.censys.io/hosts/47.120.32.72", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2026-01-22 12:04:28", "1735522", "176.31.71.168:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:44:32", "100", "False", "https://search.censys.io/hosts/176.31.71.168", "AS16276,C2,censys,OVH,Pupy,RAT", "0", "DonPasci"
"2026-01-22 04:04:19", "1735412", "34.64.98.201:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:46:56", "100", "False", "https://search.censys.io/hosts/34.64.98.201", "AS396982,C2,censys,GOOGLE-CLOUD-PLATFORM,Pupy,RAT", "0", "DonPasci"
"2026-01-21 20:04:36", "1735342", "54.145.56.188:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:36", "100", "False", "https://search.censys.io/hosts/54.145.56.188", "AMAZON-AES,AS14618,C2,censys,Mythic", "0", "DonPasci"
"2026-01-20 20:05:01", "1734935", "37.72.168.189:42334", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:59", "100", "False", "https://search.censys.io/hosts/37.72.168.189", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2026-01-20 16:04:24", "1734893", "136.24.173.249:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:37", "100", "False", "https://search.censys.io/hosts/136.24.173.249", "AS19165,C2,censys,Mythic,WEBPASS", "0", "DonPasci"
"2026-01-18 00:03:59", "1734081", "103.79.79.105:8444", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:43:10", "100", "False", "https://search.censys.io/hosts/103.79.79.105", "AS199959,C2,censys,CROWNCLOUD,Pupy,RAT", "0", "DonPasci"
"2026-01-17 20:52:32", "1734053", "43.139.50.42:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-01-16 11:03:46", "1732709", "117.72.178.246:4848", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:34", "50", "False", "https://www.shodan.io/host/117.72.178.246#4848", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2026-01-13 20:03:58", "1732012", "212.103.26.10:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:45:48", "100", "False", "https://search.censys.io/hosts/212.103.26.10", "AS15557,C2,censys,Havoc,LDCOMNET", "0", "DonPasci"
"2026-01-13 08:52:00", "1731532", "54.38.94.225:8881", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:47:37", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-01-11 11:00:48", "1700820", "102.117.170.125:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:04", "100", "False", "https://search.censys.io/hosts/102.117.170.125", "AS23889,C2,censys,MauritiusTelecom,Mythic", "0", "dyingbreeds_"
"2026-01-08 23:00:12", "1693365", "117.72.178.246:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:05", "100", "False", "https://search.censys.io/hosts/117.72.178.246", "AS141679,C2,censys", "0", "dyingbreeds_"
"2026-01-08 22:50:04", "1693357", "172.94.18.103:191", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:27", "100", "False", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2026-01-07 20:02:36", "1692743", "38.49.57.15:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:09", "100", "False", "https://search.censys.io/hosts/38.49.57.15", "AS8796,C2,censys,CobaltStrike,cs-watermark-666666666,FD-298-8796", "0", "DonPasci"
"2026-01-06 08:02:23", "1691952", "115.190.233.79:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:05", "100", "False", "https://search.censys.io/hosts/115.190.233.79", "AS137718,C2,censys,CobaltStrike,cs-watermark-987654321,VOLCANO-ENGINE", "0", "DonPasci"
"2026-01-05 13:21:42", "1691605", "http://213.5.130.122", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:22", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-01-05 13:21:41", "1691603", "http://213.5.130.151", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:22", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-01-05 13:21:40", "1691604", "http://213.5.130.124", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:22", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-01-05 13:21:40", "1691606", "http://213.5.130.187", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:23", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-01-02 07:08:13", "1689382", "http://77.110.119.94/ce369e7324834845.php", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-08-10 18:15:08", "100", "False", "https://bazaar.abuse.ch/sample/bd8c11720b38730d252793461a7a1b26827ae459bf26752a0fcd5e0129fe4ddc/", "c2,stealc", "0", "burger"
"2026-01-02 04:03:37", "1689798", "157.245.54.75:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:44:04", "100", "False", "https://search.censys.io/hosts/157.245.54.75", "AS14061,C2,censys,DIGITALOCEAN-ASN,Pupy,RAT", "0", "DonPasci"
"2025-12-30 16:21:16", "1688739", "101.34.205.214:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:15", "1688738", "103.171.35.66:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:14", "1688737", "107.149.192.54:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:13", "1688734", "124.222.218.20:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:13", "1688735", "124.221.255.78:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:13", "1688736", "123.56.78.220:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:12", "1688732", "152.32.202.240:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:12", "1688733", "150.158.119.242:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:11", "1688730", "165.154.244.73:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:11", "1688731", "156.225.20.77:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:10", "1688729", "182.92.239.94:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:08", "1688726", "39.105.160.175:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:08", "1688727", "38.38.250.99:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:08", "1688728", "211.184.175.246:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:07", "1688725", "45.58.56.34:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:05", "1688723", "8.130.80.145:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:05", "1688724", "8.130.26.216:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:03", "1688721", "94.74.164.177:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:03", "1688722", "87.251.67.85:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:04:05", "1688694", "16.171.13.191:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:08", "100", "False", "https://search.censys.io/hosts/16.171.13.191", "AMAZON-02,AS16509,C2,censys,Covenant", "0", "DonPasci"
"2025-12-29 08:46:57", "1687948", "222.186.17.103:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:46:43", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-12-28 18:44:20", "1687807", "163.181.213.114:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:44:12", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-12-28 07:41:32", "1687327", "37.72.172.58:8088", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:46:59", "100", "False", "https://search.censys.io/hosts/37.72.172.58", "AS29802,C2,censys,HVC-AS,RAT", "0", "dyingbreeds_"
"2025-12-27 16:02:33", "1687170", "37.72.172.58:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:00", "100", "False", "https://search.censys.io/hosts/37.72.172.58", "AS29802,AsyncRAT,C2,censys,HVC-AS,RAT", "0", "DonPasci"
"2025-12-25 18:44:15", "1686405", "155.102.62.60:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:43:54", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-12-25 07:52:31", "1686010", "139.196.223.82:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:06", "100", "False", "https://search.censys.io/hosts/139.196.223.82", "AS37963,C2,censys", "0", "dyingbreeds_"
"2025-12-24 12:48:51", "1685856", "helpremote.cc", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:13", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-12-23 22:45:05", "1685596", "172.94.18.103:190", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:27", "100", "False", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2025-12-23 20:01:06", "1685256", "115.190.160.206:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:04", "100", "False", "https://search.censys.io/hosts/115.190.160.206", "AS137718,C2,censys,CobaltStrike,cs-watermark-987654321,VOLCANO-ENGINE", "0", "DonPasci"
"2025-12-23 03:00:34", "1684938", "8.159.146.72:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:13", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-12-23 02:54:49", "1684936", "missmovie.lol", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:22", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-12-22 20:01:00", "1684826", "179.43.186.214:7889", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:46", "100", "False", "https://search.censys.io/hosts/179.43.186.214", "AS51852,C2,censys,CobaltStrike,cs-watermark-987654321,PLI-AS", "0", "DonPasci"
"2025-12-22 00:01:20", "1684543", "64.190.113.161:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:47:42", "100", "False", "https://search.censys.io/hosts/64.190.113.161", "AS399629,BLNWX,C2,censys,Pupy,RAT", "0", "DonPasci"
"2025-12-18 18:44:36", "1682522", "155.102.133.61:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:43:54", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-12-17 08:01:42", "1681297", "51.21.199.243:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:34", "100", "False", "https://search.censys.io/hosts/51.21.199.243", "AMAZON-02,AS16509,C2,censys,Mythic", "0", "DonPasci"
"2025-12-16 06:49:03", "1680395", "119.45.160.160:8889", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:36", "50", "False", "https://www.shodan.io/host/119.45.160.160#8889", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2025-12-16 02:49:55", "1680306", "43.161.245.186:79", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-12-12 02:50:28", "1676363", "67.219.102.244:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-12-08 14:58:40", "1670887", "20.157.116.151:8000", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:45:31", "100", "False", "https://search.censys.io/hosts/20.157.116.151", "AdaptixC2,AS8069,C2,censys,MICROSOFT-CORP-MSN-AS-BLOCK", "0", "DonPasci"
"2025-12-07 16:01:37", "1668967", "180.76.141.175:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:08", "100", "False", "https://search.censys.io/hosts/180.76.141.175", "AS38365,BAIDU,C2,censys,CobaltStrike,cs-watermark-391144938", "0", "DonPasci"
"2025-12-04 00:03:19", "1667182", "216.238.89.173:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:37", "100", "False", "https://search.censys.io/hosts/216.238.89.173", "AdaptixC2,AS-VULTR,AS20473,C2,censys", "0", "DonPasci"
"2025-12-03 20:02:26", "1667122", "149.28.138.70:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:43:49", "100", "False", "https://search.censys.io/hosts/149.28.138.70", "AS-VULTR,AS20473,C2,censys,Havoc", "0", "DonPasci"
"2025-12-03 20:01:15", "1667105", "115.190.161.178:1234", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:32", "100", "False", "https://search.censys.io/hosts/115.190.161.178", "AS137718,C2,censys,CobaltStrike,cs-watermark-987654321,VOLCANO-ENGINE", "0", "DonPasci"
"2025-12-03 12:31:15", "1666902", "122.114.10.199:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:43:29", "90", "False", "https://search.censys.io/hosts/122.114.10.199", "AS4837,C2,censys", "0", "dyingbreeds_"
"2025-12-02 12:51:03", "1666137", "8.137.149.67:8091", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:12", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-12-01 14:57:52", "1665523", "http://213.5.130.104", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:23", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:52", "1665524", "http://213.5.130.180", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:22", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:50", "1665525", "http://213.5.130.106", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:24", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:49", "1665527", "http://213.5.130.152", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:25", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:49", "1665528", "http://213.5.130.107", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:24", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:49", "1665529", "http://213.5.130.153", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:25", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:48", "1665530", "http://213.5.130.100", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:25", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:48", "1665531", "http://213.5.130.182", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:24", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 12:36:20", "1665454", "122.114.10.199:8001", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:43:29", "90", "False", "https://search.censys.io/hosts/122.114.10.199", "AS4837,C2,censys", "0", "dyingbreeds_"
"2025-11-29 12:00:52", "1663012", "47.236.56.15:4445", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:06", "100", "False", "https://search.censys.io/hosts/47.236.56.15", "ALIBABA-CN-NET,AS45102,C2,censys,CobaltStrike,cs-watermark-0", "0", "DonPasci"
"2025-11-26 12:50:54", "1650889", "job.itechno.cc", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:21", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-11-25 10:49:55", "1650040", "156.245.248.173:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:32", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-11-25 08:01:18", "1649977", "88.192.127.87:4444", "ip:port", "botnet_cc", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-08-11 12:48:04", "100", "False", "https://search.censys.io/hosts/88.192.127.87", "AS1759,C2,censys,Quasar,RAT,TSF-IP-CORE", "0", "DonPasci"
"2025-11-25 06:01:37", "1649775", "http://213.5.130.84", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:23", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-25 06:01:36", "1649776", "http://213.5.130.96", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:24", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-25 06:01:36", "1649777", "http://213.5.130.98", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:22", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-25 06:01:35", "1649778", "http://213.5.130.160", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:25", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-21 00:02:05", "1647575", "123.58.64.57:34567", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:38", "100", "False", "https://search.censys.io/hosts/123.58.64.57", "AS17623,C2,censys,CNCGROUP-SZ,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-11-17 23:00:18", "1645785", "47.236.149.142:46832", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:06", "100", "False", "https://search.censys.io/hosts/47.236.149.142", "AS45102,C2,censys", "0", "dyingbreeds_"
"2025-11-17 13:58:09", "1645519", "http://185.132.133.127", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:25", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-17 13:58:09", "1645520", "http://185.132.133.140", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:22", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-15 08:48:18", "1641582", "62.4.0.66:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:41", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2025-11-13 04:54:17", "1639703", "62.60.226.183:483", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-08-11 12:52:04", "100", "False", "None", "c2,Tofsee", "0", "Bitsight"
"2025-11-13 04:54:12", "1639719", "45.76.190.68:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:24", "100", "False", "https://search.censys.io/hosts/45.76.190.68", "AS-VULTR,AS20473,C2,censys,Mythic", "0", "dyingbreeds_"
"2025-11-12 16:02:00", "1639434", "62.4.0.66:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:41", "100", "False", "https://search.censys.io/hosts/62.4.0.66", "AS12876,C2,censys,Mythic,Online", "0", "DonPasci"
"2025-11-12 04:02:31", "1638854", "54.165.230.182:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:36", "100", "False", "https://search.censys.io/hosts/54.165.230.182", "AMAZON-AES,AS14618,C2,censys,Covenant", "0", "DonPasci"
"2025-11-11 08:02:54", "1638590", "45.76.190.68:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:24", "100", "False", "https://search.censys.io/hosts/45.76.190.68", "AS-VULTR,AS20473,C2,censys,Mythic", "0", "DonPasci"
"2025-11-10 18:47:41", "1638274", "38.242.212.5:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:03", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2025-11-10 16:02:55", "1638236", "154.205.145.109:2096", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:43:52", "100", "False", "https://search.censys.io/hosts/154.205.145.109", "AS138915,C2,censys,Havoc,KAOPU-HK", "0", "DonPasci"
"2025-11-07 23:00:12", "1636099", "111.228.55.96:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:04", "100", "False", "https://search.censys.io/hosts/111.228.55.96", "AS141679,C2,censys", "0", "dyingbreeds_"
"2025-11-07 02:49:37", "1634744", "165.154.225.239:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:46", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-11-06 07:26:25", "1634389", "139.196.111.118:8088", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:41", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2025-11-04 20:01:04", "1633501", "59.110.28.230:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:11", "100", "False", "https://search.censys.io/hosts/59.110.28.230", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-11-04 08:00:54", "1633194", "51.15.8.6:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:47:34", "100", "False", "https://search.censys.io/hosts/51.15.8.6", "AS12876,C2,censys,Online,Sliver", "0", "DonPasci"
"2025-11-04 02:49:22", "1633063", "192.253.227.88:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:19", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-11-04 02:49:14", "1633061", "167.88.168.76:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:20", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-11-03 12:08:57", "1631753", "117.72.175.125:443", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "2026-08-11 13:21:36", "100", "False", "https://www.nviso.eu/blog", "C2,NVISO,VShell", "0", "0xThiebaut"
"2025-11-03 09:03:04", "1631367", "117.72.242.9:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:34", "100", "False", "https://search.censys.io/hosts/117.72.242.9", "AS141679,C2,censys", "0", "dyingbreeds_"
"2025-11-03 07:01:12", "1631471", "119.42.148.186:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:22", "50", "False", "https://www.shodan.io/host/119.42.148.186#443", "c2,cobaltstrike,cs-watermark-666666666,shodan", "0", "juroots"
"2025-11-01 12:36:10", "1630832", "157.20.182.18:1337", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:00", "50", "False", "https://www.shodan.io/host/157.20.182.18#1337", "asyncrat,c2,shodan", "0", "juroots"
"2025-11-01 12:31:38", "1630704", "117.72.175.125:8087", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:33", "50", "False", "https://www.shodan.io/host/117.72.175.125#8087", "c2,cobaltstrike,cs-watermark-391144938,shodan", "0", "juroots"
"2025-10-30 04:00:42", "1629384", "103.149.93.146:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:24", "100", "False", "https://search.censys.io/hosts/103.149.93.146", "AS401696,C2,censys,CobaltStrike,COGNETCLOUD,cs-watermark-666666666", "0", "DonPasci"
"2025-10-29 09:23:45", "1628814", "179.43.186.214:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:47", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2025-10-29 02:49:59", "1628691", "8.17.56.128:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:13", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-28 12:28:01", "1628076", "8.137.149.67:8060", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:12", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2025-10-28 04:00:27", "1627925", "182.254.155.23:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:20", "100", "False", "https://search.censys.io/hosts/182.254.155.23", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2025-10-28 02:49:21", "1627719", "182.16.98.83:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:31", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-27 20:50:01", "1627659", "182.16.98.84:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:31", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-26 07:39:14", "1626705", "196.251.83.89:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:19", "100", "False", "https://search.censys.io/hosts/196.251.83.89", "AS401120,C2,censys,CHEAPY-HOST", "0", "dyingbreeds_"
"2025-10-25 04:02:07", "1626312", "173.212.216.226:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-08-11 12:44:29", "100", "False", "https://search.censys.io/hosts/173.212.216.226", "AS51167,censys,Chaos,CONTABO,panel", "0", "DonPasci"
"2025-10-25 04:00:11", "1626300", "47.121.135.201:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:16", "100", "False", "https://search.censys.io/hosts/47.121.135.201", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-10-24 16:00:08", "1626112", "140.143.194.253:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:33", "100", "False", "https://search.censys.io/hosts/140.143.194.253", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2025-10-23 16:48:58", "1625642", "maelootp.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:25", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-23 12:50:22", "1625564", "evil.ritademo.io.vn", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:25", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-22 18:45:52", "1625107", "185.72.8.137:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:56", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-10-22 18:45:52", "1625108", "185.72.8.137:7882", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:56", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-10-22 15:43:44", "1624905", "116.62.226.163:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:36", "50", "False", "None", "c2,censys,cobalt strike", "0", "sojubear"
"2025-10-21 20:01:59", "1624300", "47.110.67.64:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:29", "100", "False", "https://search.censys.io/hosts/47.110.67.64", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-10-21 13:19:24", "1624166", "http://213.5.130.75", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:23", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-10-21 13:19:23", "1624167", "http://213.5.130.10", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:24", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-10-21 13:19:22", "1624169", "http://213.5.130.90", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:23", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-10-21 13:19:22", "1624170", "http://213.5.130.89", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 06:02:25", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-10-21 02:49:37", "1618876", "www.salesf0rce.club", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:14", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-19 06:39:17", "1617732", "157.20.182.18:4443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:44:00", "100", "False", "https://search.censys.io/hosts/157.20.182.18", "AS152485,C2,censys,RAT", "0", "dyingbreeds_"
"2025-10-17 12:02:17", "1617285", "5.152.16.189:8443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:47:31", "100", "False", "https://search.censys.io/hosts/5.152.16.189", "AS35805,C2,censys,Netsupport,RAT,SILKNET-AS", "0", "DonPasci"
"2025-10-17 08:02:43", "1617002", "3.143.55.137:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:51", "100", "False", "https://search.censys.io/hosts/3.143.55.137", "AMAZON-02,AS16509,C2,censys,Mythic", "0", "DonPasci"
"2025-10-16 22:50:54", "1616729", "47.129.2.130:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:06", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-16 22:49:04", "1616728", "ns1.gygiuh.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:23", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-14 20:02:48", "1615761", "89.58.30.49:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:48:07", "100", "False", "https://search.censys.io/hosts/89.58.30.49", "AS197540,C2,censys,Covenant,NETCUP-AS", "0", "DonPasci"
"2025-10-14 08:01:33", "1614712", "5.101.82.60:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:47:31", "100", "False", "https://search.censys.io/hosts/5.101.82.60", "AS-GLOBALTELEHOST,AS63023,C2,censys,RAT,Remcos", "0", "DonPasci"
"2025-10-09 09:06:15", "1610023", "118.25.16.250:801", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:35", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2025-10-07 20:02:30", "1608986", "45.138.16.162:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:12", "100", "False", "https://search.censys.io/hosts/45.138.16.162", "AdaptixC2,AS210558,C2,censys,SERVICES-1337-GMBH", "0", "DonPasci"
"2025-09-30 04:00:23", "1604523", "18.219.51.236:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:42", "100", "False", "https://search.censys.io/hosts/18.219.51.236", "AMAZON-02,AS16509,C2,censys,Mythic", "0", "dyingbreeds_"
"2025-09-30 00:02:15", "1604499", "149.50.135.215:49152", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:49", "100", "False", "https://search.censys.io/hosts/149.50.135.215", "AdaptixC2,AS27823,C2,censys,Dattatec.com", "0", "DonPasci"
"2025-09-28 15:48:32", "1603281", "154.92.15.229:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:21", "50", "False", "None", "c2,censys,cobalt strike", "0", "sojubear"
"2025-09-27 05:44:59", "1602679", "43.166.246.26:8001", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:00", "100", "False", "None", "CobaltStrike,cs-watermark-426352781", "0", "abuse_ch"
"2025-09-25 20:00:39", "1601556", "115.120.245.134:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:04", "100", "False", "https://search.censys.io/hosts/115.120.245.134", "AS55990,C2,censys,CobaltStrike,cs-watermark-987654321,HWCSNET", "0", "DonPasci"
"2025-09-25 12:51:01", "1601359", "196.251.69.253:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:19", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-24 20:00:10", "1599651", "47.113.186.138:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:28", "100", "False", "https://search.censys.io/hosts/47.113.186.138", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-09-24 08:02:13", "1599442", "43.162.114.240:4000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:08", "100", "False", "https://search.censys.io/hosts/43.162.114.240", "AS132203,censys,EvilGinx,panel,Phishing,TENCENT-NET-AP-CN", "0", "DonPasci"
"2025-09-23 20:01:59", "1599090", "46.21.153.148:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:28", "100", "False", "https://search.censys.io/hosts/46.21.153.148", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2025-09-23 20:01:59", "1599091", "46.21.153.146:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:28", "100", "False", "https://search.censys.io/hosts/46.21.153.146", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2025-09-23 06:06:58", "1598336", "43.139.170.200:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:58", "100", "False", "None", "CobaltStrike,cs-watermark-100000", "0", "abuse_ch"
"2025-09-23 04:00:59", "1598300", "43.162.114.107:4000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:08", "100", "False", "https://search.censys.io/hosts/43.162.114.107", "AS132203,censys,EvilGinx,Phishing", "0", "dyingbreeds_"
"2025-09-22 14:51:05", "1598102", "159.75.211.248:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:45", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-22 14:49:30", "1598100", "cstest.mucfc.store", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:20", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-22 08:49:38", "1597898", "ns2.cryptwechat.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:23", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-22 08:49:35", "1597894", "ns1.cryptwechat.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:22", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-21 16:01:22", "1596535", "43.162.108.133:4000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:08", "100", "False", "https://search.censys.io/hosts/43.162.108.133", "AS132203,censys,EvilGinx,panel,Phishing,TENCENT-NET-AP-CN", "0", "DonPasci"
"2025-09-13 04:01:58", "1589068", "18.167.174.198:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:44:41", "100", "False", "https://search.censys.io/hosts/18.167.174.198", "AMAZON-02,AS16509,C2,censys,Pupy,RAT", "0", "DonPasci"
"2025-09-13 00:02:05", "1588789", "144.208.127.243:50375", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:43:45", "100", "False", "https://search.censys.io/hosts/144.208.127.243", "AS395092,C2,censys,SHOCK-1,Sliver", "0", "DonPasci"
"2025-09-11 20:01:36", "1588133", "195.178.110.135:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:19", "100", "False", "https://search.censys.io/hosts/195.178.110.135", "AS48090,C2,censys,CobaltStrike,cs-watermark-426352781,DMZHOST", "0", "DonPasci"
"2025-09-11 20:01:30", "1588128", "150.158.170.241:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:21", "100", "False", "https://search.censys.io/hosts/150.158.170.241", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2025-09-11 06:43:14", "1587773", "106.12.111.209:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:23", "100", "False", "None", "CobaltStrike,cs-watermark-1234567890", "0", "abuse_ch"
"2025-09-10 20:01:24", "1587441", "101.32.109.112:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:24", "100", "False", "https://search.censys.io/hosts/101.32.109.112", "AS132203,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP-CN", "0", "DonPasci"
"2025-09-07 20:02:05", "1583496", "43.225.157.146:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:10", "100", "False", "https://search.censys.io/hosts/43.225.157.146", "AS142403,AsyncRAT,C2,censys,RAT,YISUCLOUDLTD-HK", "0", "DonPasci"
"2025-09-06 20:01:18", "1582910", "8.138.222.215:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:15", "100", "False", "https://search.censys.io/hosts/8.138.222.215", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2025-09-04 07:40:17", "1581557", "8.148.194.157:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:15", "50", "False", "https://www.shodan.io/host/8.148.194.157#443", "c2,cobaltstrike,cs-watermark-666666666,shodan", "0", "juroots"
"2025-09-02 18:52:55", "1580723", "47.236.159.248:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:06", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-02 18:50:45", "1580721", "ns2.microoosoft.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:24", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-02 18:50:42", "1580720", "ns1.microoosoft.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:23", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-02 05:43:42", "1580257", "47.121.137.8:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:05", "50", "False", "https://www.shodan.io/host/47.121.137.8#80", "c2,cobaltstrike,cs-watermark-666666666,shodan", "0", "juroots"
"2025-09-02 04:01:38", "1580237", "47.99.196.178:7001", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:30", "100", "False", "https://search.censys.io/hosts/47.99.196.178", "AdaptixC2,ALIBABA-CN-NET,AS37963,C2,censys", "0", "DonPasci"
"2025-09-01 00:01:11", "1578921", "109.205.181.248:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:22", "100", "False", "https://search.censys.io/hosts/109.205.181.248", "AS51167,C2,censys,CONTABO,Mythic", "0", "DonPasci"
"2025-08-31 20:50:07", "1578899", "103.73.66.43:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:37", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-31 04:00:27", "1578379", "109.205.181.248:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:21", "100", "False", "https://search.censys.io/hosts/109.205.181.248", "AS51167,C2,censys,CONTABO,Mythic", "0", "dyingbreeds_"
"2025-08-29 22:50:45", "1577783", "43.199.78.142:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-29 22:49:03", "1577775", "n1.google-analytcis.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:22", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-29 22:49:03", "1577776", "n2.google-analytcis.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:22", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-29 22:49:03", "1577777", "n3.google-analytcis.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:22", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-29 22:49:01", "1577774", "lab.google-analytcis.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:21", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-28 20:01:21", "1576432", "46.246.82.10:2003", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:29", "100", "False", "https://search.censys.io/hosts/46.246.82.10", "AS42708,C2,censys,DcRAT,GLESYS,RAT", "0", "DonPasci"
"2025-08-25 08:14:17", "1574099", "89.216.98.17:3085", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:48:06", "50", "False", "https://www.shodan.io/host/89.216.98.17#3085", "c2,netsupport,shodan", "0", "juroots"
"2025-08-25 00:00:27", "1573705", "43.163.112.217:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:17", "100", "False", "https://search.censys.io/hosts/43.163.112.217", "AS132203,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP-CN", "0", "DonPasci"
"2025-08-23 16:00:59", "1573112", "3.24.114.211:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:51", "100", "False", "https://search.censys.io/hosts/3.24.114.211", "AMAZON-02,AS16509,C2,censys,Mythic", "0", "DonPasci"
"2025-08-20 08:02:12", "1571607", "178.16.55.53:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:31", "100", "False", "https://search.censys.io/hosts/178.16.55.53", "C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2025-08-18 20:01:59", "1570775", "116.203.31.207:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:33", "100", "False", "https://search.censys.io/hosts/116.203.31.207", "AS24940,C2,censys,CobaltStrike,cs-watermark-987654321,HETZNER-AS", "0", "DonPasci"
"2025-08-17 20:01:54", "1570558", "150.187.25.242:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:42", "100", "False", "https://search.censys.io/hosts/150.187.25.242", "AS20312,C2,censys,CobaltStrike,cs-watermark-987654321,Fundacion", "0", "DonPasci"
"2025-08-16 15:22:26", "1569825", "8.138.167.123:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:15", "50", "False", "https://www.shodan.io/host/8.138.167.123#443", "c2,cobaltstrike,shodan", "0", "juroots"
"2025-08-16 08:01:47", "1569780", "119.29.231.118:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:22", "100", "False", "https://search.censys.io/hosts/119.29.231.118", "AS45090,C2,censys,CobaltStrike,cs-watermark-666666666,TENCENT-NET-AP", "0", "DonPasci"
"2025-08-15 21:57:45", "1569167", "116.198.233.179:6666", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:32", "50", "False", "https://www.shodan.io/host/116.198.233.179#6666", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2025-08-15 12:49:06", "1569004", "8ve3qsgxk7rs6.cfc-execute.bj.baidubce.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:18", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-15 06:21:34", "1568713", "117.72.184.172:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:35", "100", "False", "https://search.censys.io/hosts/117.72.184.172", "AS141679,C2,censys", "0", "dyingbreeds_"
"2025-08-13 16:01:30", "1568192", "115.190.138.41:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:32", "100", "False", "https://search.censys.io/hosts/115.190.138.41", "AS137718,C2,censys,CobaltStrike,cs-watermark-391144938,VOLCANO-ENGINE", "0", "DonPasci"
"2025-08-12 20:01:25", "1567756", "116.198.233.179:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:36", "100", "False", "https://search.censys.io/hosts/116.198.233.179", "AS137699,C2,censys,CHINATELECOM-JIANGSU-SUQIAN-IDC,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-08-12 12:01:59", "1567668", "62.117.98.115:8001", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:41", "100", "False", "https://search.censys.io/hosts/62.117.98.115", "AS8732,C2,censys,COMCOR-AS,Mythic", "0", "DonPasci"
"2025-08-12 10:50:19", "1567648", "107.174.115.43:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:29", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-11 20:01:43", "1567316", "209.250.227.127:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:45:44", "100", "False", "https://search.censys.io/hosts/209.250.227.127", "AS-VULTR,AS20473,C2,censys,Pupy,RAT", "0", "DonPasci"
"2025-08-11 08:01:15", "1567234", "45.204.216.24:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:17", "100", "False", "https://search.censys.io/hosts/45.204.216.24", "AS62468,C2,censys,CobaltStrike,cs-watermark-987654321,HKCLOUDX", "0", "DonPasci"
"2025-08-06 12:54:26", "1565164", "8.219.76.168:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:13", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-05 08:53:36", "1564496", "47.105.36.109:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:17", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-04 20:45:44", "1564345", "185.233.166.124:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:53", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-08-04 20:45:44", "1564346", "185.233.166.124:9702", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:53", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-08-01 20:01:06", "1563211", "89.197.168.150:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:48:05", "100", "False", "https://search.censys.io/hosts/89.197.168.150", "AS47474,C2,censys,Mythic,VIRTUAL1", "0", "DonPasci"
"2025-07-31 01:20:10", "1562698", "68.133.1.34:8888", "ip:port", "botnet_cc", "win.xenorat", "None", "XenoRAT", "2026-08-11 12:47:47", "100", "False", "None", "XenoRAT", "0", "abuse_ch"
"2025-07-30 20:01:06", "1562605", "172.233.97.159:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:21", "100", "False", "https://search.censys.io/hosts/172.233.97.159", "AKAMAI-LINODE-AP,AS63949,C2,censys,Mythic", "0", "DonPasci"
"2025-07-28 05:29:47", "1561533", "217.154.212.25:3000", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:46:38", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2025-07-27 16:00:55", "1561181", "117.72.181.104:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:23", "100", "False", "https://search.censys.io/hosts/117.72.181.104", "AS141679,C2,censys,CHINATELECOM-IDC-BTHBD-AP,CobaltStrike,cs-watermark-666666", "0", "DonPasci"
"2025-07-25 10:51:18", "1560617", "47.236.130.154:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:06", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-22 20:44:22", "1559594", "158.255.213.22:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:05", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-07-22 20:44:22", "1559595", "158.255.213.22:63421", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:05", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-07-19 12:49:30", "1558329", "103.125.248.109:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:24", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-18 12:51:20", "1558066", "193.112.84.248:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:19", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-18 08:01:12", "1558027", "206.189.227.148:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:39", "100", "False", "https://search.censys.io/hosts/206.189.227.148", "AS14061,C2,censys,DIGITALOCEAN-ASN,Mythic", "0", "DonPasci"
"2025-07-16 22:49:04", "1557619", "ns3.nsebseshop.cloud", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:24", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-16 22:49:03", "1557618", "ns2.nsebseshop.cloud", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:24", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-16 22:49:02", "1557617", "ns1.nsebseshop.cloud", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:23", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-14 20:45:17", "1556749", "118.31.18.77:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:35", "100", "False", "https://search.censys.io/hosts/118.31.18.77", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-07-07 20:54:20", "1554340", "88.129.147.201:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:48:03", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-07-06 20:00:32", "1554064", "8.152.99.85:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:15", "100", "False", "https://search.censys.io/hosts/8.152.99.85", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2025-07-02 04:02:12", "1552208", "146.70.87.96:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:43:47", "100", "False", "https://search.censys.io/hosts/146.70.87.96", "AdaptixC2,AS9009,C2,censys,M247", "0", "DonPasci"
"2025-07-01 04:02:16", "1551843", "38.132.122.141:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:47:00", "100", "False", "https://search.censys.io/hosts/38.132.122.141", "AdaptixC2,AS9009,C2,censys,M247", "0", "DonPasci"
"2025-06-28 10:56:20", "1550785", "43.139.50.42:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-06-25 04:00:19", "1549030", "156.227.233.153:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:21", "100", "False", "https://search.censys.io/hosts/156.227.233.153", "AS138152,C2,censys", "0", "dyingbreeds_"
"2025-06-20 20:02:50", "1548104", "158.158.0.196:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:04", "100", "False", "https://search.censys.io/hosts/158.158.0.196", "AS8075,C2,censys,MICROSOFT-CORP-MSN-AS-BLOCK,Mythic", "0", "DonPasci"
"2025-06-20 06:01:32", "1547925", "82.156.156.160:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:14", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2025-06-19 00:02:44", "1546420", "158.158.0.196:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:04", "100", "False", "https://search.censys.io/hosts/158.158.0.196", "AS8075,C2,censys,MICROSOFT-CORP-MSN-AS-BLOCK,Mythic", "0", "DonPasci"
"2025-06-18 08:02:37", "1546246", "191.93.118.254:9000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:45:00", "75", "False", "https://bazaar.abuse.ch/sample/9265a6e0b26a240f1f8bffddf3b36d0e533919d0c894bd66839a90e351961464/", "AsyncRAT,RAT", "0", "abuse_ch"
"2025-06-17 03:12:25", "1545615", "8.147.128.54:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:15", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-06-16 12:01:46", "1545348", "8.137.149.67:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:12", "100", "False", "https://search.censys.io/hosts/8.137.149.67", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-06-13 20:01:30", "1544612", "47.109.48.57:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:17", "100", "False", "https://search.censys.io/hosts/47.109.48.57", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-06-12 08:56:19", "1544039", "39.104.78.25:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:18", "100", "False", "https://search.censys.io/hosts/39.104.78.25", "AS37963,C2,censys", "0", "dyingbreeds_"
"2025-06-10 16:01:13", "1543390", "8.155.0.238:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:14", "100", "False", "https://search.censys.io/hosts/8.155.0.238", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-06-08 21:18:37", "1542804", "23.227.203.191:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-11 12:46:44", "100", "False", "https://search.censys.io/hosts/23.227.203.191", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2025-06-08 20:01:01", "1542759", "119.45.29.172:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:35", "100", "False", "https://search.censys.io/hosts/119.45.29.172", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2025-06-06 16:00:50", "1541652", "68.64.176.42:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:16", "100", "False", "https://search.censys.io/hosts/68.64.176.42", "AS139659,C2,censys,CobaltStrike,cs-watermark-391144938,LUCID-AS-AP", "0", "DonPasci"
"2025-06-02 12:01:04", "1538881", "193.239.85.15:2083", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:45:12", "100", "False", "https://search.censys.io/hosts/193.239.85.15", "AS9009,C2,censys,Havoc,M247", "0", "DonPasci"
"2025-06-02 05:47:28", "1538799", "47.109.198.8:6000", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:05", "50", "False", "https://www.shodan.io/host/47.109.198.8#6000", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2025-06-01 08:52:56", "1538358", "54.38.94.225:8885", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:47:37", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-05-31 07:45:39", "1537676", "101.43.91.156:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:37", "75", "False", "https://x.com/abodovic1", "c2,censys,CobaltStrike", "0", "Abodovic"
"2025-05-31 07:45:38", "1537678", "59.110.7.32:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:26", "75", "False", "https://x.com/abodovic1", "c2,censys,CobaltStrike", "0", "Abodovic"
"2025-05-30 08:53:21", "1536850", "99.112.198.249:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:48:18", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-05-30 08:00:11", "1536831", "129.28.85.210:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:22", "100", "False", "https://search.censys.io/hosts/129.28.85.210", "AS45090,C2,censys,CobaltStrike,cs-watermark-666666666,TENCENT-NET-AP", "0", "DonPasci"
"2025-05-30 02:55:17", "1536730", "111.229.4.108:2096", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:31", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-05-29 22:26:34", "1536683", "161.35.176.231:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:44:09", "100", "False", "https://search.censys.io/hosts/161.35.176.231", "AS14061,C2,censys,DIGITALOCEAN-ASN,Havoc", "0", "DonPasci"
"2025-05-24 20:01:31", "1533613", "221.132.29.137:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:43", "100", "False", "https://search.censys.io/hosts/221.132.29.137", "AS45899,C2,censys,Mythic,VNPT-AS-VN", "0", "DonPasci"
"2025-05-24 11:13:44", "1533071", "1.15.174.189:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:25", "75", "False", "https://x.com/abodovic1", "c2,censys,CobaltStrike", "0", "Abodovic"
"2025-05-23 05:34:51", "1532332", "8.140.239.162:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:26", "75", "False", "https://x.com/abodovic1", "c2,censys,CobaltStrike", "0", "Abodovic"
"2025-05-21 16:00:35", "1531654", "122.10.49.137:808", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:37", "100", "False", "https://search.censys.io/hosts/122.10.49.137", "AS134548,C2,censys,CobaltStrike,cs-watermark-1234567890,DXTL-HK", "0", "DonPasci"
"2025-05-21 08:00:35", "1527752", "117.72.206.39:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:35", "100", "False", "https://search.censys.io/hosts/117.72.206.39", "AS141679,C2,censys,CHINATELECOM-IDC-BTHBD-AP,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2025-05-21 00:00:32", "1527457", "122.10.25.26:808", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:37", "100", "False", "https://search.censys.io/hosts/122.10.25.26", "AS134548,C2,censys,CobaltStrike,cs-watermark-1234567890,DXTL-HK", "0", "DonPasci"
"2025-05-20 06:37:42", "1526357", "106.54.61.188:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:23", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2025-05-18 15:34:22", "1525250", "124.223.114.203:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:22", "100", "False", "https://intelinsights.substack.com/p/from-939-to-85-hunting-cobalt-strike", "censys,cobaltstrike", "0", "orlof_v"
"2025-05-17 14:42:08", "1524773", "167.99.51.2:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:44:16", "50", "False", "https://www.shodan.io/host/167.99.51.2#31337", "c2,shodan,sliver", "0", "juroots"
"2025-05-17 08:00:32", "1524641", "167.99.51.2:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:44:16", "100", "False", "https://search.censys.io/hosts/167.99.51.2", "AS14061,C2,censys,DIGITALOCEAN-ASN,Sliver", "0", "DonPasci"
"2025-05-17 06:26:23", "1524319", "101.35.109.246:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:24", "50", "False", "https://www.shodan.io/host/101.35.109.246#443", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2025-05-15 21:14:57", "1523466", "103.171.35.26:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:24", "75", "False", "https://x.com/abodovic1", "c2,censys,cobalt_strike", "0", "Abodovic"
"2025-05-15 21:14:47", "1523462", "60.204.169.16:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:26", "75", "False", "https://x.com/abodovic1", "c2,censys,cobalt_strike", "0", "Abodovic"
"2025-05-15 21:13:56", "1523434", "179.43.186.223:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:20", "75", "False", "https://x.com/abodovic1", "c2,censys,cobalt_strike", "0", "Abodovic"
"2025-05-15 06:10:52", "1523280", "45.133.180.138:6432", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:11", "75", "False", "https://bazaar.abuse.ch/sample/b6185d4054c5a08141db4c3fb5e43369ea21af5892d8ba47628e23f37f79250d/", "asyncrat", "0", "abuse_ch"
"2025-05-15 05:25:01", "1523246", "8.134.70.73:7777", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 07:32:27", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2025-05-12 20:58:42", "1520343", "38.54.112.234:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:56", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-05-12 20:55:40", "1520342", "asusupdateserver.asuscomm.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:19", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-05-11 06:11:06", "1519438", "47.109.190.151:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:30", "100", "False", "https://search.censys.io/hosts/47.109.190.151", "AS37963,censys,Viper", "0", "dyingbreeds_"
"2025-05-11 05:00:18", "1519451", "https://lofiramegi.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:24:02", "100", "False", "", "None", "0", "Rony"
"2025-05-11 05:00:17", "1519450", "https://topguningit.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:32:04", "100", "False", "", "None", "0", "Rony"
"2025-05-09 05:36:03", "1518529", "47.108.140.10:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:29", "100", "False", "https://search.censys.io/hosts/47.108.140.10", "AS37963,censys,Viper", "0", "dyingbreeds_"
"2025-05-07 13:00:19", "1518023", "106.52.207.50:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:29", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-04-29 08:53:29", "1513590", "54.38.94.225:8882", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:47:37", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-04-29 08:43:42", "1513585", "107.143.144.154:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:43:17", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-04-26 20:01:51", "1511917", "181.206.158.190:1000", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:44:42", "100", "False", "https://search.censys.io/hosts/181.206.158.190", "AS27831,C2,censys,Colombia,DcRAT,RAT", "0", "DonPasci"
"2025-04-22 12:21:47", "1509966", "167.71.13.103:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:44:15", "50", "False", "https://www.shodan.io/host/167.71.13.103#31337", "c2,shodan,sliver", "0", "juroots"
"2025-04-18 08:02:32", "1493521", "77.73.129.82:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:50", "100", "False", "https://search.censys.io/hosts/77.73.129.82", "AS201814,C2,censys,MEVSPACE,Mythic", "0", "DonPasci"
"2025-04-16 16:01:35", "1492480", "113.45.253.80:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:31", "100", "False", "https://search.censys.io/hosts/113.45.253.80", "AS55990,C2,censys,CobaltStrike,cs-watermark-666666666,HWCSNET", "0", "DonPasci"
"2025-04-15 16:02:30", "1492012", "47.83.134.97:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:47:30", "100", "False", "https://search.censys.io/hosts/47.83.134.97", "ALIBABA-CN-NET,AS45102,C2,censys,Havoc", "0", "DonPasci"
"2025-04-15 04:01:37", "1491748", "193.142.146.70:56004", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:10", "100", "False", "https://search.censys.io/hosts/193.142.146.70", "AS213438,C2,censys,COLOCATEL-INC,RAT,Remcos", "0", "DonPasci"
"2025-04-10 05:55:49", "1486437", "167.71.13.103:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:44:15", "90", "False", "https://search.censys.io/hosts/167.71.13.103", "AS14061,C2,censys,DIGITALOCEAN-ASN", "0", "dyingbreeds_"
"2025-04-02 10:08:14", "1463173", "38.46.218.36:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-08-11 05:22:57", "100", "False", "None", "Vo1d", "0", "Bitsight"
"2025-04-02 10:08:13", "1463174", "38.46.218.38:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-08-11 11:59:58", "100", "False", "None", "Vo1d", "0", "Bitsight"
"2025-04-02 10:08:12", "1463176", "38.46.218.39:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-08-11 13:02:23", "100", "False", "None", "Vo1d", "0", "Bitsight"
"2025-04-02 08:01:26", "1463152", "200.107.126.227:3085", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:34", "100", "False", "https://search.censys.io/hosts/200.107.126.227", "AS14754,C2,censys,Netsupport,RAT,TELECOMUNICACIONES", "0", "DonPasci"
"2025-04-01 10:24:30", "1462468", "43.143.229.126:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:18", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2025-03-31 06:14:47", "1461919", "8.140.239.162:81", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:12", "100", "False", "https://search.censys.io/hosts/8.140.239.162", "AS37963,C2,censys", "0", "dyingbreeds_"
"2025-03-28 04:00:35", "1459722", "193.142.146.70:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-11 12:45:10", "100", "False", "https://search.censys.io/hosts/193.142.146.70", "AS213438,C2,censys,COLOCATEL-INC,RAT,Remcos", "0", "DonPasci"
"2025-03-25 22:53:24", "1458716", "ehchq7m7rpvdr.cfc-execute.bj.baidubce.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:14", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-03-24 06:29:33", "1457513", "103.142.147.17:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:05", "100", "False", "https://search.censys.io/hosts/103.142.147.17", "AS135581,censys,Viper", "0", "dyingbreeds_"
"2025-03-22 20:43:16", "1454148", "103.142.147.18:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:05", "75", "False", "None", "drb-ra,RAT", "0", "abuse_ch"
"2025-03-22 20:43:16", "1454149", "103.142.147.19:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:05", "75", "False", "None", "drb-ra,RAT", "0", "abuse_ch"
"2025-03-20 12:01:27", "1452404", "47.116.208.81:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:28", "100", "False", "https://search.censys.io/hosts/47.116.208.81", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2025-03-12 02:47:28", "1446559", "www.dyshop.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:26", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-03-09 04:00:17", "1444156", "47.100.16.83:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:02", "100", "False", "https://search.censys.io/hosts/47.100.16.83", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-391144938", "0", "DonPasci"
"2025-03-05 16:01:26", "1441526", "68.219.250.95:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:47", "100", "False", "https://search.censys.io/hosts/68.219.250.95", "AS8075,C2,censys,MICROSOFT-CORP-MSN-AS-BLOCK,Mythic", "0", "DonPasci"
"2025-03-02 20:01:03", "1439776", "150.5.174.231:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:50", "100", "False", "https://search.censys.io/hosts/150.5.174.231", "AS150436,BYTEPLUS-AS-AP,C2,censys,Mythic", "0", "DonPasci"
"2025-03-02 08:46:23", "1439368", "54.38.94.225:8887", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:47:37", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-03-01 20:47:46", "1439168", "47.129.171.26:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:06", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-03-01 20:46:51", "1439166", "ns.1.3.0o0.foo", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:22", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-03-01 20:46:51", "1439167", "ns.1.4.0o0.foo", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:22", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-02-19 04:01:34", "1414853", "54.95.208.190:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:47:38", "100", "False", "https://search.censys.io/hosts/54.95.208.190", "AMAZON-02,AS16509,C2,censys,Havoc", "0", "DonPasci"
"2025-02-14 00:01:07", "1411885", "192.52.167.140:80", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:09", "100", "False", "https://search.censys.io/hosts/192.52.167.140", "AS199959,C2,censys,CROWNCLOUD,Netsupport,RAT", "0", "DonPasci"
"2025-02-10 20:43:10", "1409420", "103.215.81.156:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:08", "75", "False", "None", "drb-ra,RAT", "0", "abuse_ch"
"2025-02-06 13:54:51", "1405307", "https://apworsindos.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:23:01", "100", "False", "", "None", "0", "Rony"
"2025-02-06 13:54:51", "1405308", "https://reminasolirol.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:32:03", "100", "False", "", "None", "0", "Rony"
"2025-02-05 22:51:06", "1404178", "20.74.209.192:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:19", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-02-02 12:49:35", "1402480", "service-rchqbzvz-1301033415.sh.tencentapigw.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:14", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-02-01 20:47:38", "1402273", "https://vivaforevew.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:27:40", "100", "False", "", "None", "0", "Rony"
"2025-02-01 20:47:38", "1402274", "https://wersogkiwgow.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:18:37", "100", "False", "", "None", "0", "Rony"
"2025-01-31 13:44:30", "1398820", "162.252.173.12:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:11", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-31 12:01:38", "1398810", "162.252.173.12:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:11", "100", "False", "https://search.censys.io/hosts/162.252.173.12", "AS9009,backdoor,C2,censys,M247,Ransomhub", "0", "DonPasci"
"2025-01-31 07:01:30", "1398657", "8.134.108.73:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:51", "100", "False", "https://search.censys.io/hosts/8.134.108.73", "AS37963,censys,Viper", "0", "dyingbreeds_"
"2025-01-30 08:47:19", "1396136", "38.146.28.93:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:47:00", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-30 08:45:48", "1396135", "185.33.86.15:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:55", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-30 08:01:38", "1396130", "38.146.28.93:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:47:00", "100", "False", "https://search.censys.io/hosts/38.146.28.93", "AS174,backdoor,C2,censys,COGENT-174,Ransomhub", "0", "DonPasci"
"2025-01-30 04:01:31", "1396102", "185.33.86.15:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:55", "100", "False", "https://search.censys.io/hosts/185.33.86.15", "AS202015,backdoor,C2,censys,HZ-US-AS,Ransomhub", "0", "DonPasci"
"2025-01-26 08:46:00", "1394408", "54.38.94.225:8883", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:47:37", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-01-25 20:47:04", "1394158", "54.38.94.225:8880", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:47:36", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-01-22 17:46:05", "1391610", "45.82.85.50:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:47:25", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-18 16:10:00", "1386236", "https://135.181.31.18", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:10:41", "100", "False", "", "None", "0", "Gi7w0rm"
"2025-01-17 09:15:21", "1384933", "38.180.81.153:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:47:01", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:15:21", "1384934", "38.180.81.153:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:47:02", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:14:13", "1384921", "167.99.139.231:8004", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-08-11 12:44:16", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-01-17 09:13:19", "1384912", "185.174.101.240:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:46", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:13:19", "1384913", "185.174.101.240:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:46", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:13:19", "1384914", "185.174.101.69:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:46", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:13:19", "1384915", "185.174.101.69:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:44:46", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:12:27", "1384908", "108.181.115.171:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:43:19", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:12:27", "1384909", "108.181.115.171:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:43:19", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:12:27", "1384910", "108.181.182.143:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:43:20", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:12:27", "1384911", "108.181.182.143:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-08-11 12:43:20", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 07:45:55", "1384790", "at1.227api.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:19", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-17 07:45:55", "1384791", "at2.227api.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:19", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-17 07:45:55", "1384792", "at3.227api.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:19", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 13:55:47", "1381420", "77.238.236.123:18300", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:47:50", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-01-10 13:43:51", "1381067", "112.5.58.181:7001", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-08-11 12:43:24", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:38", "1380875", "update.mloadspring.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:25", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:38", "1380878", "upgrade.mloadspring.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:25", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:30", "1380837", "ns3.akawowfast.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:24", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:30", "1380841", "ns3.translategoos.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:24", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:29", "1380833", "ns2.translategoos.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:24", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:27", "1380818", "ns2.cmbchina.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:23", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:26", "1380815", "ns2.akawowfast.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:23", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:25", "1380811", "ns1.translategoos.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:23", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:20", "1380783", "ns1.akawowfast.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:22", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:20", "1380787", "ns1.cmbchina.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:22", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:18:57", "1380635", "8.219.78.159:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:13", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:18:43", "1380629", "70.34.196.238:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:18:28", "1380607", "47.98.134.252:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:16", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:17:20", "1380533", "207.148.68.118:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:53", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:16:21", "1380446", "139.180.189.95:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:15:44", "1380421", "118.25.91.151:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:35", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:15:43", "1380420", "117.72.39.83:43872", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:35", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-03 08:01:15", "1377524", "8.140.239.162:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:12", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2025-01-01 04:03:19", "1376919", "86.124.168.255:443", "ip:port", "botnet_cc", "js.fakeupdates", "FakeUpdate,GhoLoader,SocGholish", "FAKEUPDATES", "2026-08-11 12:48:00", "100", "False", "https://search.censys.io/hosts/86.124.168.255", "AS8708,c2,censys,RCS-RDS,SocGholish", "0", "DonPasci"
"2024-12-24 08:00:43", "1359401", "8.153.97.202:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:13", "100", "False", "https://search.censys.io/hosts/8.153.97.202", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2024-12-24 04:01:34", "1359309", "91.199.154.103:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:48:08", "100", "False", "https://search.censys.io/hosts/91.199.154.103", "AS62212,C2,censys,Sliver", "0", "DonPasci"
"2024-12-24 00:02:17", "1359295", "54.95.208.190:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:47:38", "100", "False", "https://search.censys.io/hosts/54.95.208.190", "AMAZON-02,AS16509,C2,censys,Havoc", "0", "DonPasci"
"2024-12-20 16:01:53", "1358842", "149.28.61.158:8773", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:49", "100", "False", "https://search.censys.io/hosts/149.28.61.158", "AS-VULTR,AS20473,C2,censys,Mythic", "0", "DonPasci"
"2024-12-16 16:01:41", "1357389", "45.56.69.210:3333", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:19", "100", "False", "https://search.censys.io/hosts/45.56.69.210", "AKAMAI-LINODE-AP,AS63949,censys,EvilGoPhish,panel,Phishing", "0", "DonPasci"
"2024-12-12 06:21:40", "1356002", "113.44.90.0:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:43:24", "100", "False", "https://search.censys.io/hosts/113.44.90.0", "AS55990,censys,Viper", "0", "dyingbreeds_"
"2024-12-06 07:36:52", "1352876", "139.196.126.161:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:33", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2024-12-02 21:01:15", "1350210", "117.72.39.83:4433", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:35", "100", "False", "https://search.censys.io/hosts/117.72.39.83", "AS141679,C2,censys", "0", "dyingbreeds_"
"2024-12-01 07:43:42", "1349957", "117.72.39.83:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:35", "100", "False", "None", "CobaltStrike,cs-watermark-391144938", "0", "abuse_ch"
"2024-11-30 20:06:19", "1349567", "216.118.101.24:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:19", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-30 20:06:11", "1349531", "216.118.101.132:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:57", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-30 20:06:08", "1349510", "216.118.101.199:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:11", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-30 20:06:04", "1349492", "216.118.101.216:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:15", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-30 20:05:51", "1349438", "216.118.101.54:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:46:28", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-29 13:56:30", "1348902", "216.118.101.108:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:53", "100", "False", "", "Viper", "0", "dyingbreeds_"
"2024-11-27 19:47:54", "1348295", "47.90.142.15:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:27", "100", "False", "", "censys,CobaltStrike", "0", "NDA0E"
"2024-11-27 19:47:07", "1348026", "8.137.114.210:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:15", "100", "False", "", "censys,CobaltStrike", "0", "NDA0E"
"2024-11-19 18:00:05", "1346058", "servicioremotoempresas.info", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:38", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-10-30 17:53:55", "1340201", "146.70.158.198:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:43:47", "75", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Sliver%20C2", "c2,sliver,sliverc2", "0", "TheRavenFile"
"2024-10-22 13:56:41", "1338675", "https://stripplasst.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:29:56", "100", "False", "https://www.vmray.com/latrodectus-a-year-in-the-making/", "c2,latrodectus,vmray", "0", "DonPasci"
"2024-10-22 13:56:39", "1338673", "https://skinnyjeanso.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:26:31", "100", "False", "https://www.vmray.com/latrodectus-a-year-in-the-making/", "c2,latrodectus,vmray", "0", "DonPasci"
"2024-10-22 13:56:34", "1338670", "https://coolarition.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:19:53", "100", "False", "https://www.vmray.com/latrodectus-a-year-in-the-making/", "c2,latrodectus,vmray", "0", "DonPasci"
"2024-10-01 16:02:09", "1332328", "195.100.198.220:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:45:17", "100", "False", "https://search.censys.io/hosts/195.100.198.220", "AS5400,BT,C2,censys,Mythic", "0", "DonPasci"
"2024-09-27 16:02:26", "1330880", "45.74.34.32:1995", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-11 12:47:21", "100", "False", "https://search.censys.io/hosts/45.74.34.32", "AS9009,C2,censys,DcRAT,M247,RAT", "0", "DonPasci"
"2024-09-25 08:00:47", "1329042", "118.25.148.25:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:23", "100", "False", "https://search.censys.io/hosts/118.25.148.25", "AS45090,C2,censys,CobaltStrike,cs-watermark-391144938,TENCENT-NET-AP", "0", "DonPasci"
"2024-09-20 08:01:06", "1326604", "206.210.123.104:8889", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:40", "100", "False", "https://search.censys.io/hosts/206.210.123.104", "AS33130,C2,censys,IASL,RAT", "0", "DonPasci"
"2024-09-19 14:07:51", "1326051", "https://isomicrotich.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:29:36", "50", "False", "None", "1.7,Alpha", "0", "spamhaus"
"2024-09-19 14:07:50", "1326052", "https://rilomenifis.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:21:33", "50", "False", "None", "1.7,Alpha", "0", "spamhaus"
"2024-08-30 07:05:10", "1317376", "https://pikchestop.com/test/", "url", "botnet_cc", "win.lactrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:28:48", "49", "False", "https://www.netskope.com/jp/blog/latrodectus-rapid-evolution-continues-with-latest-new-payload-features", "None", "0", "johannes"
"2024-08-30 07:05:10", "1317377", "https://indepahote.com/test/", "url", "botnet_cc", "win.lactrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-08-11 13:19:40", "49", "False", "https://www.netskope.com/jp/blog/latrodectus-rapid-evolution-continues-with-latest-new-payload-features", "None", "0", "johannes"
"2024-08-29 00:01:11", "1317070", "86.53.241.21:447", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:48:00", "100", "False", "https://search.censys.io/hosts/86.53.241.21", "AS3257,C2,censys,GTT-BACKBONE,RAT", "0", "DonPasci"
"2024-08-27 04:00:34", "1316522", "107.22.165.49:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:43:19", "100", "False", "https://search.censys.io/hosts/107.22.165.49", "AMAZON-AES,AS14618,C2,censys,RAT", "0", "DonPasci"
"2024-08-22 10:04:33", "1314694", "83.229.120.73:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:47:57", "100", "False", "https://search.censys.io/hosts/83.229.120.73", "AS139659,C2,censys,Mythic", "0", "DonPasci"
"2024-08-19 19:55:59", "1313657", "193.19.242.55:1443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:11", "100", "False", "https://search.censys.io/hosts/193.19.242.55", "AS35319,AS48964,C2,censys,RAT", "0", "DonPasci"
"2024-08-18 14:04:40", "1313194", "110.13.35.37:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:43:22", "100", "False", "https://search.censys.io/hosts/110.13.35.37", "AS9318,C2,censys,RAT,SKB-AS", "0", "DonPasci"
"2024-08-17 14:04:20", "1312402", "20.188.119.195:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:45:32", "100", "False", "https://search.censys.io/hosts/20.188.119.195", "AS8075,C2,censys,MICROSOFT-CORP-MSN-AS-BLOCK", "0", "DonPasci"
"2024-08-17 02:04:24", "1312338", "210.249.114.154:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:47", "100", "False", "https://search.censys.io/hosts/210.249.114.154", "AS2516,C2,censys,RAT", "0", "DonPasci"
"2024-08-16 14:02:33", "1312117", "20.188.119.195:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:45:32", "100", "False", "https://search.censys.io/hosts/20.188.119.195", "AS8075,C2,censys,MICROSOFT-CORP-MSN-AS-BLOCK", "0", "DonPasci"
"2024-08-15 22:40:43", "1311619", "23.24.178.35:3085", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:46:46", "100", "False", "https://search.censys.io/hosts/23.24.178.35", "AS20214,C2,censys,COMCAST-20214,RAT", "0", "DonPasci"
"2024-08-15 22:40:39", "1311614", "120.25.239.36:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:43:28", "100", "False", "https://search.censys.io/hosts/120.25.239.36", "ALIBABA-CN-NET,AS37963,C2,censys,RAT", "0", "DonPasci"
"2024-08-15 04:02:49", "1310952", "47.100.16.83:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:49:01", "100", "False", "None", "CobaltStrike,cs-watermark-391144938", "0", "abuse_ch"
"2024-08-11 21:50:57", "1309755", "146.70.158.198:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:43:47", "100", "False", "https://search.censys.io/hosts/146.70.158.198", "AS9009,C2,censys,M247", "0", "DonPasci"
"2024-07-09 19:05:36", "1296480", "43.138.0.179:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:18", "100", "False", "None", "CobaltStrike,cs-watermark-0,TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2024-07-09 06:51:58", "1296006", "213.149.181.121:469", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:49", "50", "False", "https://search.censys.io/hosts/213.149.181.121", "CYTA-NETWORK Internet Services,NetSupportRAT", "0", "drb_ra"
"2024-07-09 06:51:48", "1296003", "20.105.139.205:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:30", "50", "False", "https://search.censys.io/hosts/20.105.139.205", "MICROSOFT-CORP-MSN-AS-BLOCK,NetSupportRAT", "0", "drb_ra"
"2024-07-08 06:51:14", "1295752", "210.249.114.153:80", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:47", "50", "False", "https://search.censys.io/hosts/210.249.114.153", "KDDI KDDI CORPORATION,NetSupportRAT", "0", "drb_ra"
"2024-07-07 03:48:38", "1295405", "23.24.178.33:3085", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:46:46", "50", "False", "https://search.censys.io/hosts/23.24.178.33", "COMCAST-7922,NetSupportRAT", "0", "drb_ra"
"2024-07-03 06:52:14", "1292877", "210.249.114.154:80", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:47", "50", "False", "https://search.censys.io/hosts/210.249.114.154", "KDDI KDDI CORPORATION,NetSupportRAT", "0", "drb_ra"
"2024-07-01 10:05:40", "1291417", "198.244.197.118:9443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:24", "50", "False", "https://search.censys.io/hosts/198.244.197.118", "NetSupportRAT,OVH", "0", "drb_ra"
"2024-07-01 10:05:30", "1291414", "206.210.123.104:8888", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:39", "50", "False", "https://search.censys.io/hosts/206.210.123.104", "IASL,NetSupportRAT", "0", "drb_ra"
"2024-07-01 10:05:19", "1291411", "61.96.204.117:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:47:40", "50", "False", "https://search.censys.io/hosts/61.96.204.117", "DREAMX-AS DREAMLINE CO.,NetSupportRAT", "0", "drb_ra"
"2024-07-01 10:05:15", "1291410", "185.23.192.33:444", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:44:53", "50", "False", "https://search.censys.io/hosts/185.23.192.33", "NetSupportRAT,WINET", "0", "drb_ra"
"2024-07-01 10:05:10", "1291409", "2.136.235.200:3085", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:25", "50", "False", "https://search.censys.io/hosts/2.136.235.200", "NetSupportRAT,TELEFONICA_DE_ESPANA", "0", "drb_ra"
"2024-07-01 10:04:31", "1291397", "210.249.114.153:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-08-11 12:45:47", "50", "False", "https://search.censys.io/hosts/210.249.114.153", "KDDI KDDI CORPORATION,NetSupportRAT", "0", "drb_ra"
"2024-06-30 21:00:04", "1291297", "londopas.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:38", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-06-30 21:00:03", "1291296", "berjimek.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:38", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-06-30 10:13:19", "1291010", "www.qianxinnbplus.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:38", "100", "False", "None", "CobaltStrike,cs-watermark-666666666,HKLNIL Landui Cloud ComputingHK Limited", "0", "drb_ra"
"2024-06-26 17:07:43", "1289423", "152.32.202.240:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:42", "100", "False", "None", "CobaltStrike,cs-watermark-666666", "0", "abuse_ch"
"2024-06-22 06:45:48", "1287670", "91.199.154.103:34211", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:48:08", "50", "False", "https://search.censys.io/hosts/91.199.154.103", "Sliver", "0", "drb_ra"
"2024-06-16 14:42:03", "1285430", "ieee-ecce.info", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:39", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-06-16 14:42:03", "1285431", "kauzalvip.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:39", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-06-16 14:42:03", "1285432", "nakit-yok.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:39", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-06-16 14:42:03", "1285433", "nathanhr.services", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:39", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-06-10 09:26:05", "1283657", "support.whatsappsignup.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:39", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,PEG TECH INC", "0", "drb_ra"
"2024-06-02 19:42:15", "1278385", "static.nvidiadrives.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:45", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-06-02 08:38:33", "1278172", "119.91.208.190:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:41", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2024-06-01 13:08:25", "1277937", "47.109.69.135:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:44", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Hangzhou Alibaba Advertising Co.Ltd.", "0", "drb_ra"
"2024-05-31 12:57:33", "1277588", "101.43.32.212:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:40", "100", "False", "None", "CobaltStrike,cs-watermark-100000,Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2024-05-29 12:53:46", "1276810", "asterchildrenshoes.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:45", "100", "False", "None", "BL Networks,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-05-29 12:52:55", "1276802", "124.223.41.181:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:42", "100", "False", "None", "CobaltStrike,cs-watermark-666666666,Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2024-05-29 10:17:04", "1276786", "8.210.9.201:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:45", "100", "False", "None", "ALIBABA-CN-NET Alibaba US Technology Co. Ltd.,CobaltStrike,cs-watermark-0", "0", "drb_ra"
"2024-05-25 22:18:29", "1275630", "pt-security.ru", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:39", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,MTW-AS", "0", "drb_ra"
"2024-05-24 13:15:35", "1274726", "47.92.127.53:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:44", "100", "False", "None", "CobaltStrike,cs-watermark-391144938,Hangzhou Alibaba Advertising Co.Ltd.", "0", "drb_ra"
"2024-05-22 11:06:58", "1273973", "119.28.83.149:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:41", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2024-05-21 18:51:48", "1273882", "51.15.16.116:443", "ip:port", "botnet_cc", "js.fakeupdates", "FakeUpdate,GhoLoader,SocGholish", "FAKEUPDATES", "2026-08-11 12:47:33", "50", "False", "https://search.censys.io/hosts/51.15.16.116", "Online SAS,SocGholish", "0", "drb_ra"
"2024-05-21 12:53:29", "1273456", "139.159.203.44:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:42", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,HWCSNET Huawei Cloud Service data center", "0", "drb_ra"
"2024-05-19 07:56:13", "1272788", "123.58.198.236:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:41", "100", "False", "None", "CobaltStrike,cs-watermark-391144938,UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED", "0", "drb_ra"
"2024-05-16 07:53:43", "1271699", "vip8806.mom", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:39", "100", "False", "None", "CNSERVERS LLC,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-05-15 22:13:26", "1271605", "blmdiscount.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:39", "100", "False", "None", "CobaltStrike,cs-watermark-674054486,FBWNETWORKS", "0", "drb_ra"
"2024-05-15 22:13:26", "1271606", "91.238.181.235:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:45", "100", "False", "None", "CobaltStrike,cs-watermark-674054486,FBWNETWORKS", "0", "drb_ra"
"2024-05-15 15:33:07", "1271347", "118.25.85.198:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:35", "100", "False", "https://search.censys.io/hosts/118.25.85.198", "AS45090,c2,censys,CobaltStrike,cs-watermark-305419896,TENCENT-NET-AP", "0", "DonPasci"
"2024-05-14 10:14:21", "1270684", "64.7.198.58:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:44", "100", "False", "None", "BLNWX,CobaltStrike,cs-watermark-426352781", "0", "drb_ra"
"2024-05-11 22:47:31", "1269727", "113.31.105.33:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:40", "100", "False", "None", "China Telecom (Group),CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-05-11 22:47:10", "1269724", "185.196.8.18:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:43", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Simple Carrier LLC", "0", "drb_ra"
"2024-05-11 22:47:09", "1269723", "action-winds.cfd", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:45", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Simple Carrier LLC", "0", "drb_ra"
"2024-05-11 22:47:08", "1269721", "microstar.cfd", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:46", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Simple Carrier LLC", "0", "drb_ra"
"2024-05-07 10:14:57", "1267565", "113.31.106.106:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:40", "100", "False", "None", "CHINANET-SHANGHAI-MAN China Telecom Group,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-05-07 07:48:08", "1267486", "111.230.12.238:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:40", "100", "False", "https://search.censys.io/hosts/111.230.12.238", "AS45090,c2,censys,CobaltStrike,cs-watermark-391144938,TENCENT-NET-AP", "0", "DonPasci"
"2024-05-06 12:49:25", "1266959", "134.122.130.186:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:42", "100", "False", "None", "BGPNET Global ASN,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-04-29 12:51:26", "1263972", "134.122.130.181:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:42", "100", "False", "None", "BGPNET Global ASN,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-04-28 17:59:06", "1263319", "124.71.106.234:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:42", "100", "False", "None", "CobaltStrike,cs-watermark-666666666,Huawei Cloud Service data center", "0", "drb_ra"
"2024-04-26 12:59:31", "1262666", "118.31.116.9:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:41", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Hangzhou Alibaba Advertising Co.Ltd.", "0", "drb_ra"
"2024-04-25 22:12:56", "1262568", "8.134.11.7:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:45", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-04-24 13:08:20", "1261845", "165.227.108.186:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:43", "100", "False", "None", "CobaltStrike,cs-watermark-970865301,DigitalOcean LLC", "0", "drb_ra"
"2024-04-23 18:05:49", "1260893", "80.66.75.9:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:45", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,GRIZ-INET-SERVICE", "0", "drb_ra"
"2024-04-23 18:05:43", "1260890", "101.201.54.74:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:39", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Hangzhou Alibaba Advertising Co.Ltd.", "0", "drb_ra"
"2024-04-21 15:09:17", "1259796", "62.204.41.11:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:44", "100", "False", "https://search.censys.io/hosts/62.204.41.11", "AS59425,c2,censys,CobaltStrike,cs-watermark-1580103824,HORIZONMSK-AS", "0", "DonPasci"
"2024-04-18 16:17:26", "1258693", "https://23.88.47.9/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:32:26", "100", "False", "", "Vidar", "0", "crep1x"
"2024-04-11 10:15:16", "1255726", "124.220.6.158:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:39", "100", "False", "https://search.censys.io/search?resource=hosts&virtual_hosts=EXCLUDE&q=%28services.software.uniform_resource_identifier%3A+%60cpe%3A2.3%3Aa%3Afortra%3Acobalt_strike%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%60%29+and+autonomous_system.name%3D%60TENCENT-NET-AP+Shenzhen+Tencent+Computer+Systems+Company+Limited%60", "AS45090,c2,censys,CobaltStrike,TENCENT-NET-AP", "0", "DonPasci"
"2024-04-11 10:15:15", "1255727", "124.220.6.158:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:39", "100", "False", "https://search.censys.io/search?resource=hosts&virtual_hosts=EXCLUDE&q=%28services.software.uniform_resource_identifier%3A+%60cpe%3A2.3%3Aa%3Afortra%3Acobalt_strike%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%3A%2A%60%29+and+autonomous_system.name%3D%60TENCENT-NET-AP+Shenzhen+Tencent+Computer+Systems+Company+Limited%60", "AS45090,c2,censys,CobaltStrike,TENCENT-NET-AP", "0", "DonPasci"
"2024-04-02 10:17:26", "1252542", "185.196.10.121:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:43", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,SIMPLECARRIER", "0", "drb_ra"
"2024-03-27 14:42:02", "1250157", "soneypaly.club", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:46", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-03-27 07:57:29", "1249815", "47.105.69.34:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:44", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-03-22 19:47:18", "1248363", "https://titnovacrion.top/live/", "url", "botnet_cc", "win.unidentified_111", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Unidentified 111 (Latrodectus)", "2026-08-11 13:34:34", "100", "False", "", "None", "0", "Cryptolaemus1"
"2024-03-09 20:54:40", "1245476", "47.100.87.177:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:43", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-03-06 20:55:37", "1244781", "194.165.16.55:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:43", "100", "False", "None", "CobaltStrike,cs-watermark-674054486,FLYSERVERS-ENDCLIENTS", "0", "drb_ra"
"2024-03-06 10:12:56", "1244726", "googlesupportacc.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:46", "100", "False", "None", "ASSEFLOW,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-02-21 22:13:19", "1241656", "121.43.55.149:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:41", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike,cs-watermark-391144938", "0", "drb_ra"
"2024-02-07 10:12:21", "1237621", "qw.regcssv.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:48", "100", "False", "None", "CobaltStrike,cs-watermark-1580103824,FLYSERVERS-ASN", "0", "drb_ra"
"2024-02-03 19:38:15", "1236577", "ec2-3-22-66-152.us-east-2.compute.amazonaws.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:48", "100", "False", "https://search.censys.io/hosts/3.22.66.152+ec2-3-22-66-152.us-east-2.compute.amazonaws.com", "AMAZON-02,AS16509,C2,censys", "0", "thehappydinoa"
"2024-02-02 06:00:13", "1236276", "20.56.70.245:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:43", "80", "False", "None", "None", "0", "malpulse"
"2024-01-30 06:20:34", "1235332", "www.louangelwolf.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:50", "100", "False", "", "cobaltstrike,cs-watermark-1551089073", "0", "myceliumbroker"
"2024-01-28 06:22:18", "1234854", "kkudndkwatnfevcaqeefytqnh.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:48", "100", "False", "", "cobaltstrike,cs-watermark-987654321", "0", "myceliumbroker"
"2024-01-28 06:22:17", "1234859", "whxzqkbbtzvdyxdeseoiyujzs.co", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:50", "100", "False", "", "cobaltstrike,cs-watermark-987654321", "0", "myceliumbroker"
"2024-01-28 06:22:17", "1234860", "uohhunkmnfhbimtagizqgwpmv.to", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:49", "100", "False", "", "cobaltstrike,cs-watermark-987654321", "0", "myceliumbroker"
"2024-01-27 14:31:40", "1234928", "114.55.133.151:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:41", "100", "False", "https://search.censys.io/hosts/114.55.133.151", "AS37963,C2,censys", "0", "thehappydinoa"
"2024-01-27 14:31:20", "1234909", "117.72.39.83:30005", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:34", "100", "False", "https://search.censys.io/hosts/117.72.39.83", "AS141679,C2,censys", "0", "thehappydinoa"
"2024-01-24 18:49:24", "1234304", "38.147.189.199:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:47:01", "50", "False", "https://search.censys.io/hosts/38.147.189.199", "Pupy RAT,XNNET", "0", "drb_ra"
"2024-01-23 13:53:21", "1233919", "www.idn15r69vh3fwhzclfoeuaoy.today", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:50", "100", "False", "https://search.censys.io/hosts/8.219.229.99+www.idn15r69vh3fwhzclfoeuaoy.today", "AS45102,C2,censys", "0", "thehappydinoa"
"2024-01-18 13:44:13", "1231802", "164-90-169-184.cprapid.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:50", "100", "False", "https://search.censys.io/hosts/164.90.169.184+164-90-169-184.cprapid.com", "C2,censys,DIGITALOCEAN-ASN", "0", "thehappydinoa"
"2024-01-16 08:13:32", "1230963", "https://65.21.187.53/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-11 13:10:20", "100", "False", "", "Vidar", "0", "crep1x"
"2024-01-15 16:27:00", "1230909", "lz4.tiktok123.life", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:49", "100", "False", "", "cobaltstrike,cs-watermark-987654321", "0", "myceliumbroker"
"2024-01-13 06:47:25", "1230478", "164.92.79.49:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:44:14", "50", "False", "https://search.censys.io/hosts/164.92.79.49", "DIGITALOCEAN-ASN,Havoc", "0", "drb_ra"
"2024-01-12 18:36:24", "1230429", "site.dev.hutechweb.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:49", "100", "False", "", "cobaltstrike,cs-watermark-987654321", "0", "myceliumbroker"
"2024-01-11 06:54:21", "1230076", "ns1.fiducaire.lu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:49", "100", "False", "", "cobaltstrike,cs-watermark-1263551644", "0", "myceliumbroker"
"2024-01-11 06:54:21", "1230077", "ns1.asurances.lu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:49", "100", "False", "", "cobaltstrike,cs-watermark-1263551644", "0", "myceliumbroker"
"2024-01-11 06:54:20", "1230078", "sagsblog.telinduslab.lu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:49", "100", "False", "", "cobaltstrike,cs-watermark-1263551644", "0", "myceliumbroker"
"2024-01-11 06:54:20", "1230079", "ns1.jocelynhealth.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:49", "100", "False", "", "cobaltstrike,cs-watermark-1590258876", "0", "myceliumbroker"
"2024-01-10 10:50:13", "1229840", "ns.emaratalyoum.me", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:49", "100", "False", "", "cobaltstrike,cs-watermark-1727139162", "0", "myceliumbroker"
"2024-01-10 06:48:20", "1229817", "161.35.239.147:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:44:09", "50", "False", "https://search.censys.io/hosts/161.35.239.147", "DIGITALOCEAN-ASN,Havoc", "0", "drb_ra"
"2024-01-09 14:55:19", "1229694", "emailmigration.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:48", "100", "False", "", "cobaltstrike,cs-watermark-1892870985", "0", "myceliumbroker"
"2024-01-09 14:55:17", "1229695", "ns1.emailmigration.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:49", "100", "False", "", "cobaltstrike,cs-watermark-1892870985", "0", "myceliumbroker"
"2024-01-09 08:45:29", "1229661", "111.92.243.236:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:40", "100", "False", "None", "CobaltStrike,cs-watermark-666666666,HFTCL-AS-AP High Family Technology Co. Limited", "0", "drb_ra"
"2024-01-09 05:30:32", "1229599", "82.65.19.134:4443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:47:57", "100", "False", "https://search.censys.io/hosts/82.65.19.134", "C2,censys,PROXAD,RAT", "0", "thehappydinoa"
"2024-01-05 21:31:13", "1228458", "139.9.62.19:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:42", "100", "False", "https://search.censys.io/hosts/139.9.62.19", "C2,censys", "0", "thehappydinoa"
"2024-01-05 14:48:41", "1228181", "101.133.225.51:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:26", "100", "False", "https://search.censys.io/hosts/101.133.225.51", "C2,censys", "0", "thehappydinoa"
"2024-01-05 06:45:36", "1228033", "143.110.151.209:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:43:44", "50", "False", "https://search.censys.io/hosts/143.110.151.209", "DIGITALOCEAN-ASN,Sliver", "0", "drb_ra"
"2024-01-02 14:31:12", "1227297", "106.54.209.36:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:40", "100", "False", "https://search.censys.io/hosts/106.54.209.36", "C2,censys", "0", "thehappydinoa"
"2023-12-30 11:33:25", "1226488", "astra4512.startdedicated.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:50", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,GD-EMEA-DC-SXB1", "0", "drb_ra"
"2023-12-27 22:15:29", "1224105", "cs.xcb.one", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:50", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,MICROSOFT-CORP-MSN-AS-BLOCK", "0", "drb_ra"
"2023-12-26 06:46:27", "1223678", "8.140.203.92:7817", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-08-11 12:47:52", "50", "False", "https://search.censys.io/hosts/8.140.203.92", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,Deimos", "0", "drb_ra"
"2023-12-18 05:00:11", "1221451", "62.234.27.204:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:44", "80", "False", "None", "None", "0", "malpulse"
"2023-12-16 22:12:14", "1213636", "MicrosoftSyst3m.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:51", "100", "False", "None", "CobaltStrike,cs-watermark-674054486,GLOBALLAYER", "0", "drb_ra"
"2023-12-15 18:59:31", "1213211", "117.72.39.83:33333", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:35", "100", "False", "https://search.censys.io/hosts/117.72.39.83", "C2,censys", "0", "thehappydinoa"
"2023-12-04 08:45:50", "1209246", "unzip2.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:51", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP-CN Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2023-11-28 13:32:35", "1207072", "60.205.115.92:60000", "ip:port", "botnet_cc", "apk.viper_rat", "None", "Viper RAT", "2026-08-11 12:47:40", "100", "False", "https://search.censys.io/hosts/60.205.115.92", "C2,censys,RAT", "0", "thehappydinoa"
"2023-11-25 02:48:24", "1206188", "149.28.37.137:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-10 09:05:05", "100", "False", "https://search.censys.io/hosts/149.28.37.137", "AS-CHOOPA,C2,censys", "0", "thehappydinoa"
"2023-11-25 02:48:24", "1206189", "149.28.37.137:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-10 08:05:04", "100", "False", "https://search.censys.io/hosts/149.28.37.137", "AS-CHOOPA,C2,censys", "0", "thehappydinoa"
"2023-11-24 08:21:04", "1205166", "techsyscloud.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-11-24 08:21:04", "1205167", "yify88.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-11-24 08:21:02", "1205164", "americcorp.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:51", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-11-22 20:04:09", "1204685", "tech-guard.vguard.tech", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:52", "100", "False", "https://search.censys.io/hosts/44.204.120.159+tech-guard.vguard.tech", "AMAZON-AES,C2,censys", "0", "thehappydinoa"
"2023-11-15 20:24:37", "1202628", "ns.manager.moonlighter.space", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:52", "100", "False", "None", "CobaltStrike,cs-watermark-1893164628,DIGITALOCEAN-ASN", "0", "drb_ra"
"2023-11-09 17:50:07", "1201144", "101.34.222.38:60000", "ip:port", "botnet_cc", "apk.viper_rat", "None", "Viper RAT", "2026-08-11 12:43:03", "100", "False", "https://search.censys.io/hosts/101.34.222.38", "C2,censys,RAT", "0", "thehappydinoa"
"2023-11-09 04:06:44", "1200343", "dev.theokanegroup.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:53", "100", "False", "https://search.censys.io/hosts/134.209.164.110+dev.theokanegroup.com", "C2,censys,DIGITALOCEAN-ASN", "0", "thehappydinoa"
"2023-11-06 18:07:30", "1199506", "bwyb.love", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:51", "100", "False", "https://search.censys.io/hosts/47.242.158.114+bwyb.love", "C2,censys", "0", "thehappydinoa"
"2023-11-05 15:00:42", "1199160", "www.sunwu.world", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:53", "100", "False", "https://search.censys.io/hosts/82.157.149.194+www.sunwu.world", "C2,censys", "0", "thehappydinoa"
"2023-10-24 10:39:59", "1192255", "139.155.148.131:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:42", "100", "False", "https://search.censys.io/hosts/139.155.148.131", "C2,censys", "0", "thehappydinoa"
"2023-10-20 21:57:56", "1191379", "www.goocoinorg.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:52", "100", "False", "https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=INCLUDE&q=name%3A+www.goocoinorg.com&ref=threatfox", "C2,censys", "0", "thehappydinoa"
"2023-10-16 08:49:32", "1189545", "airlinesapp.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:51", "100", "False", "None", "CobaltStrike,cs-watermark-587247372,DigitalOcean LLC", "0", "drb_ra"
"2023-10-13 19:49:34", "1188605", "lectricelfuel.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:52", "100", "False", "https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=INCLUDE&q=name%3A+lectricelfuel.com&ref=threatfox", "C2,censys,DIGITALOCEAN-ASN", "0", "thehappydinoa"
"2023-10-12 01:35:38", "1187879", "143.110.151.209:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-08-11 12:43:43", "90", "False", "https://search.censys.io/hosts/143.110.151.209", "C2,censys,DIGITALOCEAN-ASN", "0", "thehappydinoa"
"2023-10-11 12:59:56", "1187462", "117.72.8.192:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:41", "100", "False", "https://search.censys.io/hosts/117.72.8.192", "C2,censys", "0", "thehappydinoa"
"2023-09-30 16:12:13", "1180378", "111.229.187.212:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:40", "80", "False", "None", "None", "0", "malpulse"
"2023-09-21 09:29:08", "1165497", "igo0gle.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:50", "100", "False", "None", "AS-ALVIVA,CobaltStrike,cs-watermark-674054486", "0", "drb_ra"
"2023-09-20 18:47:20", "1165172", "8.217.217.243:8082", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-08-11 12:47:52", "50", "False", "https://search.censys.io/hosts/8.217.217.243", "ALIBABA-CN-NET Alibaba US Technology Co. Ltd.,Deimos", "0", "drb_ra"
"2023-09-09 20:06:55", "1155921", "csxv.sec.cm", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:51", "100", "False", "None", "CHANGWAY-AS,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2023-09-05 21:52:59", "1155319", "43.136.38.59:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:43", "100", "False", "None", "CobaltStrike,cs-watermark-1580103824,Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2023-08-26 18:42:05", "1152278", "withoutedge.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-26 18:42:04", "1152277", "thconnewfoot.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-26 18:42:03", "1152274", "caixas.link", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-26 18:42:03", "1152275", "ddllsearch.site", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-26 18:42:03", "1152276", "gepcash.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-26 18:42:02", "1152272", "amazonclouds.link", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-26 18:42:02", "1152273", "amur-city.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-25 06:48:54", "1151932", "77.74.208.123:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-11 12:47:50", "50", "False", "https://search.censys.io/hosts/77.74.208.123", "BRETAGNETELECOM,Havoc", "0", "drb_ra"
"2023-08-23 11:56:21", "1151693", "43.153.222.28:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:30", "100", "False", "None", "CobaltStrike,cs-watermark-100000,Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2023-08-14 18:46:43", "1149951", "164.92.145.128:7810", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-08-11 12:44:13", "50", "False", "https://search.censys.io/hosts/164.92.145.128", "Brute Ratel C4,DIGITALOCEAN-ASN", "0", "drb_ra"
"2023-08-14 16:00:05", "1149946", "pctor.link", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-14 16:00:04", "1149945", "tehomics.link", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-14 16:00:03", "1149944", "instant-healthonline.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-05 14:38:23", "1148731", "stratpringl.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:55", "100", "False", "None", "CobaltStrike,cs-watermark-1580103824,PINDC-AS", "0", "drb_ra"
"2023-08-04 11:01:52", "1148487", "onlinetechdesk.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:56", "100", "False", "None", "AS-COLOCROSSING,CobaltStrike,cs-watermark-587247372", "0", "drb_ra"
"2023-08-03 10:25:44", "1146843", "harmonyshoused.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:56", "100", "False", "None", "CobaltStrike,cs-watermark-206546002,HVC-AS", "0", "drb_ra"
"2023-08-03 10:24:41", "1146834", "api.office-updates.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:51", "100", "False", "None", "CobaltStrike,cs-watermark-494165167,DIGITALOCEAN-ASN", "0", "drb_ra"
"2023-08-02 10:24:58", "1146619", "mkbkygbgwcdc.buzz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:55", "100", "False", "None", "CobaltStrike,cs-watermark-391144938,KAOPU-HK Kaopu Cloud HK Limited", "0", "drb_ra"
"2023-07-25 10:17:22", "1140114", "tcessolution.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:53", "100", "False", "None", "AS202973,CobaltStrike,cs-watermark-587247372", "0", "drb_ra"
"2023-07-15 12:48:31", "1138196", "rw1.sentrysource.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:49", "100", "False", "None", "CobaltStrike,cs-watermark-93937751,ROGERS-COMMUNICATIONS", "0", "drb_ra"
"2023-07-07 19:56:07", "1136628", "198.13.42.85:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:52", "100", "False", "None", "CobaltStrike,cs-watermark-100000,The Constant Company LLC", "0", "drb_ra"
"2023-07-07 19:56:05", "1136627", "aaa.ad4min.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:18", "100", "False", "None", "CobaltStrike,cs-watermark-100000,The Constant Company LLC", "0", "drb_ra"
"2023-07-03 15:42:02", "1135804", "pedagogists.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-07-03 15:42:01", "1135803", "cdnsupply.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-06-28 22:51:22", "1134787", "1.15.248.225:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:39", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2023-06-26 08:12:17", "1134128", "check1.judicical.ml", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:20", "100", "False", "None", "CNSERVERS,CobaltStrike,cs-watermark-100000000", "0", "drb_ra"
"2023-06-26 08:11:33", "1134127", "check.judicical.ml", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:20", "100", "False", "None", "CNSERVERS,CobaltStrike,cs-watermark-100000000", "0", "drb_ra"
"2023-06-22 17:12:29", "1133505", "usadevgroup.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:57", "100", "False", "None", "CobaltStrike,cs-watermark-587247372,WAICORE-TRANSIT", "0", "drb_ra"
"2023-06-20 18:49:40", "1132563", "103.27.186.185:9001", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:43:09", "50", "False", "https://search.censys.io/hosts/103.27.186.185", "Pupy RAT,SNL-HK Starry Network Limited", "0", "drb_ra"
"2023-06-11 22:26:06", "1128165", "heastings.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:57", "100", "False", "None", "CobaltStrike,cs-watermark-206546002,M247", "0", "drb_ra"
"2023-06-09 20:00:05", "1127715", "unitechdb.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-06-09 20:00:04", "1127713", "cornptia.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-06-09 20:00:04", "1127714", "eyefinancemonitor.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-06-08 16:27:41", "1127447", "surplusofer.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:58", "100", "False", "None", "CobaltStrike,cs-watermark-206546002,HVC-AS", "0", "drb_ra"
"2023-06-05 09:01:38", "1126556", "ns3.fuckworldxxx.shop", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:24", "100", "False", "None", "CobaltStrike,cs-watermark-1234567890,Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2023-06-05 09:01:11", "1126555", "ns2.fuckworldxxx.shop", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:23", "100", "False", "None", "CobaltStrike,cs-watermark-1234567890,Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2023-06-05 09:00:46", "1126554", "ns1.fuckworldxxx.shop", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:22", "100", "False", "None", "CobaltStrike,cs-watermark-1234567890,Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2023-05-25 15:42:02", "1122048", "dianqi2.dianqi1.jiayongdianqi.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:21", "100", "False", "None", "CobaltStrike,cs-watermark-492498911,XNNET LLC", "0", "drb_ra"
"2023-05-25 15:41:46", "1122047", "dianqi1.dianqi2.jiayongdianqi.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:20", "100", "False", "None", "CobaltStrike,cs-watermark-492498911,XNNET LLC", "0", "drb_ra"
"2023-05-25 15:41:31", "1122046", "dianqi2.jiayongdianqi.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:21", "100", "False", "None", "CobaltStrike,cs-watermark-492498911,XNNET LLC", "0", "drb_ra"
"2023-05-25 15:41:10", "1122045", "dianqi1.jiayongdianqi.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:20", "100", "False", "None", "CobaltStrike,cs-watermark-492498911,XNNET LLC", "0", "drb_ra"
"2023-05-24 19:35:48", "1121460", "update.microsoftapply.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:25", "100", "False", "None", "CobaltStrike,cs-watermark-Not Found,DediPath", "0", "drb_ra"
"2023-05-23 12:37:36", "1120772", "australiansuper.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:57", "100", "False", "None", "Amazon.com Inc.,CobaltStrike,cs-watermark-348901740", "0", "drb_ra"
"2023-05-16 10:00:03", "1116637", "sheersdesigns.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-05-16 10:00:02", "1116636", "artmicrodesign.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-05-10 18:49:37", "1114522", "103.27.186.185:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:43:09", "50", "False", "https://search.censys.io/hosts/103.27.186.185", "Pupy RAT,SNL-HK Starry Network Limited", "0", "drb_ra"
"2023-05-06 16:13:31", "1112839", "situotech.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:58", "100", "False", "None", "CobaltStrike,cs-watermark-587247372,HARMONYHOSTING-AS", "0", "drb_ra"
"2023-05-05 12:42:12", "1111492", "157.245.155.179:9000", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-11 12:44:03", "50", "False", "https://search.censys.io/hosts/157.245.155.179", "DIGITALOCEAN-ASN,Pupy RAT", "0", "drb_ra"
"2023-05-04 06:46:43", "1110863", "39.106.36.96:443", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-08-11 12:47:05", "50", "False", "https://search.censys.io/hosts/39.106.36.96", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,Deimos", "0", "drb_ra"
"2023-05-04 06:46:41", "1110862", "36.95.131.171:9091", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-08-11 12:46:58", "50", "False", "https://search.censys.io/hosts/36.95.131.171", "Deimos,TELKOMNET-AS-AP PT Telekomunikasi Indonesia", "0", "drb_ra"
"2023-05-04 06:46:35", "1110860", "18.162.155.202:443", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-08-11 12:44:41", "50", "False", "https://search.censys.io/hosts/18.162.155.202", "AMAZON-02,Deimos", "0", "drb_ra"
"2023-05-04 06:46:33", "1110859", "8.218.26.114:443", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-08-11 12:47:52", "50", "False", "https://search.censys.io/hosts/8.218.26.114", "ALIBABA-CN-NET Alibaba US Technology Co. Ltd.,Deimos", "0", "drb_ra"
"2023-05-04 06:46:30", "1110858", "3.209.12.178:3060", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-08-11 12:46:51", "50", "False", "https://search.censys.io/hosts/3.209.12.178", "AMAZON-AES,Deimos", "0", "drb_ra"
"2023-04-22 18:00:03", "1106335", "maboloud.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-04-22 18:00:03", "1106336", "matong.buzz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-04-21 10:20:17", "1105988", "qw.sveexec.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:58", "100", "False", "None", "CobaltStrike,cs-watermark-1580103824,GLOBALLAYER", "0", "drb_ra"
"2023-04-15 12:28:52", "1103771", "77.242.250.36:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:45", "100", "False", "None", "CobaltStrike,cs-watermark-1416875320", "0", "drb_ra"
"2023-04-12 09:02:56", "1102558", "lls-rs.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:58", "100", "False", "None", "CobaltStrike,cs-watermark-0,PROSPERO-AS", "0", "drb_ra"
"2023-04-03 07:21:03", "1096685", "iony.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-04-03 07:21:03", "1096686", "office36o.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-04-03 07:21:02", "1096683", "feyrijavac.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-04-03 07:21:02", "1096684", "fidelyus.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-03-29 22:27:30", "1095276", "jacketsupport.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:59", "100", "False", "None", "CobaltStrike,cs-watermark-587247372,GLOBALLAYER", "0", "drb_ra"
"2023-03-29 04:51:21", "1095042", "duckducklive.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:59", "100", "False", "https://www.virustotal.com/gui/file/b5da1db6d69f2f872e603beb0f121c68f3320ed33a0c9835bfc1a931d177c947", "391144938,Beacon,Cobalt Strike,CobaltStrike", "0", "AndreGironda"
"2023-03-28 15:52:23", "1094484", "louvree.abudhabe.info", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:56", "100", "False", "None", "CobaltStrike,cs-watermark-1826426664,EMIRATES-INTERNET Emirates Internet", "0", "drb_ra"
"2023-03-20 17:21:02", "1092077", "jquerymaingame.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-03-20 17:21:02", "1092078", "mail-my-account.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-03-20 17:21:02", "1092079", "my-accounts-gooogle.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-03-20 17:21:02", "1092080", "pegistrationads.site", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-03-20 17:21:01", "1092075", "eaglehardwares.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-03-20 17:21:01", "1092076", "information.baby", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-03-20 13:36:29", "1092009", "moviegallerys.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:59", "100", "False", "None", "CobaltStrike,cs-watermark-206546002,UAB Cherry Servers", "0", "drb_ra"
"2023-03-17 22:40:17", "1091575", "acroserver.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:59", "100", "False", "None", "CobaltStrike,cs-watermark-674054486,Flyservers S.A.", "0", "drb_ra"
"2023-03-17 19:45:49", "1091535", "atechniques.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:59", "100", "False", "None", "AEZA-AS,CobaltStrike,cs-watermark-674054486", "0", "drb_ra"
"2023-03-17 13:33:15", "1091454", "winsatoom.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:00", "100", "False", "None", "AS-CHOOPA,CobaltStrike,cs-watermark-668694132", "0", "drb_ra"
"2023-03-13 04:47:12", "1087542", "devoinnanote.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:59", "100", "False", "None", "CobaltStrike,cs-watermark-2130772225,SHARKTECH", "0", "drb_ra"
"2023-02-26 09:03:09", "1082976", "ponzinivek.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:02", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-26 09:03:09", "1082977", "ruplearben.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:02", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-26 09:03:09", "1082978", "talonbilling.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:03", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-26 09:03:09", "1082979", "gorillagaz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:03", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-26 09:03:09", "1082980", "chanimoblie.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:03", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-25 14:42:02", "1082871", "kbnexc.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:01", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-25 14:42:01", "1082870", "jquerysslx.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:01", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-25 13:15:07", "1082838", "e-servicesolutions.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:59", "100", "False", "None", "AEZA GROUP Ltd,CobaltStrike,cs-watermark-674054486", "0", "drb_ra"
"2023-02-24 02:30:56", "1082591", "devsecurityservices.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:00", "100", "False", "None", "CobaltStrike,cs-watermark-674054486,Flyservers S.A.", "0", "drb_ra"
"2023-02-23 13:06:07", "1082417", "www.vmware.rest", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:04", "100", "False", "None", "AS-CHOOPA,CobaltStrike,cs-watermark-1234567890", "0", "drb_ra"
"2023-02-17 18:25:01", "1081018", "galspost.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:01", "100", "False", "None", "CobaltStrike,cs-watermark-1101991775,Microsoft Corporation", "0", "drb_ra"
"2023-02-16 14:54:22", "1080735", "imvcatool.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:01", "100", "False", "None", "AEZA-AS,CobaltStrike,cs-watermark-674054486", "0", "drb_ra"
"2023-02-04 19:39:46", "1078198", "aspnetcenter.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:03", "100", "False", "None", "CobaltStrike,Web Gostaran Bandar Company PJS", "0", "drb_ra"
"2023-02-04 18:42:02", "1078172", "audelr.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-04 18:42:02", "1078173", "csou.link", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-04 18:42:02", "1078174", "integrated-security.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-04 18:42:02", "1078175", "uranustechsolution.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-03 17:24:39", "1078062", "getsafeblog.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:04", "100", "False", "None", "CobaltStrike,PLI-AS", "0", "drb_ra"
"2023-02-03 00:16:03", "1077913", "39.107.242.125:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 12:48:57", "75", "False", "https://www.redpacketsecurity.com/cobalt-stike-beacon-detected-39-107-242-125-port-80/", "CobaltStrike,RedPacketSecurity", "0", "abuse_ch"
"2023-02-02 19:40:26", "1076907", "qw.svcshosvt.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:01", "100", "False", "None", "CHERRYSERVERS2-AS,CobaltStrike", "0", "drb_ra"
"2023-02-02 19:39:18", "1076896", "nxsimdevelop.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:01", "100", "False", "None", "AEZA-AS,CobaltStrike", "0", "drb_ra"
"2023-02-01 02:21:19", "1075651", "appdevtechnology.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:00", "100", "False", "None", "AEZA-AS,CobaltStrike", "0", "drb_ra"
"2023-01-31 15:09:13", "1075540", "dbx.formsift.io", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:00", "100", "False", "None", "Amazon.com Inc.,CobaltStrike", "0", "drb_ra"
"2023-01-29 11:29:55", "1075020", "devcloudpro.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:04", "100", "False", "None", "CobaltStrike,FLYSERVERS-ENDCLIENTS", "0", "drb_ra"
"2023-01-28 09:40:24", "1074894", "164.90.158.199:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-11 12:44:13", "50", "False", "https://search.censys.io/hosts/164.90.158.199", "DIGITALOCEAN-ASN,Mythic", "0", "drb_ra"
"2023-01-25 19:42:03", "1074144", "support-wellsfargovis.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-25 19:42:02", "1074141", "recoverporta1.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-25 19:42:02", "1074142", "recoverportal2.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-25 19:42:02", "1074143", "recoveryweb2.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-23 20:33:42", "1073670", "vd-ntds.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:04", "100", "False", "None", "CobaltStrike,PROSPERO-AS", "0", "drb_ra"
"2023-01-20 14:21:02", "1070164", "hnsxpharm.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-20 14:21:02", "1070165", "myjqueryss.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-20 14:21:02", "1070167", "telusmobility-billed.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-20 14:21:02", "1070168", "thenbkgroup.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-20 11:23:14", "1070137", "avdev.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:05", "100", "False", "None", "CobaltStrike,Flyservers S.A.", "0", "drb_ra"
"2023-01-19 19:53:20", "1069980", "qw.execsvct.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:05", "100", "False", "None", "CHERRYSERVERS2-AS,CobaltStrike", "0", "drb_ra"
"2023-01-19 14:15:53", "1069895", "azurecloudfire.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:05", "100", "False", "None", "CobaltStrike,ITRESHENIYA-AS", "0", "drb_ra"
"2023-01-19 11:23:42", "1069868", "goupdatemic.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:05", "100", "False", "None", "CobaltStrike,GOOGLE", "0", "drb_ra"
"2023-01-18 02:29:29", "1069579", "mwg-update.cloud", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:06", "100", "False", "None", "CobaltStrike,HVC-AS", "0", "drb_ra"
"2023-01-13 17:37:32", "1068206", "goodsport2023.win", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:06", "100", "False", "None", "CobaltStrike,VOM", "0", "drb_ra"
"2023-01-12 21:56:23", "1068079", "blackandwhiteshoose.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:05", "100", "False", "None", "CHERRYSERVERS3-AS,CobaltStrike", "0", "drb_ra"
"2023-01-12 20:55:06", "1068045", "qw.svcrencst.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:06", "100", "False", "None", "CHERRYSERVERS2-AS,CobaltStrike", "0", "drb_ra"
"2023-01-12 14:45:18", "1067954", "realsecuritystore.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:06", "100", "False", "None", "CobaltStrike,Private Layer INC", "0", "drb_ra"
"2023-01-12 13:04:56", "1067924", "fixx.sbs", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:02", "100", "False", "None", "CobaltStrike,SNEL", "0", "drb_ra"
"2023-01-11 10:59:45", "1067646", "allowedcloud.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:03", "100", "False", "None", "CobaltStrike,HIVELOCITY Inc.", "0", "drb_ra"
"2022-12-31 19:48:39", "1064196", "freegaysnews.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:07", "100", "False", "None", "CHERRYSERVERS2-AS,CobaltStrike", "0", "drb_ra"
"2022-12-31 18:58:09", "1064176", "topgamenetwork.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:07", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-12-31 16:21:02", "1064173", "zfuxwvouqvnttpsrxe.tech", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:52", "1064075", "cloudyspaces.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:52", "1064076", "666621.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:51", "1064069", "144.217.207.19:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:51", "1064070", "allsdone.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:51", "1064071", "ipsandwich.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:51", "1064072", "cookieholder.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:51", "1064073", "pingcheker.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:51", "1064074", "wagonovk.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:50", "1064062", "microsoftupdateassist.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:50", "1064063", "qvibova.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:50", "1064064", "cloudwebpictures.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:50", "1064065", "metalkost.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:50", "1064066", "m7r4r2i2.stackpathcdn.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:50", "1064067", "online.cloudwebpictures.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:06", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:49", "1064057", "bartiba.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:49", "1064058", "varnart.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:49", "1064059", "nsfdfdfdf.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:49", "1064060", "micorsoft.cloud", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:49", "1064061", "aigouing.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064046", "ksplsoft.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:01", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064047", "lastinsuranceteam.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064048", "msdnsservice.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:01", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064049", "securequoteme.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064050", "techdevcorp.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064051", "syncorporation.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:03", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064052", "visualstudioapp.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:01", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064053", "altreeservicellc.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:01", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064054", "discountshadesdirect.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:02", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064055", "setechnowork.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:02", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064056", "technicollit.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:03", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064038", "shiyicaster.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064039", "cdn-top.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064040", "onesecondservice.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064041", "vpnupdaters.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064042", "rodinscoldly.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064043", "antariscapital.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064044", "ftwealthmgt.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064045", "iconiq-capitel.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:01", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:46", "1064031", "asset-trades.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:46", "1064032", "telemetrin.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:46", "1064033", "secupdate4win.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:46", "1064034", "cdn-start.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:46", "1064035", "capitalmanagementdata.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:46", "1064036", "lawsolutions.cloud", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:45", "1064024", "diegomaster.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:45", "1064025", "dp-test1.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:45", "1064026", "cloudkey.digital", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:45", "1064027", "updatevpncitrix.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:45", "1064028", "classgum.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:45", "1064029", "edgeupdater.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:45", "1064030", "gfcbm.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064016", "barmnava.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064017", "firewallwithadvancedserurity.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064018", "lgbtqplusfriendlydomain.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064019", "market-stats.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064020", "apabfs.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064021", "fziomerof.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064022", "fserd.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064023", "verofes.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:43", "1064015", "postofficeltdc.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064006", "jarvcza.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064007", "teystyjeem.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064008", "faceupfinder.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064009", "costacancordia.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064010", "lapsusareskids.world", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064011", "msupdater.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064012", "dwordname.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064013", "trademot.finance", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064014", "agreminj.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1063998", "exchangeallltd.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1063999", "guggenheimpartners-survey.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1064000", "caresalonservices.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1064001", "just-findncall.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1064002", "fluoxi.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1064003", "buynet.digital", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1064004", "everythingchecker.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1064005", "dezword.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:40", "1063995", "goksearch.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:51", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:40", "1063996", "polyhaz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:51", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:40", "1063997", "data-protection-test.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:39", "1063992", "update04.microsoft-essentials.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:50", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:38", "1063991", "akaluij.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:36", "1063989", "43.129.7.189:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:44", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:36", "1063990", "82.156.241.148:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:50", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:33", "1063985", "donormix.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:39", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:33", "1063986", "hardicki.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:33", "1063987", "stfconnect.onthewifi.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:33", "1063988", "agsdef.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:48", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:32", "1063978", "observerinfo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:40", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:32", "1063979", "dehikz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:39", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:32", "1063980", "cocanewline.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:39", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:32", "1063981", "rainqor.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:39", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:32", "1063982", "axelkim.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:32", "1063983", "azimurs.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:32", "1063984", "innovativesitecreations.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:39", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:31", "1063972", "creditscore.usbankcreditcards.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:37", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:31", "1063975", "megumin.tech", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:38", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:31", "1063976", "loanhelp.support", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:38", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:31", "1063977", "volsecure.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:40", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:30", "1063966", "domtern.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:36", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:30", "1063968", "drakr.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:40", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:30", "1063969", "devcisco.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:37", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:30", "1063971", "web-news-blog.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:37", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:29", "1063963", "bankafrika.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:35", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:29", "1063964", "mssfr.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:35", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:29", "1063965", "edgekey.tech", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:35", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:28", "1063955", "webyoutubeshop.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:28", "1063956", "extic.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:28", "1063957", "reykh.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:28", "1063959", "propertynewsclub.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:28", "1063960", "afindisc.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:28", "1063961", "propertyinfogroup.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:28", "1063962", "topnewscompany.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:27", "1063950", "baidenfree.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:27", "1063951", "directoryupdate.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:27", "1063952", "azmnetwork.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:27", "1063953", "onevisioncommunications.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:27", "1063954", "campioni-imam.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:26", "1063943", "serviceapp1.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:26", "1063944", "softcloud.digital", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:26", "1063945", "appmind.center", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:26", "1063946", "ms-data.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:26", "1063947", "oracleup.cc", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:26", "1063948", "topinfocompany.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:26", "1063949", "blockchainstartups-crypto.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063934", "expresssmash.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063935", "vgroz.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063936", "baidengop.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063937", "ofilopex.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063938", "aabancaa.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063939", "shermango.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063940", "nongxinyin.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063941", "a6m1n.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063942", "emailbox.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:24", "1063926", "wxtencent.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:24", "1063927", "emergeno.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:24", "1063928", "browngreeer.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:24", "1063929", "processdec.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:24", "1063931", "sndm-sndm.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:24", "1063932", "sinergil.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:24", "1063933", "vinergil.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063918", "westtherr.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063919", "quickaccestwo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063920", "usgrim.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063921", "onelivemusicshop.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063922", "zomerax.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063923", "fsamon.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063924", "sscimails.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063925", "agentrecovery.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063909", "entertainok.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063910", "jatafatuna.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063911", "pluyk.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063912", "affinm.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063913", "gijoxupe.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063914", "vangshares.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063915", "fudupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063917", "contemporaryto.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:21", "1063902", "ziono.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:21", "1063903", "lolutow.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:21", "1063904", "niht12.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:21", "1063905", "slfcorporate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:21", "1063906", "baidu-cdn-10.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:21", "1063907", "jandoz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:21", "1063908", "casevor.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:20", "1063897", "gotroops.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:20", "1063898", "wtxservice.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:20", "1063899", "xevayuhace.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:20", "1063900", "suppcat.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:20", "1063901", "softloadup.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:19", "1063889", "asbetysh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:19", "1063890", "ascagliarinish.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:19", "1063891", "ascasdsh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:19", "1063892", "aschamp79sh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:19", "1063893", "aschnurmansh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:19", "1063894", "aseleeeksh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:19", "1063895", "asensvsh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063880", "artist2actresssh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063881", "arturprikhodkosh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063882", "arvin78sh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063883", "arvind567shahsh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063884", "arvindkkumsh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063885", "arvosash.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063886", "arwalsersh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063887", "aryaarieash.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063888", "aryalalexsh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063870", "dovaxanil.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063871", "hehegahu.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063872", "agriculturemachineries.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063873", "arhipenkolenagenesh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063874", "aritmiagenesh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063875", "artes911sh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063876", "arthas89sh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063877", "arthurstevens62sh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063878", "arthurtaylor13sh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063879", "artis214sh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:16", "1063864", "zipo-cons.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:16", "1063865", "fazehotafa.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:16", "1063866", "zendriol.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:16", "1063867", "sezezapa.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:16", "1063868", "sorekipe.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:16", "1063869", "zezinuwe.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:15", "1063858", "shrekf.art", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:15", "1063859", "amaniza.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:15", "1063860", "microcloud.pro", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:15", "1063861", "anexuss.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:15", "1063862", "edictsoft.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:15", "1063863", "out1etshops.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:14", "1063851", "stepnbayac.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:14", "1063852", "chickenpoken.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:14", "1063853", "hockeysmall.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:14", "1063854", "orthodoxok.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:14", "1063855", "cocesovo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:14", "1063856", "familyinsurancepartner.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:14", "1063857", "senebuvuyi.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:13", "1063848", "fincheck.site", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:17", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:13", "1063849", "svchosst.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:13", "1063850", "conhosst.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:12", "1063843", "maximumservers.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:12", "1063844", "conferencedesk.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:12", "1063845", "bluetechsupply.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:12", "1063846", "allgroupservices.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:12", "1063847", "acitopram.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:39", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:11", "1063838", "businessservicesolution.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:11", "1063839", "gravyblicus.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:11", "1063840", "firmwarekey.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:11", "1063841", "updateraccount.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:11", "1063842", "mvnetworking.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:10", "1063832", "avasecurityservices.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:10", "1063833", "extranetserver.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:10", "1063834", "clacem.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:10", "1063835", "eonline-cdn.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:10", "1063836", "cagohufe.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:10", "1063837", "vezawahoy.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:09", "1063826", "tetafup.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:09", "1063827", "api-trend-micro.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:09", "1063828", "digital-hardware.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:09", "1063829", "aboutdatabasesoftware.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:09", "1063830", "high-control.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:09", "1063831", "soft-base.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:08", "1063821", "iptvr.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:08", "1063823", "mingw.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:08", "1063824", "transfercloud.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:08", "1063825", "flashcom.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:07", "1063818", "sciencelifedata.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:11", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:07", "1063819", "bookingsupport.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:11", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:07", "1063820", "ateyakima.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:06", "1063813", "buy1walmart.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:10", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:06", "1063816", "drbeat.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:10", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:06", "1063817", "aialadin.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:10", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:05", "1063810", "hhkj222.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:09", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:05", "1063811", "yw2204.shop", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:09", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:05", "1063812", "nordicqlobal.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:09", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:04", "1063806", "favls.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:04", "1063807", "linkkedin.life", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:04", "1063808", "magellanfit.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:03", "1063805", "afspd.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:46:51", "1063804", "164.92.70.225:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:40", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:44:07", "1063802", "abritrum-bridges.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-28 19:56:09", "1063208", "a.wv2022.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:07", "100", "False", "None", "CobaltStrike,TENCENT-NET-AP-CN Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2022-12-28 02:22:09", "1063123", "apacheorg.wiki", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:07", "100", "False", "None", "CLOUDIE-AS-AP Cloudie Limited,CobaltStrike", "0", "drb_ra"
"2022-12-24 19:00:50", "1062406", "updatemicrotok.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:07", "100", "False", "None", "AS-SERVERION,CobaltStrike", "0", "drb_ra"
"2022-12-19 21:43:42", "1053949", "eserverx.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:08", "100", "False", "None", "AEZA-AS,CobaltStrike", "0", "drb_ra"
"2022-12-19 11:41:44", "1050306", "cmdatabase.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:04", "100", "False", "None", "ADM Service Ltd.,CobaltStrike", "0", "drb_ra"
"2022-12-17 12:12:59", "1050198", "cloudmane.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:08", "100", "False", "None", "CobaltStrike,Partner LLC", "0", "drb_ra"
"2022-12-13 11:43:38", "1036758", "8.212.49.116:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:45", "100", "False", "None", "Alibaba (US) Technology Co. Ltd.,CobaltStrike", "0", "drb_ra"
"2022-12-12 01:38:31", "1036111", "qw.conhoosst.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:08", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-12-08 20:45:56", "1035723", "expoglobalservice.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:09", "100", "False", "None", "CobaltStrike,TIER-NET", "0", "drb_ra"
"2022-12-07 20:05:59", "1035558", "www.microsofer.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:12", "100", "False", "None", "CobaltStrike,Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2022-12-05 20:03:53", "1031731", "googlecontentuser.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:09", "100", "False", "https://twitter.com/TheDFIRReport/status/1599780643222654976", "CobaltStrike", "0", "abuse_ch"
"2022-12-05 19:27:32", "1031726", "test.227api.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:56", "100", "False", "None", "CobaltStrike,YISUCLOUDLTD-HK YISU CLOUD LTD", "0", "drb_ra"
"2022-12-05 11:42:38", "1029025", "palalto.live", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:09", "100", "False", "None", "CobaltStrike,Private Layer INC", "0", "drb_ra"
"2022-12-04 20:18:27", "1028963", "esoftwareupdates.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:09", "100", "False", "None", "ASGHOSTNET,CobaltStrike", "0", "drb_ra"
"2022-12-02 21:28:11", "1028767", "globalplayservices.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:09", "100", "False", "None", "CHERRYSERVERS3-AS,CobaltStrike", "0", "drb_ra"
"2022-12-02 20:50:52", "1028737", "rapidfinact.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:09", "100", "False", "None", "CobaltStrike,SHINJIRU-MY-AS-AP Shinjiru Technology Sdn Bhd", "0", "drb_ra"
"2022-12-02 20:38:18", "1028720", "globalsteamclub.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:09", "100", "False", "None", "CHERRYSERVERS3-AS,CobaltStrike", "0", "drb_ra"
"2022-12-01 20:32:20", "1028501", "get-music-online.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:09", "100", "False", "None", "CHERRYSERVERS3-AS,CobaltStrike", "0", "drb_ra"
"2022-11-27 16:10:54", "1024554", "msndla.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:08", "100", "False", "None", "CobaltStrike,PONYNET", "0", "drb_ra"
"2022-11-24 11:54:46", "1023854", "childhealthresources.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:31", "100", "False", "None", "AMAZON-02,CobaltStrike", "0", "drb_ra"
"2022-11-24 11:50:52", "1023821", "360safeupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:08", "100", "False", "None", "CobaltStrike,Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2022-11-20 10:32:06", "1021044", "aksaholdings.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:10", "100", "False", "None", "Amazon.com Inc.,CobaltStrike", "0", "drb_ra"
"2022-11-15 06:56:25", "1012628", "msisfx.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:10", "100", "False", "https://twitter.com/malware_traffic/status/1592262598195646464", "CobaltStrike", "0", "abuse_ch"
"2022-11-12 17:46:46", "1009773", "get-smartbuyer.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:10", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-11-10 11:51:33", "1000509", "qw.stakcl.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:10", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-11-08 20:20:30", "991420", "sogouupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:08", "100", "False", "None", "CobaltStrike,TENCENT-NET-AP-CN Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2022-11-07 20:10:29", "985010", "dnsupdatecheck.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:10", "100", "False", "None", "CHERRYSERVERS3-AS,CobaltStrike", "0", "drb_ra"
"2022-11-04 11:23:08", "973832", "ipulsecloud.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:13", "100", "False", "None", "CobaltStrike,FLYSERVERS-ENDCLIENTS", "0", "drb_ra"
"2022-11-03 12:12:17", "964538", "zadiguser.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:13", "50", "False", "", "None", "1", "anonymous"
"2022-11-03 12:12:17", "964540", "wasazokiwo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:20", "50", "False", "", "None", "1", "anonymous"
"2022-11-03 12:12:17", "964541", "yuwajeni.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:15", "50", "False", "", "None", "1", "anonymous"
"2022-11-03 12:12:17", "964542", "yavahiyil.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:14", "50", "False", "", "None", "1", "anonymous"
"2022-11-03 12:12:17", "964543", "rabihino.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:25", "50", "False", "", "None", "1", "anonymous"
"2022-11-03 12:12:17", "964545", "nokevohoh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:26", "50", "False", "", "None", "1", "anonymous"
"2022-11-03 12:12:17", "964546", "rawocav.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:26", "50", "False", "", "None", "1", "anonymous"
"2022-11-03 12:12:17", "964548", "deyikurihe.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:25", "50", "False", "", "None", "1", "anonymous"
"2022-10-30 19:51:44", "952862", "freshuper.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:11", "100", "False", "None", "CobaltStrike,tzulo inc.", "0", "drb_ra"
"2022-10-29 12:32:13", "952596", "reebons.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:11", "100", "False", "None", "CobaltStrike,Perviy TSOD LLC", "0", "drb_ra"
"2022-10-29 12:23:49", "952587", "gaswert.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:11", "100", "False", "None", "CobaltStrike,GLOBAL INTERNET SOLUTIONS LLC", "0", "drb_ra"
"2022-10-29 11:54:42", "952582", "sajij.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:11", "100", "False", "None", "CobaltStrike,Perviy TSOD LLC", "0", "drb_ra"
"2022-10-29 10:14:36", "952555", "asasyz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:10", "100", "False", "None", "CobaltStrike,Partner LLC", "0", "drb_ra"
"2022-10-29 10:12:26", "952552", "agazud.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:11", "100", "False", "None", "CobaltStrike,LLC Baxet", "0", "drb_ra"
"2022-10-29 09:57:36", "952534", "tuuik.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:11", "100", "False", "None", "CobaltStrike,GLOBAL INTERNET SOLUTIONS LLC", "0", "drb_ra"
"2022-10-29 09:56:46", "952528", "alfuhin.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:12", "100", "False", "None", "CobaltStrike,Partner LLC", "0", "drb_ra"
"2022-10-27 23:43:27", "950974", "amaladin.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:10", "100", "False", "None", "CobaltStrike,HOSTKEY-USA", "0", "drb_ra"
"2022-10-26 10:09:11", "949937", "aualadin.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:10", "100", "False", "None", "CobaltStrike,Perviy TSOD LLC", "0", "drb_ra"
"2022-10-23 13:42:10", "916136", "bthserv.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:11", "100", "False", "None", "CobaltStrike,Internet Solutions & Innovations LTD.", "0", "drb_ra"
"2022-10-23 13:37:35", "916115", "nuesro.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:11", "100", "False", "None", "CobaltStrike,Partner LLC", "0", "drb_ra"
"2022-10-23 13:36:50", "916100", "pasadonline.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:10", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-10-22 19:40:40", "915911", "worldsgates.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:12", "100", "False", "None", "CobaltStrike,LUCIDACLOUD LIMITED", "0", "drb_ra"
"2022-10-22 19:39:30", "915908", "protramal.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:13", "100", "False", "None", "CobaltStrike,Perviy TSOD LLC", "0", "drb_ra"
"2022-10-22 01:11:02", "915846", "spltst.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:11", "100", "False", "None", "CobaltStrike,combahton GmbH", "0", "drb_ra"
"2022-10-16 13:10:54", "891477", "cehocihit.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:21", "100", "False", "None", "CobaltStrike,LEASEWEB-USA-PHX", "0", "drb_ra"
"2022-10-16 12:38:04", "891461", "cloudmicro.pro", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:19", "100", "False", "None", "CobaltStrike,PLI-AS", "0", "drb_ra"
"2022-10-13 21:41:28", "887212", "keycloud.live", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:12", "100", "False", "None", "CobaltStrike,PARTNER-AS", "0", "drb_ra"
"2022-10-13 21:13:41", "886703", "activeservers.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:24", "100", "False", "None", "Amati Foundation,CobaltStrike", "0", "drb_ra"
"2022-10-13 21:12:51", "886693", "newyearbalance.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:12", "100", "False", "None", "CHERRYSERVERS3-AS,CobaltStrike", "0", "drb_ra"
"2022-10-13 21:02:36", "886516", "xamayojir.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:14", "100", "False", "None", "CobaltStrike,LEASEWEB-USA-PHX", "0", "drb_ra"
"2022-10-13 20:58:25", "886499", "xicefoga.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:27", "100", "False", "None", "CobaltStrike,LEASEWEB-USA-WDC", "0", "drb_ra"
"2022-10-13 19:51:56", "884091", "ams-prd-cob.nl", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:16", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-10-13 19:35:22", "883488", "tagujog.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:15", "100", "False", "None", "CobaltStrike,LEASEWEB-USA-PHX", "0", "drb_ra"
"2022-10-13 19:32:23", "883412", "mysqlserver.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:24", "100", "False", "None", "CobaltStrike,ICME", "0", "drb_ra"
"2022-10-13 19:23:44", "883142", "xuluxetas.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:14", "100", "False", "None", "CobaltStrike,LEASEWEB-USA-NYC", "0", "drb_ra"
"2022-10-12 17:16:11", "880419", "hadujaza.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:18", "100", "False", "https://www.trendmicro.com/en_us/research/22/j/black-basta-infiltrates-networks-via-qakbot-brute-ratel-and-coba.html", "CobaltStrike", "0", "abuse_ch"
"2022-10-05 18:54:33", "871733", "softsupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:13", "100", "False", "https://twitter.com/1ZRR4H/status/1577718910652129280", "CobaltStrike", "0", "abuse_ch"
"2022-10-05 18:54:33", "871734", "anushl.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:13", "100", "False", "https://twitter.com/1ZRR4H/status/1577718910652129280", "CobaltStrike", "0", "abuse_ch"
"2022-09-29 08:45:45", "858399", "anbush.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:15", "100", "False", "https://twitter.com/1ZRR4H/status/1575364140285267970", "CobaltStrike", "0", "abuse_ch"
"2022-09-29 08:45:45", "858402", "get-topservice.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:13", "100", "False", "https://twitter.com/1ZRR4H/status/1575364140285267970", "CobaltStrike", "0", "abuse_ch"
"2022-09-29 08:45:45", "858403", "msoftupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:13", "100", "False", "https://twitter.com/1ZRR4H/status/1575364140285267970", "CobaltStrike", "0", "abuse_ch"
"2022-09-29 08:45:45", "858404", "pregabas.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:13", "100", "False", "https://twitter.com/1ZRR4H/status/1575364140285267970", "CobaltStrike", "0", "abuse_ch"
"2022-09-22 11:26:18", "851096", "34.92.131.12:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:17", "100", "False", "None", "CobaltStrike,Google LLC", "0", "drb_ra"
"2022-09-20 16:58:14", "850706", "87.246.7.38:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:17", "75", "False", "https://twitter.com/1ZRR4H/status/1572261285139714051", "CobaltStrike", "0", "abuse_ch"
"2022-09-20 16:57:02", "850701", "cloudmicro.tech", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:15", "100", "False", "https://twitter.com/1ZRR4H/status/1572261285139714051", "CobaltStrike", "0", "abuse_ch"
"2022-09-20 16:57:02", "850702", "fregiyu.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:16", "100", "False", "https://twitter.com/1ZRR4H/status/1572261285139714051", "CobaltStrike", "0", "abuse_ch"
"2022-09-20 16:57:02", "850704", "microcloud.live", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:15", "100", "False", "https://twitter.com/1ZRR4H/status/1572261285139714051", "CobaltStrike", "0", "abuse_ch"
"2022-09-17 21:24:41", "850260", "154.22.117.31:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:17", "100", "False", "None", "CobaltStrike,Cogent Communications", "0", "drb_ra"
"2022-09-14 22:07:14", "849761", "198.98.53.34:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:17", "100", "False", "None", "CobaltStrike,PONYNET", "0", "drb_ra"
"2022-09-05 19:10:52", "847988", "globallookclub.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:33", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:50", "847986", "realfunsolutions.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:35", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:48", "847972", "www.service1app.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:32", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:48", "847975", "youronlinesports.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:32", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:48", "847976", "yourinfosolutions.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:32", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:48", "847978", "login.onemusic24.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:34", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:48", "847981", "zx.jacollans.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:33", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:47", "847942", "satorkar.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:25", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:47", "847943", "er.theinfoinc.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:27", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:47", "847957", "realmacnow.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:29", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:47", "847958", "onemusicllc.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:29", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:47", "847959", "ateliernow.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:29", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:47", "847960", "er.dropklant.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:29", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:46", "847929", "sprinthunter.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:20", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:46", "847930", "newstamagavk.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:19", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:46", "847934", "www.onestepstar.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:24", "100", "False", "", "None", "0", "_ik_"
"2022-09-01 06:45:17", "847124", "115.75.66.68:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:26", "75", "False", "https://bazaar.abuse.ch/sample/8f7649bc068b21404fe08229026859aaa468634963eca11cc64b661fa64a6880/", "asyncrat", "0", "abuse_ch"
"2022-09-01 06:45:16", "847123", "115.75.66.68:6821", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:26", "75", "False", "https://bazaar.abuse.ch/sample/8f7649bc068b21404fe08229026859aaa468634963eca11cc64b661fa64a6880/", "asyncrat", "0", "abuse_ch"
"2022-09-01 06:45:14", "847122", "115.75.66.68:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:26", "75", "False", "https://bazaar.abuse.ch/sample/8f7649bc068b21404fe08229026859aaa468634963eca11cc64b661fa64a6880/", "asyncrat", "0", "abuse_ch"
"2022-09-01 06:40:24", "847121", "115.75.66.68:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-11 12:43:26", "100", "False", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2022-08-31 18:29:19", "847028", "barabezo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:21", "100", "False", "https://bazaar.abuse.ch/sample/08ec3f13e8637a08dd763af6ccb46ff8516bc46efaacb1e5f052ada634a90c0e/", "CobaltStrike", "0", "abuse_ch"
"2022-08-31 16:32:01", "847018", "alojun.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:19", "100", "False", "", "None", "0", "_ik_"
"2022-08-31 16:32:01", "847019", "asdder.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:19", "100", "False", "", "None", "0", "_ik_"
"2022-08-31 16:32:01", "847020", "www.zominoz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:20", "100", "False", "", "None", "0", "_ik_"
"2022-08-30 06:22:11", "846258", "jevomukif.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:25", "100", "False", "https://raw.githubusercontent.com/pan-unit42/tweets/master/2022-08-29-IOCs-for-Monster-Libra-TA551-IcedID-with-Cobalt-Stike.txt", "CobaltStrike", "0", "abuse_ch"
"2022-08-20 06:53:07", "844214", "msdnupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:25", "100", "False", "", "CobaltStrike", "0", "abuse_ch"
"2022-08-20 06:53:07", "844215", "msdupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:26", "100", "False", "", "CobaltStrike", "0", "abuse_ch"
"2022-08-18 12:15:06", "843958", "caxoxc.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:27", "100", "False", "", "CobaltStrike", "0", "abuse_ch"
"2022-08-16 11:38:21", "843546", "47.108.180.121:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:44", "100", "False", "None", "CobaltStrike,Hangzhou Alibaba Advertising Co.Ltd.", "0", "drb_ra"
"2022-08-11 06:03:19", "842464", "jahojahi.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:20", "100", "False", "https://raw.githubusercontent.com/pan-unit42/tweets/master/2022-08-10-IOCs-for-IcedID-and-Cobalt-Strike.txt", "CobaltStrike", "0", "abuse_ch"
"2022-08-06 07:00:06", "841613", "zambeziz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:28", "100", "False", "", "CobaltSrike", "0", "abuse_ch"
"2022-07-27 08:49:04", "839793", "zuyonijobo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:28", "100", "False", "https://isc.sans.edu/diary/28884", "Cobalt Strike", "0", "abuse_ch"
"2022-07-06 05:36:04", "802793", "digerm.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:31", "100", "False", "", "None", "0", "abuse_ch"
"2022-07-05 05:12:06", "796822", "chitozx.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:30", "100", "False", "", "None", "0", "abuse_ch"
"2022-07-02 13:06:49", "750750", "42.192.21.181:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:17", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2022-06-28 08:57:21", "730561", "18.117.254.165:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:42", "100", "False", "None", "Amazon.com Inc.,CobaltStrike", "0", "drb_ra"
"2022-06-26 10:56:33", "729038", "blinkinuf.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:31", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-26 10:56:32", "729037", "malrok.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:32", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 17:11:58", "720823", "trumpiko.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:32", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 17:11:58", "720824", "freygor.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:32", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 17:11:58", "720826", "sinjoan.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:35", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 17:11:58", "720827", "afluix.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:35", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:20", "720273", "www.edge-chrome.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:51", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:20", "720276", "www.hellomrsone.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:05", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:19", "720260", "we.topsmartservice.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:37", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:19", "720263", "wpsserver.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:38", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:18", "720248", "thedaily-news.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:36", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:17", "720239", "sevenhungredbucks.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:33", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:17", "720241", "snccoupr-int.cf", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:33", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:17", "720247", "telembank.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:51", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:16", "720230", "ppew.au", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:49", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:16", "720231", "pretunz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:36", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:16", "720236", "rss.top-business-blog.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:37", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:16", "720237", "scarfaceserver.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:35", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:15", "720226", "outlet-studio.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:34", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:14", "720208", "js.msedgeupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:46", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:13", "720198", "harborfreight.delivery", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:04", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:13", "720201", "hityok.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:36", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:13", "720203", "jiguz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:35", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:13", "720204", "jijuanjo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:34", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:13", "720206", "jqueryupdatenow.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:35", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:13", "720207", "jqueryupneed.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:35", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:12", "720188", "fifacud.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:34", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:12", "720189", "filaspo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:37", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:12", "720193", "gasienda.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:37", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:11", "720185", "dreamkoks.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:33", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:10", "720176", "democrazzy.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:23", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:53:31", "720156", "cloud.sovarermscloud.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:37", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:53:28", "720136", "backupcreds.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:38", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:53:28", "720140", "biohazzzard.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:36", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:53:28", "720141", "bksfinance.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:53", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:53:28", "720143", "boronab.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:35", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:53:27", "720132", "araizx.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:33", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:53:27", "720133", "arminext.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:37", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-22 18:35:13", "719898", "aginij.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:33", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-05-19 18:01:58", "606362", "criobob.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:38", "75", "False", "None", "cobaltstrike,emotet", "0", "Cryptolaemus1"
"2022-05-19 18:01:58", "606363", "prozakx.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:38", "75", "False", "None", "cobaltstrike,emotet", "0", "Cryptolaemus1"
"2022-05-19 18:01:58", "606364", "terroklo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:37", "75", "False", "None", "cobaltstrike,emotet", "0", "Cryptolaemus1"
"2022-05-19 18:01:57", "606360", "microdozz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:38", "75", "False", "None", "cobaltstrike,emotet", "0", "Cryptolaemus1"
"2022-05-10 18:53:07", "549372", "us189-hpgsgae5dva9fzch.z01.azurefd.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:48", "75", "False", "None", "cobaltstrike,threatview.io", "0", "Malwar3Ninja"
"2022-05-08 16:20:03", "548951", "artidomain.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:40", "100", "False", "https://twitter.com/ian_kenefick/status/1523288477559062529", "Cobalt Strike", "0", "abuse_ch"
"2022-04-30 19:45:18", "544836", "116.62.185.223:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:41", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
"2022-04-29 19:30:18", "540702", "165.227.180.6:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:46", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-04-25 12:31:07", "532916", "120.26.240.21:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:50", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
"2022-04-23 16:42:50", "530098", "193.29.13.216:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:51", "100", "False", "None", "***************************************,CobaltStrike", "0", "drb_ra"
"2022-04-21 16:54:57", "523516", "45.8.158.25:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:42", "100", "False", "None", "ASBAXETN,CobaltStrike", "0", "drb_ra"
"2022-04-19 13:44:33", "521565", "115.29.171.175:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:50", "100", "False", "None", "CNNIC-ALIBABA-CN-NET-AP Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
"2022-04-18 18:01:52", "521083", "84.32.188.190:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:41", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-04-15 22:57:51", "520317", "137.184.42.85:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:48", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-04-14 16:59:25", "519914", "84.32.188.104:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:43", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-04-14 10:30:57", "519792", "furfen.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:39", "100", "False", "None", "BumbleBee,Cobalt Strike", "0", "abuse_ch"
"2022-04-13 16:57:52", "519116", "175.41.21.29:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:45", "100", "False", "None", "CobaltStrike,XLC-AS-AP XLC GLOBAL", "0", "drb_ra"
"2022-04-12 16:50:58", "518853", "175.41.16.98:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:50", "100", "False", "None", "CobaltStrike,XLC-AS-AP XLC GLOBAL", "0", "drb_ra"
"2022-04-10 17:05:31", "518404", "138.68.110.227:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:46", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-04-06 22:59:35", "516676", "13.55.118.253:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:42", "100", "False", "None", "AMAZON-02,CobaltStrike", "0", "drb_ra"
"2022-04-05 22:55:20", "493695", "185.186.143.111:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:41", "100", "False", "None", "ASKONTEL,CobaltStrike", "0", "drb_ra"
"2022-04-05 16:53:16", "492845", "194.37.97.153:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:06", "100", "False", "None", "CobaltStrike,M247 Ltd", "0", "drb_ra"
"2022-03-30 09:51:36", "466600", "blopik.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:54", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-29 08:36:59", "461231", "borizhog.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:54", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-24 22:55:12", "448027", "37.72.172.110:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:43", "100", "False", "None", "CobaltStrike,HVC-AS", "0", "drb_ra"
"2022-03-24 10:56:07", "446029", "1.14.76.111:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:47", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2022-03-23 20:44:05", "443786", "139.60.160.8:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:43", "100", "False", "None", "CobaltStrike,HOSTKEY-USA", "0", "drb_ra"
"2022-03-23 16:44:21", "443190", "apeduze.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:39", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-22 10:51:28", "438442", "drimzis.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:57", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-22 10:51:28", "438443", "blinkij.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:53", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-17 22:47:07", "398650", "152.136.178.142:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:51", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2022-03-17 12:19:46", "396104", "dunclikf.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:59", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-10 15:29:52", "393426", "sifgu.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:53", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-10 15:29:52", "393427", "gfsert.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:53", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-10 15:29:52", "393429", "shizij.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:59", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-10 15:29:52", "393430", "zxerm.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:59", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-10 15:29:52", "393431", "korunder.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:59", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-10 15:29:51", "393424", "chesft.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:57", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-10 15:29:51", "393425", "uktyl.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:53", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-09 17:18:35", "393312", "defenr.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:57", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-09 17:18:35", "393313", "fedij.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:57", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-09 17:18:35", "393314", "kejimn.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:58", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-09 17:18:34", "393311", "brikeb.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:57", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-08 17:09:32", "393046", "kapuleti.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:57", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-06 16:43:33", "392705", "45.12.1.24:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:49", "100", "False", "None", "CobaltStrike,YURTEH-AS", "0", "drb_ra"
"2022-03-05 16:45:53", "392630", "45.12.1.25:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:41", "100", "False", "None", "CobaltStrike,YURTEH-AS", "0", "drb_ra"
"2022-03-05 16:43:28", "392595", "45.12.1.26:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:41", "100", "False", "None", "CLOUDNETWORKS-AS,CobaltStrike", "0", "drb_ra"
"2022-03-01 07:06:28", "391528", "defegh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:58", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-01 07:06:28", "391530", "klycnmik.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:58", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-01 07:06:28", "391531", "ngrety.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:58", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-02-27 06:03:58", "391111", "lifegothistory.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:59", "100", "False", "https://twitter.com/1ZRR4H/status/1497771037718724612", "Cobalt Strike", "0", "abuse_ch"
"2022-02-22 16:44:41", "390123", "192.241.133.130:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:56", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-22 16:42:29", "390104", "159.65.246.188:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:55", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:58:18", "389873", "68.183.200.63:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:55", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:57:13", "389866", "138.68.227.71:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:55", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:56:32", "389865", "165.227.219.211:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:55", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:55:44", "389864", "165.232.154.73:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:55", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:54:53", "389861", "143.198.110.248:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:54", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:54:15", "389860", "178.128.171.206:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:56", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:53:10", "389853", "165.227.23.218:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:54", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:52:19", "389850", "161.35.137.163:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:55", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:51:26", "389847", "64.227.0.177:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:56", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-20 16:42:59", "389656", "45.55.36.143:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:55", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-09 22:36:37", "384626", "168.61.180.98:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:06", "100", "False", "None", "CobaltStrike,MICROSOFT-CORP-MSN-AS-BLOCK", "0", "drb_ra"
"2022-02-01 10:45:03", "373668", "bornometa.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:00", "100", "False", "https://twitter.com/1ZRR4H/status/1488311508652204037", "Cobalt Strike", "0", "abuse_ch"
"2022-02-01 10:45:03", "373671", "jenevabaiden.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:07", "100", "False", "https://twitter.com/1ZRR4H/status/1488311508652204037", "Cobalt Strike", "0", "abuse_ch"
"2022-02-01 10:45:03", "373673", "sbronm.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:00", "100", "False", "https://twitter.com/1ZRR4H/status/1488311508652204037", "Cobalt Strike", "0", "abuse_ch"
"2022-01-29 22:33:30", "362296", "101.34.182.130:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:51", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2022-01-25 22:30:16", "332687", "192.227.155.185:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:44", "100", "False", "None", "AS-COLOCROSSING,CobaltStrike", "0", "drb_ra"
"2022-01-25 22:29:00", "332653", "146.70.29.233:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:44", "100", "False", "None", "CobaltStrike,M247", "0", "drb_ra"
"2022-01-22 22:25:42", "313943", "107.172.219.129:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:45", "100", "False", "None", "AS-COLOCROSSING,CobaltStrike", "0", "drb_ra"
"2022-01-18 22:32:52", "299262", "193.201.9.229:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:07", "100", "False", "None", "CobaltStrike,SELECTEL", "0", "drb_ra"
"2022-01-18 13:51:16", "298501", "citrixseruritys.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:05", "100", "False", "https://twitter.com/MichalKoczwara/status/1483137082465865729", "Cobalt Strike", "0", "abuse_ch"
"2022-01-18 13:51:16", "298505", "milanvar.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:08", "100", "False", "https://twitter.com/MichalKoczwara/status/1483137082465865729", "Cobalt Strike", "0", "abuse_ch"
"2022-01-15 22:26:20", "295525", "23.227.198.246:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:06", "100", "False", "None", "CobaltStrike,HVC-AS", "0", "drb_ra"
"2022-01-15 10:32:22", "295436", "217.79.243.148:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:06", "100", "False", "None", "CobaltStrike,HVC-AS", "0", "drb_ra"
"2022-01-14 22:28:25", "295353", "149.255.35.131:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:07", "100", "False", "None", "CobaltStrike,HVC-AS", "0", "drb_ra"
"2022-01-13 22:28:33", "294999", "81.68.225.136:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:43", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2022-01-10 16:24:49", "292303", "39.98.48.153:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:21:09", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
"2022-01-07 10:30:52", "291740", "39.104.25.164:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:47", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
"2021-12-16 10:42:30", "276593", "77.83.36.54:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:50", "100", "False", "None", "CobaltStrike,ISI-ASN", "0", "drb_ra"
"2021-12-13 10:06:28", "275144", "101.32.204.81:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:49", "100", "False", "None", "CobaltStrike,TENCENT-NET-AP-CN Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2021-11-22 16:01:01", "252110", "62.113.255.12:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:46", "100", "False", "None", "CobaltStrike,TTM", "0", "drb_ra"
"2021-11-04 17:48:48", "242948", "107.173.89.148:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:47", "100", "False", "None", "AS-COLOCROSSING,CobaltStrike", "0", "drb_ra"
"2021-10-31 17:43:37", "240983", "104.128.92.144:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:07", "100", "False", "None", "CobaltStrike,IT7NET", "0", "drb_ra"
"2021-10-27 09:58:20", "238207", "fivepointschiro.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:23:00", "100", "False", "https://twitter.com/mojoesec/status/1453040284686770185", "CobaltStrike", "0", "abuse_ch"
"2021-10-22 12:07:15", "236436", "111.230.196.200:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:47", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2021-10-13 17:43:22", "233476", "23.224.152.139:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:44", "100", "False", "None", "CNSERVERS,CobaltStrike", "0", "drb_ra"
"2021-10-11 23:27:10", "232821", "139.198.183.44:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:46", "100", "False", "None", "CobaltStrike,YUNIFY-NET Yunify Technologies Inc.", "0", "drb_ra"
"2021-10-09 23:36:53", "232263", "121.37.255.60:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:51", "100", "False", "None", "CobaltStrike,HWCSNET Huawei Cloud Service data center", "0", "drb_ra"
"2021-09-18 17:39:24", "223357", "47.95.207.79:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-11 13:22:48", "100", "False", "None", "CNNIC-ALIBABA-CN-NET-AP Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
# Number of entries: 4248