################################################################
# ThreatFox IOCs: recent additions - CSV format                #
# Last updated: 2026-09-01 05:41:23 UTC                        #
#                                                              #
# Terms Of Use: https://threatfox.abuse.ch/faq/#tos            #
# For questions please contact threatfox [at] abuse.ch         #
################################################################
#
# "first_seen_utc","ioc_id","ioc_value","ioc_type","threat_type","fk_malware","malware_alias","malware_printable","last_seen_utc","confidence_level","is_compromised","reference","tags","anonymous","reporter"
"2026-09-01 05:41:23", "1892307", "102.220.160.58:430", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-09-01 05:37:45", "1892306", "kevyn94.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 05:20:36", "1892304", "gezajoqa.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 05:16:22", "1892303", "64.89.163.22:9000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "False", "https://bazaar.abuse.ch/sample/d8c3b7036cc3a1e8bdc461cc15e28f1e3cde3fba4a62fc983f4e9ada65588f31/", "Mettle", "0", "abuse_ch"
"2026-09-01 05:14:03", "1892302", "wgx2w28e.chelseatbaldeagle.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-09-01 05:11:52", "1891972", "91.92.42.115:2418", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 05:13:49", "100", "False", "None", "c2,Jay64,Remcos", "0", "Bitsight"
"2026-09-01 05:11:52", "1891973", "188.166.160.153:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-01 05:11:51", "1892004", "165.245.209.216:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-01 05:11:49", "1892005", "188.166.160.153:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 04:35:32", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-01 05:11:49", "1892031", "134.209.176.36:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-01 05:11:48", "1892035", "208.91.65.109:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "False", "None", "c2,Remcos,Start-Asegurar", "0", "Bitsight"
"2026-09-01 05:11:47", "1892040", "46.101.160.192:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 02:53:22", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-01 05:11:46", "1892041", "178.128.201.199:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-01 05:11:45", "1892047", "46.101.160.192:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:43:13", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-01 05:11:44", "1892055", "165.232.112.16:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-01 05:11:43", "1892061", "165.232.112.16:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-01 05:11:42", "1892068", "103.6.169.62:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "50", "False", "None", "36007,c2,censys,cobalt strike", "0", "sojubear"
"2026-09-01 05:11:41", "1892257", "167.71.38.182:34567", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-01 05:11:40", "1892260", "178.128.201.199:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-01 05:11:40", "1892269", "45.55.191.196:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-09-01 05:11:28", "1892295", "217.60.195.233:3231", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-09-01 05:10:13", "1892301", "chelseatbaldeagle.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-09-01 05:10:19", "100", "True", "None", "1September2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-09-01 05:08:15", "1892300", "dawelyxi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 05:05:08", "1892299", "94.102.49.164:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-09-01 05:05:07", "1892297", "94.102.49.164:8443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-09-01 05:05:07", "1892298", "94.102.49.164:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-09-01 05:05:05", "1892296", "62.72.42.58:22", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-01 04:45:27", "1892294", "https://proxy.checkverifybot.com", "url", "botnet_cc", "win.stealc", "None", "Stealc", "", "75", "False", "https://bazaar.abuse.ch/sample/8ada7f5b671c1b3fad199826203eb4e5dbd1c6a8cf1791100651ac24358daef4/", "stealc", "0", "abuse_ch"
"2026-09-01 04:44:55", "1892293", "fd0da8d49a6b2082d1704611e4006eeccad283a960a36292fa5324b6466f1c98", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:55", "1892287", "0d178ef3b9bfe3209dc26d0c6e22536f890f09e32feef8f4a6953fb626553511", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:55", "1892288", "0d765af312d12d61aa518279c186efa0808939fd32b98a003f9431652a166131", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:55", "1892289", "bf67638cb602e52981ecb98338e0296d642565f1a512b5f0224de69676830467", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:55", "1892290", "3b6cb37e1308d272a539f17a73b0da83e74ec35fc8361950936c679711914344", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:55", "1892291", "b8389f99db47eef8df5a119b0a405bc8036d55228840896042fe2547a189cc84", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:55", "1892292", "d48b3261262e7d4ef3a9a2f2f0bcaf20ef866c71ba8ec860faa37a40cca66625", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:54", "1892280", "2c632225d9c340a519249066b3ad28d41b90b0323557afc649e54ef49fa90e81", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:54", "1892281", "6669388a05e514f07e77095dae05a45918a6f10988dda7f9d5aed3fb07513f41", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:54", "1892282", "06b75afa6f460179da9d8dbb15ff105910d3244277a7b3a9fe459a33d4580999", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:54", "1892283", "6de97f30eeedf7677c8c97bad32a6566b3b50c8efc611f371e44f588731d7aaf", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:54", "1892284", "8e5826352a64fea7c6ecc9408f175bb6dca9543111c7b9b3d3a61cdc8fac959b", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:54", "1892285", "0f38e3f484884bd7c85d0b070b1d820f59271543928079c43d0c77c2fbd51929", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:54", "1892286", "1d7a7c178076dddee6ea1a67423d3318c1e01d96a331d3f355ff6b1867d634a3", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:53", "1892273", "f67de1b7e7ca36727bd4c1e127ed4f516a0193ac8fc41693353558455e686c99", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:53", "1892274", "7ef30865cb0f0adc81fce00afa2bc7aa4112ff8b1f6c5357b00a0f9e687db464", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:53", "1892275", "f61bcd49872e452e245d60425e2637c47092211faf94c24e14cb13e870a25aed", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:53", "1892276", "07d9b155b52542204c047cc28fd69c0f06c67432d5a3fc3d3b9fa632f0f4ffcc", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:53", "1892277", "21ea6d2a589f017ad32a70de58ce07c4abbea65918ec7d9d13df8687c03dcad4", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:53", "1892278", "83340582a4d5d32cb602edc03210cdb103457c4ce777b3bd43d096febf4cff04", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:39:53", "1892279", "d23b15822d46d5adcd503a7a7ec37f3cda13675a067a28f28fa4449c07593f1c", "sha256_hash", "payload", "js.clearfake", "None", "ClearFake", "", "90", "False", "None", "ClearFake,ClickFix,EtherHiding", "1", "anonymous"
"2026-09-01 04:38:32", "1892271", "nwuor63200.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 04:36:53", "1892270", "qlhha28177.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 04:30:09", "1892268", "lepotafo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 04:28:23", "1892266", "http://doresxa.click:6271/files", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-09-01 04:28:23", "1892267", "http://cdire.shop:9048/tasks", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-09-01 04:13:40", "1892265", "tyqeca.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 04:05:09", "1892264", "62.72.42.58:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-01 04:05:07", "1892263", "62.72.42.58:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-01 04:05:06", "1892262", "62.72.42.58:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-09-01 04:05:05", "1892261", "66.175.236.12:5060", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-09-01 03:56:52", "1892259", "rofileji.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 03:44:50", "1892258", "sixepatu.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 03:18:23", "1892256", "https://raw.githubusercontent.com/Kath19634/calcium/refs/heads/main/dissuade", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-09-01 03:11:01", "1892255", "0qepx6f4.cdn-jbgroup.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-09-01 03:10:33", "1892254", "exjui68915.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 03:09:36", "1892253", "cdn-jbgroup.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-09-01 03:09:43", "100", "True", "None", "1September2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-09-01 03:09:01", "1892252", "63ksxix5.shop-prostafense.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-09-01 03:08:11", "1892251", "shop-prostafense.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-09-01 03:08:18", "100", "True", "None", "1September2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-09-01 03:05:07", "1892250", "111.230.143.136:22", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "viper", "1", "anonymous"
"2026-09-01 03:05:05", "1892249", "218.244.142.4:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-09-01 02:58:13", "1892248", "bumilago.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 02:57:03", "1892247", "nivovubo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 02:56:04", "1892246", "8skntjcxvt.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 02:41:12", "1892245", "rkny771c.shop-memorylift.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-09-01 02:40:46", "1892244", "shop-memorylift.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-09-01 02:40:55", "100", "True", "None", "1September2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-09-01 02:35:52", "1892243", "pdejstkd.shop-neuro-sharp.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x0f14,macos", "1", "anonymous"
"2026-09-01 02:33:46", "1892242", "fdtujzrt.shop-lipovive.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xdcf2,macos", "1", "anonymous"
"2026-09-01 02:32:50", "1892241", "shop-neuro-sharp.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-09-01 02:32:55", "100", "True", "None", "1September2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-09-01 02:32:36", "1892240", "shop-lipovive.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-09-01 02:32:42", "100", "True", "None", "1September2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-09-01 02:24:10", "1892239", "zyzimy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 02:05:06", "1892238", "45.221.118.139:8085", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-09-01 02:02:31", "1892237", "tamagewu.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 02:02:27", "1892236", "sanujedu.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 01:41:23", "1892234", "ea7d601bfe326ab75da0c8f597a2f161b3b23dbc", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:23", "1892235", "6ff791183aa5afb344d75f98369a4612", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:22", "1892230", "68bbb1ec14eca9697d31887f35e5d378c40294316273659f766705a7989b5f5a", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:22", "1892231", "c1cedc0a39636edb00504b28615cd3f7570e9ef2", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:22", "1892232", "71ed0c438010f5a1175e0aecf651f11f", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:22", "1892233", "5df4e83737ada213b9d0ebd4c10cd133a51a58651eef0c16a6d855427f3f91e2", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:21", "1892226", "9bca93708a030800083c3b6ee80026ac", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:21", "1892227", "63cfd11a7b698ba5094402d2cbf90e218deffc7d5b47c88a7a4b7c72f4ce577c", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:21", "1892228", "1258038999ea052b51517bfb55a76d17f1f6ea0f", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:21", "1892229", "7b682ccd1c64772c008771cf7f82ecf8", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:20", "1892222", "ecc260c95b9e029000425314f6d8303f9770d00f", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:20", "1892223", "073c356c4632b6a4ce38aab8a9002c55", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:20", "1892224", "d0a3edffb419f2843f421e9f9568fafe7e77e39dc19c6530ea054c074f346a61", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:20", "1892225", "f86d68ac842f22e6a89c9cdf26a76ff2874767ff", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:19", "1892221", "336b3fc46fb10b237b02898203558f045633bdb4585f229551ac1d417f2c93f1", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:18", "1892219", "ba1c940b7c347428daa23ecdf7163a5a7014e4b0", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:18", "1892220", "d0e5a09b69aee403443d0955c2854f2e", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:17", "1892215", "8445c3ed00e07796952e38bf0166c75b75731ed54932494c9f23eba1abd412f8", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:17", "1892216", "0538c0ba8a7aef1c21ab5a3daf7a090882e526fa", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:17", "1892217", "c1cde39427003b35637d9b0fbf84736a", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:17", "1892218", "4f7c36d52411d5fdcd7f1a61467427ac5fee7a635d7a4093910689992e747c70", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:16", "1892212", "d3d1814edbe02d75491b343b12f73c21dd18c92f49d4dfd0cd9ec80bbac0feb6", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:16", "1892213", "4742f5786c483e6c0d6a7078893490720229d5fc", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:16", "1892214", "18d8f8825f4ad24425d203b3939c4d9c", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:15", "1892209", "88ad46d7a638c75e69aa8edb4b63ac561482ff3f9ca43f84eab5988559acf4c9", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:15", "1892210", "e023025c9c4b6e9622d9204b17d89b216eb03c0c", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:15", "1892211", "28a0abc188af0e3b2bbc69c26d3cbbf1", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:14", "1892206", "1310707e4fccab2010978787d73efd899d3fd74c11ad3fa79c91f66a8aa4f093", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:14", "1892207", "b3a9c3b3308ab91bd226aaeb8f751e9418752190", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:14", "1892208", "787986de847dad6a56e0c27002e80105", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:13", "1892202", "ad4920ffdf4d4b8efa6abff1498e825a", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:13", "1892203", "0a954e02c5c334fced26459329feccbe9750614c0bdb1cb26e9196d5a2d7044b", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:13", "1892204", "9bf92b9d01e1098f4348618b4dcde1bd267f98c9", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:13", "1892205", "4395fd8f9936515d32b58b0f4b9be533", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:12", "1892200", "8c021fb1ebd1dc551c0586023d756dfa820dd59f57e469483a5ad96669a69bf8", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:12", "1892201", "9320916ff2f4bf5016d3e82511c3269fc297f778", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:11", "1892199", "7f1150a2bdb3a6cc564b52731b3b73ff", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:10", "1892196", "d9d4986756a307a9a687e8c0ee85b93f", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:10", "1892197", "5a92f7194f4840889dd8c460d1f3d4816e351bc546f1a6af7492ef9709e1f8db", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:10", "1892198", "9a4743f14712e549f2ce62fda4a192c71086bc6d", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:09", "1892192", "5ccba3f31bf3a7e9885216d553a2781e11e7e318", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:09", "1892193", "374f2b34ce189ad4699f3ea27a513824", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:09", "1892194", "c753da5052ca60ceea81311f839c6475ace338e63161e66a53424e3c96982663", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:09", "1892195", "ccd115e3c75affd4b584f1187bf3a9de7a873659", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:08", "1892189", "83285c9d2feefbf21f4713c3a9d6b045b3729eb7", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:08", "1892190", "156612f475b300e786de37a7e7b721df", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:08", "1892191", "ab343ecdaeeb63ba165e55c5d00a5315a4c3dea63b9f04475acdfcaaf86b9e30", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:07", "1892186", "eb571e2601e4093d4ae640926e4d00558b60b52d", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:07", "1892187", "986a6f3196df6e70386ff769cf9b8c50", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:07", "1892188", "063199a63746acf6177d01b4e7926c29474c3c9b1efd6379c776270db15e4eed", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:06", "1892185", "1b19773586273476f120ccf8d4f4e708b028c31208d629745af55146fea7cca0", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:05", "1892183", "d4d9d3621158928b518f846e6d2750444aa03a09", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:05", "1892184", "e5b2bdd7b41f34655a18dc64b1dfd5c2", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:04", "1892180", "2c853c0960aaec22de8854c64788600186145c7a", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:04", "1892181", "5afec43f5c24170974cea4812eb4aa1a", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:04", "1892182", "b399ae436261981a3028c8cd2afbb74f2f3ee67802dfd9e9b115b50d0e2e4586", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:03", "1892176", "fb78571c836bd14c37d13ee7df27e7f14f5cafbe14803a963e0cb8d4c3404afb", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:03", "1892177", "c4f964b58073aa299162d30368dd1cb1aef438cd", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:03", "1892178", "11e741893c0d27194267569eaba78a6f", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:03", "1892179", "4cf020840b9c56b72cff2a39d5d43e4d94c3d923f3972c81a6cf307be47894b3", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:02", "1892175", "3ce91f4b8ef19a3b05dada4e383d947a", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:01", "1892173", "9cd3b9489195bdf198212c1525f035d91b1f5056020434892a3f0b8709c03369", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:01", "1892174", "b40154f9b7619056c54d78f09e6f2f8675ff8356", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:00", "1892170", "70aebaa150deabc425c59c16847ac5f808a6dca0a694ba6731039519722fc927", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:00", "1892171", "05237b174fc707fdf9d784c84f85fe9747dd354d", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:41:00", "1892172", "5939d604339034532319a5f5dde7d440", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:59", "1892166", "17ffd9f15fde1f6745336904de98f7f6", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:59", "1892167", "7ef6d19cbe7749f9af0e07f4ee9ff888dc521b86d92c6d2c96e05d23c8285a2a", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:59", "1892168", "dd9a29c32763084a28eb1ef2a15bbca86c7f64c2", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:59", "1892169", "d5c466a742d8a3a43740ac6b1b23edf8", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:58", "1892162", "d729429f3de4b590f7288af6c25e52b791c274a2", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:58", "1892163", "87c4cc6038de755b2f92a6170f996e76", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:58", "1892164", "a8b04cd55da5c1e39226c438e3135535c4b59fd09923793adca8f4e423d5da68", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:58", "1892165", "953b83696684fa80364b20a234ea5c4d2932d752", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:57", "1892159", "1415b8c88e32671ad160f304ebcf6ca8ee7e66f0", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:57", "1892160", "dc35612daa6b90f8a43f1c227b9098f5", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:57", "1892161", "be39c7d6f0dcfcab1cada0b3c00de9120c620d9dd70ae705a44a5c090af2dc6f", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:56", "1892156", "cc2a3cff77510c33812d3c6640fba457f0be6bfd", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:56", "1892157", "8199bc5927704382b1c979647164d7d4", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:56", "1892158", "707a0a8e815cc25a627070089409d0d53da58d08d9a262d0d1e4268d0b15a728", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:55", "1892152", "3100d0767cc791b6b83a87efdf0b1c45c7bc9f2a5107449f48631cd0b50467b9", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:55", "1892153", "869888dce1dc0f6fb02ada26ca2f1783c6315a5e", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:55", "1892154", "aaabbc1075a27b11770a0852ebe95732", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:55", "1892155", "1f2e4e6ca760efe31ce90a1fb75d886cbc88d6f57fcd868649f5712b761be8ac", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:54", "1892149", "a1d1d77408b0f885e83953e9e73a64f59333997c1a352739903381d6adf9d6b2", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:54", "1892150", "d4bcef132fa91aa07ccd82f40433cfda1f8192a3", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:54", "1892151", "4c92a36b3568f29fdc1c2a18d11bc3b6", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:53", "1892147", "a0fade7e52ce271bcba5041c76ca48055bffc441", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:53", "1892148", "a6a805492262d48a585c61bf3949ec62", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:52", "1892146", "236af436fd7fff6ed0f093b1cee2aa98951dba51b0211539edc68e42cfb6ce0f", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:51", "1892144", "7ecbe5b6fd42e5d1d20add93750e9dab6fda88ad", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:51", "1892145", "9b34dee116e885bdeb52e12473ef5bc2", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:50", "1892140", "b0e750d6df4bcc84452967dcb61c1c831234b6fd4f8cb18d428502dde92bbc62", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:50", "1892141", "6a35d430b68f8d14774ad774c5c441d6eb6f9395", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:50", "1892142", "7de419b49133d63738b5d6c552c0f094", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:50", "1892143", "a15725bfb1d9de416fdbd7eeea577b4f328417cbb401ba91a1ea91f244e9a0c3", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:49", "1892139", "98d169463f862d086bf02ae8b5cd1d86", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:48", "1892137", "db6fc0b9be85dad1cc11daab495cae26f719979f01f491bfb3c71aee2bec39a8", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:48", "1892138", "caf04575e05bc9179007ed5f4c6e0f8263fcd828", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:47", "1892134", "7bb9468d71453ddce9e6ebaa63c308ee33f100c4498b70f4b04aba23f5234a89", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:47", "1892135", "69af9a0f82f023b26c3ed108b0eea9b9c9d611ed", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:47", "1892136", "ea7e4d8d746116a93ca6b92cf8e4869f", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:45", "1892132", "1477adf1fbd8d9e55c3114689934819f524b5b57", "sha1_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:45", "1892133", "3f84ee612332dcafeff3e5f5cfafc1de", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:44", "1892128", "b2b7a4513002ef7e08a53440f1c57801c0f6113e7f22363f929e39c37188f6b7", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:44", "1892129", "47504e79dafbe091e6f77908292e2b6c6249d503", "sha1_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:44", "1892130", "aae740360ec8cfe8c2573863f85d98be", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:44", "1892131", "386aece5751535acf2c60a1cec037ec18da94d6a10237117debccbc0cf8ceaa7", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:43", "1892124", "1d58f29c8364caeaa015c3e27b01eb21", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:43", "1892125", "f3c278a83619ade385ba939891d1455bd3f8eceb4e94566be2f5d1ef1289586d", "sha256_hash", "payload", "win.golroted", "None", "Golroted", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:43", "1892126", "32a57e231e48fd3018bf01bfccadb3e16dd1eb5b", "sha1_hash", "payload", "win.golroted", "None", "Golroted", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:43", "1892127", "8266795c498edf5cd5463065e74faade", "md5_hash", "payload", "win.golroted", "None", "Golroted", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:42", "1892121", "c367f434aa20c7309783ad1853f7260d", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:42", "1892122", "35180caf222c793b7aedf582b8c55035777b34ccc46e6bcf9bde71b78aa62d24", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:42", "1892123", "d125d550e41997ec64f46a43031554c30a8649a2", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:41", "1892117", "35956c8badaade31e0f19f3ab49dfaa399982b4f", "sha1_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:41", "1892118", "ab6ab7c69d532b0a30664b1eae3179c1", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:41", "1892119", "a0aaa48a09b7de1757174e1d71f2f971ebacb0b519df482fb31a490d03038941", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:41", "1892120", "ad72caca510a6133f9053c007398271b7479b37c", "sha1_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:40", "1892113", "c01666d1403c50854435c95febd48bc93d1a176f1d446dd58186ed102f1c2a20", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:40", "1892114", "f03c9290411b85f93f5ddeff9b853f0a36bbd111", "sha1_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:40", "1892115", "07013ad4ee3f650891656fb801449be9", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:40", "1892116", "0fc490d3f43950b3119adb44e367a1f4c79a7361f0ce9569db7908651ebebe0f", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:39", "1892110", "1178349ef0c3277ab0b197b219eab20ef234d5ed72ac8e102f1e802855d9a6a4", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:39", "1892111", "92be9e0c60548a8b4ff7c30c8a7f44574e959f1b", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:39", "1892112", "3bf4daa72f54daa9d817b6b2feeb53be", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:38", "1892106", "0b33bdca8e40807365c6f12be0643ee9", "md5_hash", "payload", "win.phorpiex", "Tldr,Trik,TwizT,phorphiex", "Phorpiex", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:38", "1892107", "49dc5155cd50447bbdf92da2045d501ed3424cbd6763f976934430441c23552f", "sha256_hash", "payload", "win.phorpiex", "Tldr,Trik,TwizT,phorphiex", "Phorpiex", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:38", "1892108", "b37c0045a65f7a33d25dc0a19b7b57ff7b9bba94", "sha1_hash", "payload", "win.phorpiex", "Tldr,Trik,TwizT,phorphiex", "Phorpiex", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:38", "1892109", "08a689a9093f3c81904933456f8d3618", "md5_hash", "payload", "win.phorpiex", "Tldr,Trik,TwizT,phorphiex", "Phorpiex", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:37", "1892103", "47f2ce28e9aa42fa8fbb912bdfd854fb", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:37", "1892104", "58107ef0590387ecd7870993f6f7166002e92f600238f070f11ff3413cafa800", "sha256_hash", "payload", "win.phorpiex", "Tldr,Trik,TwizT,phorphiex", "Phorpiex", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:37", "1892105", "5e8956dfe321a14dc054b07daf1159be723519ab", "sha1_hash", "payload", "win.phorpiex", "Tldr,Trik,TwizT,phorphiex", "Phorpiex", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:36", "1892099", "9abed7ab82f16c8d5efffde0e1a0d24c115fc109", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:36", "1892100", "fdf655fb4cec2475d255915507a358e2", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:36", "1892101", "ef88d67603efeb33fc269bf6c924ad1afbaf2c36099a7b5247a1bca171b15a6a", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:36", "1892102", "6d638fc53e9414357e75fb65aa8906a0d1289f8e", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:35", "1892096", "a9d26b8cbe5e6bda085f59f30a6330b052bba582", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:35", "1892097", "9bc7883951f10740c7609f06ba192156", "md5_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:35", "1892098", "876e6dcdcdca4e322f44ffcdcf3c0746297e335a21a55856d021b92ab9311d2e", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:34", "1892093", "0e30b33acd596bd37ed8c0c5774fe5c1b5e88af2", "sha1_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:34", "1892094", "e7c515d44e5a53d4f695cee4d9ae67b1", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:34", "1892095", "25689a084aaf0f67f61ada67250e3090319daadad24d0b85bae46334677dbe40", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:33", "1892089", "79b3612d856a4949395de781b875c1625ff8bd1c9cb8790209bfb4819a2240d9", "sha256_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:33", "1892090", "33759ebbbc586e2f574838c7fdba7421862e4689", "sha1_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:33", "1892091", "1807503a422d180ea91f0a23cbd76962", "md5_hash", "payload", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:33", "1892092", "2bd9ba7932c288d4b2f8a1ef48e4628c04f8ed12c340d775b4765fbaaff61869", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:32", "1892086", "6374eb353f02c7b26e00697a32f4a4f613402ca0296f5f10afdb3243f729c1b9", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:32", "1892087", "98bf6e4cfe91f5a1154ae0e168437b81318dd24b", "sha1_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:32", "1892088", "a56af1b76500fad38edb4958e6a29399", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:31", "1892083", "d70fc0b690b491762a0f861cd129786e9e54c4a79dff6f7bd0b3a14c90b6ec24", "sha256_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:31", "1892084", "05985936885fb7a0e70f4ea74aa5049695879952", "sha1_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:31", "1892085", "33970f0d2d3ba1f4d505dec41eb157e6", "md5_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:30", "1892080", "609996da0ee3ae21db2ecc8c98c656994723fc8359410a118a2042c418b53f03", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:30", "1892081", "10956e3f7ca522e8c0c0841446d883f7f65a9c70", "sha1_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:30", "1892082", "6947fe506ee83239c32a4213a91e1365", "md5_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:29", "1892077", "21ca7ea24b9faedcc3d82d803f71f3d61d407d518dd503b6da5ea9b8dac3d0bc", "sha256_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:29", "1892078", "ffdbb80d7302f58a6b44cde7b7c390afe99487f6", "sha1_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:29", "1892079", "548c6c4912046e948df0e2578cf4dd89", "md5_hash", "payload", "win.netwire", "NetWeird,NetWire,Recam", "NetWire RC", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:28", "1892074", "00c4603f074afb652780bb8b3e703ae093c5644652b81954ec6d0fb983e79203", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:28", "1892075", "bc451286285ba16909ec5c884bcfec381a17c91e", "sha1_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:40:28", "1892076", "7dde3aa953a54b22666dcadc568a870e", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "", "95", "False", "None", "None", "0", "Grim"
"2026-09-01 01:24:45", "1892073", "dyhisyde.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 01:19:11", "1892072", "oj21eac49y.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 01:17:09", "1892071", "cuxegulu.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 01:08:17", "1892070", "e784kfx8.shop-powerbite.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-09-01 01:08:28", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-09-01 01:05:05", "1892069", "49.232.183.87:18080", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-09-01 01:01:25", "1892067", "kulike.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 00:50:45", "1892065", "hkd.138sportlogin.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-01 00:50:45", "1892066", "https://hkd.138sportlogin.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 06:00:43", "100", "True", "None", "vidar", "0", "crep1x"
"2026-09-01 00:43:29", "1892064", "pygukocy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 00:40:27", "1892062", "www.tuerenportal.ch", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-09-01 00:40:27", "1892063", "speedimmo.ch", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-09-01 00:20:07", "1892060", "magewusi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-09-01 00:07:45", "1892059", "pavmx58620.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 23:49:20", "1892058", "fusydiri.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 23:46:43", "1892057", "1.94.65.9:2147", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:42", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-31 23:43:53", "1892056", "jjfdd99870.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 23:14:13", "1892054", "dtoba44481.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 23:10:50", "1892053", "c16xfxw4.shop-enerflow.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-31 23:09:27", "1892052", "jojorivo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 23:07:48", "1892051", "bdyfs84973.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 23:07:10", "1892050", "shop-enerflow.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 23:07:16", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 23:04:31", "1892049", "qewolasi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 23:03:26", "1892048", "hehytiru.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 22:35:25", "1892046", "ecuador.embajada.gob.ve", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "", "100", "True", "", "ClickFix,Mac", "0", "varysz"
"2026-08-31 22:34:30", "1892045", "edpartnerspk.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "", "100", "True", "", "ClickFix,Mac", "0", "varysz"
"2026-08-31 22:34:23", "1892044", "dalotypi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 22:33:30", "1892043", "electroste99.life", "domain", "botnet_cc", "js.iclickfix", "None", "IClickFix", "", "100", "False", "", "c2,ClickFix,Mac", "0", "varysz"
"2026-08-31 22:32:24", "1892042", "ecortiella.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-31 23:00:22", "100", "True", "", "ClickFix,Mac", "0", "varysz"
"2026-08-31 22:26:31", "1892039", "dynalarme.fr", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "", "100", "True", "", "ClickFix,Mac", "0", "varysz"
"2026-08-31 22:25:18", "1892038", "9ngdq1sh.shop-cogniclear.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x0f14,macos", "1", "anonymous"
"2026-08-31 22:21:52", "1892037", "shop-cogniclear.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 22:21:58", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 22:19:21", "1892036", "fafupixi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 22:12:23", "1892034", "cliff-bell.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "", "100", "True", "", "ClickFix,Mac", "0", "varysz"
"2026-08-31 22:10:35", "1892033", "chrgasa.org", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "", "100", "True", "", "ClickFix,Mac", "0", "varysz"
"2026-08-31 22:10:23", "1892032", "http://cdire.shop:9048/events", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-31 21:55:03", "1892029", "http://nopxs.shop:8839/settings", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-31 21:55:03", "1892030", "http://cdire.shop:9048/categories", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-31 21:49:44", "1892028", "bloguc.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "", "100", "True", "", "ClickFix,Mac", "0", "varysz"
"2026-08-31 21:49:43", "1892026", "http://oceanvw.click:3215/folders", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-31 21:49:43", "1892027", "http://cdire.shop:9048/folders", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-31 21:44:36", "1892025", "pyxole.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 21:43:53", "1892024", "mwks2u0x.shop-burnblend.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-31 21:40:28", "1892023", "shop-burnblend.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 21:40:34", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 21:33:39", "1892022", "tttfuwyry2.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 21:32:39", "1892021", "qqzl80cb.shop-biodentix.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xdcf2,macos", "1", "anonymous"
"2026-08-31 21:31:25", "1892020", "shop-biodentix.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 21:31:30", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 21:30:43", "1892019", "xifeki.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 21:29:20", "1892018", "autoescolalp.com.br", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-09-01 00:02:27", "100", "True", "", "ClickFix,Mac", "0", "varysz"
"2026-08-31 21:27:26", "1892017", "coqydy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 21:17:27", "1892016", "shaltaypi.life", "domain", "botnet_cc", "js.iclickfix", "None", "IClickFix", "", "100", "False", "", "c2,ClickFix,Mac", "0", "varysz"
"2026-08-31 21:16:33", "1892015", "apartsearcher.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "", "100", "True", "", "ClickFix,Mac", "0", "varysz"
"2026-08-31 21:09:10", "1892014", "h6a927ks.shop-eloncode.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-31 21:09:03", "1892013", "agricropmarket.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "", "100", "True", "", "ClickFix,Mac", "0", "varysz"
"2026-08-31 21:08:27", "1892012", "hedwig583.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 21:07:10", "1892011", "3dtailorplugin.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "", "100", "True", "", "ClickFix,Mac", "0", "varysz"
"2026-08-31 21:06:44", "1892010", "shop-eloncode.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 21:06:51", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 21:05:22", "1892009", "vitamindpi55.digital", "domain", "botnet_cc", "js.iclickfix", "None", "IClickFix", "", "100", "False", "", "c2,ClickFix,Mac", "0", "varysz"
"2026-08-31 21:05:05", "1892007", "88.119.169.216:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-31 21:05:05", "1892008", "137.220.151.95:2096", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 21:00:56", "1892006", "fozyce.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 20:35:57", "1892003", "mifxf64983.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 20:20:06", "1892002", "http://cdire.shop:9048/invoices", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-31 20:20:04", "1892001", "http://oceanvw.click:3215/permissions", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-31 20:07:50", "1892000", "sotvn86027.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 20:05:07", "1891998", "195.177.94.101:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-31 20:05:07", "1891999", "47.115.34.48:1082", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-31 20:05:06", "1891997", "149.104.21.33:80", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-31 19:57:30", "1891996", "vygumi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 19:52:12", "1891995", "81h5z9681x.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 19:49:32", "1891994", "rbxow04849.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 19:47:07", "1891993", "94.26.3.17:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-31 19:46:33", "1891992", "51.250.17.147:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:55", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-31 19:46:32", "1891991", "5.175.182.184:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-31 19:46:26", "1891990", "45.88.91.50:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:47", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-31 19:46:18", "1891989", "45.142.31.82:52125", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:38", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-31 19:45:47", "1891988", "217.217.97.164:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-31 19:44:53", "1891987", "199.231.191.3:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-31 19:44:47", "1891986", "195.177.94.101:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-31 19:43:48", "1891985", "154.13.7.183:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-31 19:43:37", "1891983", "136.0.213.135:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:37", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-31 19:43:37", "1891984", "136.0.213.135:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:37", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-31 19:43:18", "1891982", "105.158.184.163:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-31 19:43:13", "1891981", "104.143.46.142:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-31 19:43:12", "1891980", "104.143.46.142:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-31 19:43:05", "1891979", "102.220.160.198:7001", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-31 19:30:40", "1891978", "93.152.223.161:443", "ip:port", "payload_delivery", "js.iclickfix", "None", "IClickFix", "", "100", "False", "None", "ClickFix", "0", "threatcat_ch"
"2026-08-31 19:30:39", "1891977", "finnancialpl.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "", "100", "False", "None", "ClickFix", "0", "threatcat_ch"
"2026-08-31 19:30:37", "1891976", "interactivsbroker.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "", "100", "False", "None", "ClickFix", "0", "threatcat_ch"
"2026-08-31 19:23:56", "1891975", "priscoral.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 19:15:03", "1891974", "185.227.69.72:1417", "ip:port", "botnet_cc", "win.njrat", "Bladabindi,Lime-Worm", "NjRAT", "", "100", "False", "None", "NjRAT", "0", "abuse_ch"
"2026-08-31 19:11:07", "1891971", "ewrca1qqxb.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 19:08:02", "1891970", "7po1l9nh.shop-echofree.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-31 19:06:38", "1891969", "shop-echofree.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 19:06:44", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 19:05:08", "1891966", "kingkong-mag.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-31 19:05:08", "1891967", "totalforcegym.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-31 19:05:08", "1891968", "theoriginbeachsoul.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-31 19:05:07", "1891965", "www.weoptic.fr", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-31 19:05:06", "1891962", "167.17.47.14:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 19:05:06", "1891963", "167.17.47.14:22", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 19:05:06", "1891964", "102.117.174.216:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:04", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-31 19:05:05", "1891960", "167.17.47.14:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 19:05:05", "1891961", "167.17.47.14:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 19:00:45", "1891958", "gaz.138sportlogin.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-31 19:00:45", "1891959", "https://gaz.138sportlogin.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:58:23", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-31 18:55:06", "1891956", "awillicontractors.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-31 18:55:06", "1891957", "ero-corp.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-31 18:50:45", "1891954", "gaz.12naga.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-31 18:50:45", "1891955", "https://gaz.12naga.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-31 18:45:37", "1891953", "vijaduqe.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 18:45:04", "1891952", "www.mahayanti.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-31 18:24:12", "1891951", "zilaju.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 18:21:13", "1891950", "pk4vxmqyz7.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 18:13:43", "1891949", "locageje.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 18:13:04", "1891948", "noi403e7.shop-cardioslim-tea.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x0f14,macos", "1", "anonymous"
"2026-08-31 18:10:56", "1891947", "shop-cardioslim-tea.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 18:11:03", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 18:09:11", "1891946", "lyfoqy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 18:09:06", "1891945", "fwu2zba9n3.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 18:00:45", "1891943", "r.v-panel.asia", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "50", "False", "", "None", "0", "g0njxa"
"2026-08-31 18:00:45", "1891944", "https://r.v-panel.asia/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "50", "False", "", "None", "0", "g0njxa"
"2026-08-31 17:54:04", "1891927", "167.71.38.182:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 00:41:14", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 17:54:04", "1891937", "07ddbbe2c71c45577a7a4fbcdba0df91", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "50", "False", "https://threatcluster.io/cluster/valleyrat-backdoor-disguised-as-signed-adware-197dbde1", "None", "0", "threatcluster"
"2026-08-31 17:54:03", "1891938", "8a626d844943da3456b044f38deae3a2", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "50", "False", "https://threatcluster.io/cluster/valleyrat-backdoor-disguised-as-signed-adware-197dbde1", "None", "0", "threatcluster"
"2026-08-31 17:54:03", "1891939", "c24e99f9437feacaa63766a3cde3fe3d", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "", "50", "False", "https://threatcluster.io/cluster/valleyrat-backdoor-disguised-as-signed-adware-197dbde1", "None", "0", "threatcluster"
"2026-08-31 17:36:57", "1891942", "qusala.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 17:11:14", "1891941", "tokozeto.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 17:08:03", "1891940", "iuhdcqg0.shop-dentilock.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-31 17:05:59", "1891936", "shop-dentilock.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 17:06:05", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 17:03:01", "1891935", "pupevivo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 17:00:45", "1891933", "gen.12naga.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-31 17:00:45", "1891934", "https://gen.12naga.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-31 16:41:18", "1891932", "debicyki.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 16:40:17", "1891931", "sxohnfj3.shop-blinzador.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-31 16:39:49", "1891930", "shop-blinzador.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 16:39:55", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 16:39:32", "1891929", "shop-gutlite.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 16:41:09", "100", "True", "None", "31August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-31 16:35:38", "1891928", "kohyhe.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 16:31:17", "1891926", "mqduizlq.shop-biodentex.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xdcf2,macos", "1", "anonymous"
"2026-08-31 16:30:34", "1891925", "shop-biodentex.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 16:31:41", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 16:29:08", "1891924", "riisw09472.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 16:11:41", "1891923", "https://privetbelvedere.net/proxy/legacy-thread.js", "url", "botnet_cc", "js.smartapesg", "HANEYMANEY,ZPHP", "SmartApeSG", "", "100", "False", "", "SmartApeSG", "0", "varysz"
"2026-08-31 16:11:02", "1891922", "privetbelvedere.net", "domain", "botnet_cc", "js.smartapesg", "HANEYMANEY,ZPHP", "SmartApeSG", "", "100", "False", "", "SmartApeSG", "0", "varysz"
"2026-08-31 16:08:32", "1891921", "https://89.167.19.220", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "https://bazaar.abuse.ch/sample/d3692f7f99d26b8ed39d82909f44c5ac4628fcc434ff13248fe6eac8e595b485/", "Vidar", "1", "anonymous"
"2026-08-31 16:04:31", "1891920", "n9jwqx0b32.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 15:55:34", "1891919", "qoxyjymy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 15:46:47", "1891914", "http://uygprdfkttn6xhsvngx3yjn2sa5mef6czptzkxnutgo7satsjqlo5pqd.onion:50051", "url", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "", "ClickFix,goldengate,gRPC,NodeJS-MaaS,RAT,TOR", "0", "Evwaldo"
"2026-08-31 15:46:46", "1891915", "r2vpglmz42fs5762tchek55bg4kdg3c6ozipg7wqs2ghzbhsdtwkzmyd.onion", "domain", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Settra%20Ransomware", "ransomware,settra", "0", "TheRavenFile"
"2026-08-31 15:46:46", "1891916", "rz5lecsm2re5ec4im362jnalrypxylxsdobuibuotbovvs4d3ctrcoyd.onion", "domain", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Settra%20Ransomware", "ransomware,settra", "0", "TheRavenFile"
"2026-08-31 15:46:45", "1891917", "hhj2nouojnatg6gvhfgrcqdanoe244gf26pixpnrcoxs7jiqu4atvzyd.onion", "domain", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Settra%20Ransomware", "ransomware,settra", "0", "TheRavenFile"
"2026-08-31 15:46:44", "1891918", "193.187.91.120:51842", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 01:43:55", "100", "False", "None", "Buffalo,c2,Remcos", "0", "Bitsight"
"2026-08-31 15:29:25", "1891908", "67.205.132.147:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 15:24:37", "1891913", "quvehuzo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 15:15:36", "1891912", "http://cdire.shop:9048/tags", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-31 23:40:22", "75", "False", "https://bazaar.abuse.ch/sample/e2bb18135f11abb5afa22fcd607183ff5cc5d2d499f8924a9a09dbe32ce7ecb9/", "remus", "0", "abuse_ch"
"2026-08-31 15:08:10", "1891911", "y1w1e9yu.shop-dentavive.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-31 15:05:49", "1891910", "shop-dentavive.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 15:05:56", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 14:54:16", "1891909", "hyhibe.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 14:49:08", "1891907", "7444aquamarine.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 14:43:30", "1891906", "cyrilipu.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 14:26:33", "1891905", "jobebosy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 14:24:16", "1891894", "134.209.176.36:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:44:04", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 14:24:16", "1891895", "167.71.38.182:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:43:51", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 14:24:15", "1891897", "188.166.163.166:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:43:25", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 14:24:15", "1891898", "165.232.36.145:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:46:08", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 14:24:14", "1891899", "188.166.160.153:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:43:39", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 14:24:14", "1891901", "165.232.112.16:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:46:21", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 14:24:13", "1891900", "165.245.209.216:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:45:43", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 14:24:12", "1891902", "157.245.41.38:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:45:56", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 14:24:12", "1891903", "178.128.201.199:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:42:50", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 14:24:12", "1891904", "46.101.160.192:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:08:48", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 14:19:27", "1891896", "ninjabattlearena.cfd", "domain", "payload_delivery", "unknown_webinject", "None", "Unknown Webinject", "", "100", "False", "", "ClickFix,Cloudflare", "0", "Gi7w0rm"
"2026-08-31 14:17:26", "1891893", "217.60.195.82:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/7ba1b23c6f80a0eb315b22da0dd3bcf1f91c0bf642c8132910a8f735dc264010/", "RAT,RemcosRAt", "0", "abuse_ch"
"2026-08-31 14:15:34", "1891892", "102.220.160.87:7009", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/df7f2d3fcb2314e884d582e93c2a18176bfec79436fa48c17be7d0b5be53f2fc/", "xworm", "0", "abuse_ch"
"2026-08-31 14:10:51", "1891882", "137.220.158.91:8080", "ip:port", "botnet_cc", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "", "99", "False", "None", "None", "0", "netresec"
"2026-08-31 14:10:50", "1891889", "https://hrrrison.sbs/api/v1/status", "url", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "", "100", "True", "None", "KongTuke", "0", "monitorsg"
"2026-08-31 14:10:50", "1891891", "pa-upd.mariomilan.com", "domain", "botnet_cc", "js.fakeupdates", "FakeUpdate,GhoLoader,SocGholish", "FAKEUPDATES", "", "100", "True", "https://infosec.exchange/@monitorsg/117190520737892112", "SocGholish", "0", "monitorsg"
"2026-08-31 14:10:32", "1891890", "109.122.18.182:50062", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "75", "False", "https://bazaar.abuse.ch/sample/eb1b0e969062136b3dcac00ea22d67ac6cd9a462cc99adb670c9692eff7274f0/", "asyncrat", "0", "abuse_ch"
"2026-08-31 14:05:06", "1891888", "150.242.246.106:8443", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-31 14:05:05", "1891887", "101.42.136.73:123", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 14:03:46", "1891886", "softcrate.cfd", "domain", "botnet_cc", "unknown_loader", "None", "Unknown Loader", "", "100", "False", "", "OffLoader", "0", "abuse_ch"
"2026-08-31 14:03:36", "1891885", "bbtidwyn.shop-cardioslim.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x0f14,macos", "1", "anonymous"
"2026-08-31 14:01:09", "1891884", "shop-cardioslim.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 14:01:20", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 14:00:58", "1891883", "supexire.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 13:55:10", "1891881", "pilakama.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 13:47:46", "1891877", "103.45.66.18:442", "ip:port", "botnet_cc", "win.valley_rat", "Winos", "ValleyRAT", "", "75", "False", "https://securelist.com/valleyrat-backdoor-adware/121175/", "RAT,ValleyRAT", "0", "abuse_ch"
"2026-08-31 13:47:46", "1891878", "103.45.66.18:443", "ip:port", "botnet_cc", "win.valley_rat", "Winos", "ValleyRAT", "", "75", "False", "https://securelist.com/valleyrat-backdoor-adware/121175/", "RAT,ValleyRAT", "0", "abuse_ch"
"2026-08-31 13:47:46", "1891879", "192.253.225.173:6666", "ip:port", "botnet_cc", "win.valley_rat", "Winos", "ValleyRAT", "", "75", "False", "https://securelist.com/valleyrat-backdoor-adware/121175/", "RAT,ValleyRAT", "0", "abuse_ch"
"2026-08-31 13:47:46", "1891880", "192.253.225.173:8888", "ip:port", "botnet_cc", "win.valley_rat", "Winos", "ValleyRAT", "", "75", "False", "https://securelist.com/valleyrat-backdoor-adware/121175/", "RAT,ValleyRAT", "0", "abuse_ch"
"2026-08-31 13:47:45", "1891876", "103.45.66.18:441", "ip:port", "botnet_cc", "win.valley_rat", "Winos", "ValleyRAT", "", "75", "False", "https://securelist.com/valleyrat-backdoor-adware/121175/", "RAT,ValleyRAT", "0", "abuse_ch"
"2026-08-31 13:46:06", "1891870", "https://swewart.sbs/api/v1/status", "url", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "", "100", "True", "None", "KongTuke", "0", "monitorsg"
"2026-08-31 13:46:06", "1891874", "8.210.93.39:22", "ip:port", "botnet_cc", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "", "99", "False", "None", "None", "0", "netresec"
"2026-08-31 13:46:05", "1891875", "47.83.128.111:80", "ip:port", "botnet_cc", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "", "99", "False", "None", "None", "0", "netresec"
"2026-08-31 13:15:05", "1891873", "sakurinos.com", "domain", "payload_delivery", "unknown_stealer", "None", "Unknown Stealer", "", "100", "False", "", "discord,stealer", "1", "anonymous"
"2026-08-31 13:12:05", "1891872", "rkhud95517.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 13:11:17", "1891871", "noxumo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 13:06:04", "1891869", "9mrz5b66.shop-dentalprime.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-31 13:05:08", "1891867", "175.43.223.199:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-31 13:05:08", "1891868", "1.117.77.166:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-31 13:05:07", "1891866", "101.42.136.73:4433", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 13:05:05", "1891865", "129.204.11.247:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 13:05:03", "1891864", "shop-dentalprime.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 13:05:14", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 13:03:16", "1891863", "pihiqoku.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 12:58:40", "1891851", "142.11.244.124:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "", "100", "True", "https://tria.ge/260831-n5mezs1djc/behavioral1", "danabot", "0", "dll"
"2026-08-31 12:58:32", "1891856", "43.129.180.120:5555", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 12:58:32", "1891857", "earl.afghankabobgrill.com", "domain", "botnet_cc", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,ClickFix,EtherHiding", "0", "penislandrocket"
"2026-08-31 12:54:36", "1891862", "nylefe.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 12:53:29", "1891861", "www.groupe-elemen.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-31 12:51:04", "1891860", "earl.afghankabobgrill.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 12:53:44", "90", "False", "None", "ClearFake,ClickFix,ErrTraffic,EtherHiding", "1", "anonymous"
"2026-08-31 12:48:54", "1891859", "https://raw.githubusercontent.com/Christa6547/davidrun/refs/heads/main/pull2395", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-31 12:41:34", "1891858", "qylofihi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 12:12:41", "1891855", "https://raw.githubusercontent.com/Christa6547/davidrun", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-31 12:11:03", "1891854", "o5kevt4l0w.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 12:05:06", "1891853", "129.204.11.247:22", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 12:05:05", "1891852", "207.148.64.94:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-31 11:55:55", "1891849", "http://flreaow.click:6527/transactions", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-31 11:55:55", "1891850", "http://cdire.shop:9048/reports", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-31 11:50:33", "1891848", "hitdw76155.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 11:45:04", "1891847", "64.224.17.88:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "False", "None", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-08-31 11:44:33", "1891846", "pjp9p9qh.teamgetdsm.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-31 11:43:27", "1891845", "inckz61wke.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 11:32:25", "1891844", "wo2n2gl5.shop-biobooster.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xdcf2,macos", "1", "anonymous"
"2026-08-31 11:32:22", "1891843", "dascu18032.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 11:30:31", "1891842", "shop-biobooster.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 11:30:38", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 11:25:42", "1891841", "lehyba.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 11:05:45", "1891840", "https://for.12naga.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:58:38", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-31 11:05:06", "1891838", "106.55.25.253:22", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 11:05:06", "1891839", "106.55.25.253:5173", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 11:05:05", "1891837", "106.55.25.253:8090", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:44", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 10:49:45", "1891833", "131.226.2.95:40038", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-31 20:14:50", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-08-31 10:49:26", "1891836", "fukokuto.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 10:49:11", "1891835", "intratechsa.co.za", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-31 10:24:59", "1891834", "xuliluma.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 10:10:02", "1891832", "147.124.223.53:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "False", "None", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-08-31 10:09:09", "1891831", "kap-engineering.co.uk", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-31 10:07:04", "1891830", "hbupgtkx49.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 10:05:06", "1891828", "106.55.25.253:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 10:05:06", "1891829", "106.55.25.253:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 10:05:05", "1891827", "106.55.25.253:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 10:00:47", "1891826", "cw91bzc2fb.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 09:55:03", "1891825", "http://cdire.shop:9048/sessions", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-31 09:51:58", "1891824", "dvtwn44396.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 09:50:59", "1891823", "r339jk17.mertre.net", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x0f14,macos", "1", "anonymous"
"2026-08-31 09:47:02", "1891822", "es0jh7f31p.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 09:45:32", "1891821", "192.99.70.186:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:53", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-31 09:45:03", "1891820", "144.172.84.7:6688", "ip:port", "botnet_cc", "win.valley_rat", "Winos", "ValleyRAT", "", "100", "False", "", "None", "0", "proxylife"
"2026-08-31 09:44:14", "1891819", "157.254.194.45:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:59", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-31 09:43:42", "1891818", "129.80.106.68:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:32", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-31 09:33:12", "1891817", "krbst56779.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 09:25:44", "1891815", "secure-loadfile28.info", "domain", "payload_delivery", "js.tonrat", "TONResolver", "TonRAT", "", "100", "True", "None", "None", "1", "anonymous"
"2026-08-31 09:25:44", "1891816", "vault-image.info", "domain", "payload_delivery", "js.tonrat", "TONResolver", "TonRAT", "", "100", "True", "None", "None", "1", "anonymous"
"2026-08-31 09:25:43", "1891809", "docstore-s6.info", "domain", "payload_delivery", "js.tonrat", "TONResolver", "TonRAT", "", "100", "True", "None", "None", "1", "anonymous"
"2026-08-31 09:25:43", "1891810", "exp-partner-statement.com", "domain", "payload_delivery", "js.tonrat", "TONResolver", "TonRAT", "", "100", "True", "None", "None", "1", "anonymous"
"2026-08-31 09:25:43", "1891811", "photo-hub.info", "domain", "payload_delivery", "js.tonrat", "TONResolver", "TonRAT", "", "100", "True", "None", "None", "1", "anonymous"
"2026-08-31 09:25:43", "1891812", "photonet-drive.com", "domain", "payload_delivery", "js.tonrat", "TONResolver", "TonRAT", "", "100", "True", "None", "None", "1", "anonymous"
"2026-08-31 09:25:43", "1891813", "pic-vault.info", "domain", "payload_delivery", "js.tonrat", "TONResolver", "TonRAT", "", "100", "True", "None", "None", "1", "anonymous"
"2026-08-31 09:25:43", "1891814", "secur3vault.info", "domain", "payload_delivery", "js.tonrat", "TONResolver", "TonRAT", "", "100", "True", "None", "None", "1", "anonymous"
"2026-08-31 09:15:22", "1891794", "213.152.162.29:13309", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "False", "None", "c2,Remcos,ScarB", "0", "Bitsight"
"2026-08-31 09:15:21", "1891805", "176.65.139.206:1999", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "80", "False", "None", "mirai", "0", "seckle"
"2026-08-31 09:15:21", "1891806", "hrrrison.sbs", "domain", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "2026-09-01 05:10:34", "100", "True", "None", "KongTuke", "0", "monitorsg"
"2026-08-31 09:15:21", "1891807", "https://hrrrison.sbs/api/v1/session", "url", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "", "100", "True", "None", "KongTuke", "0", "monitorsg"
"2026-08-31 09:15:20", "1891808", "https://hrrrison.sbs/api/v1/verify", "url", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "", "100", "True", "None", "KongTuke", "0", "monitorsg"
"2026-08-31 09:06:28", "1891804", "vyw0demm.gluccotrust--bites.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-31 09:06:21", "1891803", "4402inherent.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 09:05:09", "1891801", "154.91.180.246:18080", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-31 09:05:09", "1891802", "154.91.180.246:18082", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-31 09:05:08", "1891800", "117.72.202.93:8000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-31 09:05:06", "1891799", "31.76.102.46:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:21", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-31 09:05:05", "1891798", "8.148.26.139:22", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 09:01:10", "1891797", "ftp.ckzafetyztres.com", "domain", "botnet_cc", "win.agent_tesla", "AgenTesla,AgentTesla,Negasteal", "Agent Tesla", "", "100", "False", "https://bazaar.abuse.ch/sample/b3772c27111fa7cf9e97440a3bfbf5971097c5b273658fb697d4af68b98db787/", "AgentTesla", "0", "abuse_ch"
"2026-08-31 09:01:00", "1891796", "leriqilu.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 08:56:53", "1891795", "64.89.160.45:8443", "ip:port", "botnet_cc", "win.purelogs", "None", "PureLogs Stealer", "", "75", "False", "https://bazaar.abuse.ch/sample/6d2ae73f2bfc722707576fda2165a72ca620c26599b3bc63bec5b4e97ebdbc3a/", "PureLogsStealer", "0", "abuse_ch"
"2026-08-31 08:51:26", "1891793", "ycphj84084.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 08:44:25", "1891792", "123.253.32.82:5025", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-08-31 08:40:31", "1891790", "31.177.110.9:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:17", "75", "False", "https://bazaar.abuse.ch/sample/b54378e29cdea0b95f1dd513269b16af061d1e4a40162dd8b71e19796237cc27/", "asyncrat", "0", "abuse_ch"
"2026-08-31 08:40:31", "1891791", "92.118.206.129:7006", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/b8a3d16ad9e28103999357b592b517d14751308339f18845939f2766b7a6d488/", "xworm", "0", "abuse_ch"
"2026-08-31 08:40:30", "1891789", "217.60.103.4:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/8007179162a4f90597bf20a6088bb4f4589b0b220f80cb365ccb8b7f16a7da56/", "remcos", "0", "abuse_ch"
"2026-08-31 08:35:39", "1891779", "185.181.8.182:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:39", "1891780", "46.224.87.76:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:39", "1891781", "62.238.126.31:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:39", "1891782", "185.229.225.31:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:39", "1891783", "2.29.15.172:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:39", "1891784", "2.28.53.167:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:39", "1891785", "168.119.61.136:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:39", "1891786", "91.98.236.89:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:39", "1891787", "77.42.69.149:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:39", "1891788", "2.28.55.31:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:38", "1891768", "62.238.117.133:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:38", "1891769", "2.28.51.112:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:38", "1891770", "46.29.26.43:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:38", "1891771", "46.29.26.42:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:38", "1891772", "103.13.210.168:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:38", "1891773", "5.223.57.239:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:38", "1891774", "95.217.223.130:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:38", "1891775", "194.146.39.66:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:38", "1891776", "178.104.215.65:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:38", "1891777", "46.29.26.32:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:38", "1891778", "46.29.26.41:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:37", "1891763", "168.119.60.33:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:37", "1891764", "5.78.91.236:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:37", "1891765", "168.119.56.135:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:37", "1891766", "2.28.48.67:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:37", "1891767", "46.29.26.35:443", "ip:port", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:22", "1891761", "172.245.92.217:7004", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/a01d8ca7114e093f110c832ffec0c3a33a078390524635810ad73edd7bf82d88/", "xworm", "0", "abuse_ch"
"2026-08-31 08:35:22", "1891762", "209.54.103.151:6000", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/bca14eb5f340706f9f48dae0b5395d7a5b1ba2b4889f8576b8b79913e0bb1773/", "xworm", "0", "abuse_ch"
"2026-08-31 08:35:14", "1891743", "rmv.sm188dvlv.icu", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891744", "vcd.sm188dvlv.icu", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891745", "tak.sm188dvlv.icu", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891746", "eos.sm188dvlv.icu", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891747", "uza.sm188dvlv.icu", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891748", "jij.sm188dvlv.icu", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891749", "x0x.sm188dvlv.icu", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891750", "hh3.sm188dvlv.icu", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891751", "jre.sm188dvlv.lat", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891752", "rrr.sm188dvlv.lat", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891753", "zca.sm188dvlv.lat", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891754", "chi.sm188dvlv.lat", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891755", "tra.sm188dvlv.lat", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891756", "nsn.sm188dvlv.lat", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891757", "jre.12naga.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 08:35:47", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891758", "rrr.12naga.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891759", "zca.12naga.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:14", "1891760", "tra.12naga.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:13", "1891739", "ley.sm188dvlv.icu", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:13", "1891740", "sha.sm188dvlv.icu", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:13", "1891741", "rsc.sm188dvlv.icu", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:35:13", "1891742", "bnb.sm188dvlv.icu", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:47", "1891738", "https://2.28.53.167/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:46", "1891734", "https://46.29.26.41/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:58:43", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:46", "1891735", "https://185.181.8.182/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:46", "1891736", "https://62.238.126.31/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:46", "1891737", "https://2.29.15.172/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:45", "1891730", "https://46.29.26.42/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:45", "1891731", "https://103.13.210.168/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:45", "1891732", "https://5.223.57.239/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:45", "1891733", "https://178.104.215.65/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:44", "1891727", "https://62.238.117.133/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:44", "1891728", "https://2.28.51.112/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:44", "1891729", "https://46.29.26.43/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:43", "1891726", "https://tra.12naga.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:42", "1891722", "https://chi.sm188dvlv.lat/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:42", "1891723", "https://tra.sm188dvlv.lat/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:42", "1891724", "https://nsn.sm188dvlv.lat/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:42", "1891725", "https://rrr.12naga.org/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:41", "1891716", "https://jij.sm188dvlv.icu/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:41", "1891717", "https://x0x.sm188dvlv.icu/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:41", "1891718", "https://hh3.sm188dvlv.icu/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:41", "1891719", "https://jre.sm188dvlv.lat/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:41", "1891720", "https://rrr.sm188dvlv.lat/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:41", "1891721", "https://zca.sm188dvlv.lat/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:40", "1891710", "https://bnb.sm188dvlv.icu/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:40", "1891711", "https://rmv.sm188dvlv.icu/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:40", "1891712", "https://vcd.sm188dvlv.icu/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:40", "1891713", "https://tak.sm188dvlv.icu/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:40", "1891714", "https://eos.sm188dvlv.icu/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:40", "1891715", "https://uza.sm188dvlv.icu/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:39", "1891706", "https://dev.epicgames.com/community/api/user_profiles/profile.json?hash_id=EMqJL", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 16:09:05", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:39", "1891707", "https://ley.sm188dvlv.icu/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:39", "1891708", "https://sha.sm188dvlv.icu/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:34:39", "1891709", "https://rsc.sm188dvlv.icu/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-31 08:24:33", "1891705", "pyremy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 08:15:33", "1891704", "http://bravplo.click:7713/tasks", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/d9f8bfbb716f94e359f88cbe21d23f7d48cd7a24cadf71207e5a2eafbb91cf4b/", "remus", "0", "abuse_ch"
"2026-08-31 08:15:10", "1891703", "172.94.111.195:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "75", "False", "https://bazaar.abuse.ch/sample/be592d36972e47ba32ba4a1cd82e2450249fd07e0752289c844e61c6dc568715/", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-08-31 08:13:14", "1891700", "swewart.sbs", "domain", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "2026-08-31 23:10:08", "100", "True", "None", "KongTuke", "0", "monitorsg"
"2026-08-31 08:13:14", "1891701", "https://swewart.sbs/api/v1/session", "url", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "", "100", "True", "None", "KongTuke", "0", "monitorsg"
"2026-08-31 08:13:13", "1891702", "https://swewart.sbs/api/v1/verify", "url", "payload_delivery", "js.kongtuke", "TAG-124,js.LandUpdate808", "KongTuke", "", "100", "True", "None", "KongTuke", "0", "monitorsg"
"2026-08-31 08:08:07", "1891699", "ira240.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 08:05:05", "1891696", "31.76.102.46:8081", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-31 08:05:05", "1891697", "31.76.102.46:22", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-31 08:05:05", "1891698", "1.117.77.166:888", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-31 07:55:06", "1891695", "91.92.43.15:4444", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "False", "https://bazaar.abuse.ch/sample/ba5b5e1cedf641a8c3281e631a2034b5e4ab4f0153dafead21d76164ed717d5b/", "None", "0", "abuse_ch"
"2026-08-31 07:52:56", "1891694", "xiviju.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 07:47:16", "1891518", "pnd.onlineturbo88.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "https://x.com/orlof_v/status/2094133947362091245?s=20", "Validin,Vidar", "0", "orlof_v"
"2026-08-31 07:47:15", "1891519", "nsn.12naga.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 11:05:45", "100", "False", "https://x.com/orlof_v/status/2094133947362091245?s=20", "Validin,Vidar", "0", "orlof_v"
"2026-08-31 07:47:14", "1891520", "ley.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "", "100", "False", "https://x.com/orlof_v/status/2094133947362091245?s=20", "Validin,Vidar", "0", "orlof_v"
"2026-08-31 07:47:13", "1891521", "chi.12naga.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 08:35:14", "100", "False", "https://x.com/orlof_v/status/2094133947362091245?s=20", "Validin,Vidar", "0", "orlof_v"
"2026-08-31 07:47:10", "1891524", "104.248.41.207:34567", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 07:47:09", "1891548", "167.99.128.245:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 11:07:03", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 07:47:08", "1891567", "https://91.98.236.89", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 06:00:43", "100", "False", "None", "9fe37432b96b1f873dc66a38a261ef70,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-31 07:47:07", "1891577", "192.159.99.121:2580", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 03:58:49", "100", "False", "None", "@,c2,Remcos", "0", "Bitsight"
"2026-08-31 07:47:07", "1891579", "192.159.99.121:25800", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 04:01:52", "100", "False", "None", "@,c2,Remcos", "0", "Bitsight"
"2026-08-31 07:47:06", "1891583", "https://95.217.223.130", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:55:53", "100", "False", "None", "8e3a74868d6a5ab24c7948fba102cc52,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-31 07:47:03", "1891599", "131.226.2.95:4920", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-31 19:16:37", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-08-31 07:47:02", "1891609", "174.138.30.59:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 17:06:54", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 07:47:01", "1891619", "https://46.224.87.76", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:56:57", "100", "False", "None", "37a059228277b5942abd0dd5db874fd2,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-31 07:47:00", "1891621", "https://jre.12naga.org", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:59:28", "100", "False", "None", "0760b4f10cfeaeccbae17783b4b59360,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-31 07:46:59", "1891622", "196.251.121.183:4433", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "50", "False", "None", "18811,c2,censys,cobalt strike", "0", "sojubear"
"2026-08-31 07:46:59", "1891626", "216.203.20.232:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "50", "False", "None", "1828,c2,censys,cobalt strike", "0", "sojubear"
"2026-08-31 07:46:58", "1891647", "167.99.194.254:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-31 07:46:57", "1891660", "163.245.199.241:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-31 20:15:56", "100", "False", "None", "c2,NzQ1NzI2ODI5NzM5Mw==,Remcos", "0", "Bitsight"
"2026-08-31 07:46:57", "1891661", "31.97.133.166:4812", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-08-31 10:20:24", "100", "False", "None", "a465cd808ed9cca800749a734b591a42,c2,remus", "0", "Bitsight"
"2026-08-31 07:46:56", "1891672", "http://153.117.32.130:49657/Mozi.a", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/153.117.32.130", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-31 07:46:55", "1891673", "http://175.107.3.244:55339/Mozi.7", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/175.107.3.244", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-31 07:46:54", "1891674", "http://124.94.244.212:33038/Mozi.a", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/124.94.244.212", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-31 07:46:53", "1891675", "http://203.101.186.212:33774/Mozi.a", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/203.101.186.212", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-31 07:46:52", "1891677", "172.111.163.174:65070", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "False", "None", "c2,Nexus 27-08-26,Remcos", "0", "Bitsight"
"2026-08-31 07:46:52", "1891685", "172.111.163.162:65070", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-31 17:26:51", "100", "False", "None", "c2,Crypters&tools,Remcos", "0", "Bitsight"
"2026-08-31 07:24:36", "1891693", "pumykuja.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 07:21:12", "1891692", "zedypyqi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 07:16:42", "1891691", "pujavi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 07:11:23", "1891690", "hafagu-ce1.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 07:05:08", "1891688", "8.148.26.139:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 07:05:08", "1891689", "8.148.26.139:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 07:05:07", "1891686", "8.148.26.139:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 07:05:07", "1891687", "8.148.26.139:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 06:54:48", "1891684", "conectao.com.do", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-31 06:53:53", "1891683", "https://telegram.me/nag0a", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 08:34:39", "100", "False", "https://bazaar.abuse.ch/sample/1b19bd93bc95ba908f8d13cf9e7e69776d2d82722f325d9290550aed155e56bd/", "o0oi1,Vidar", "0", "abuse_ch"
"2026-08-31 06:49:08", "1891682", "dpiwraps.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 06:50:30", "100", "True", "None", "31August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-31 06:45:26", "1891681", "xesevy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 06:42:30", "1891680", "gebbxexd.shop-alphaboostpro.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-31 06:39:39", "1891679", "consultinggetdsm.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 06:39:45", "100", "True", "None", "31August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-31 06:33:24", "1891678", "441k40w4.shop-bellyflush.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xdcf2,macos", "1", "anonymous"
"2026-08-31 06:30:19", "1891676", "shop-bellyflush.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 06:30:26", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 06:15:54", "1891671", "duvokufi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 06:08:24", "1891670", "fyhoqo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 06:02:23", "1891667", "http://uiccvbk.click:8839/invoices", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-31 06:02:23", "1891668", "http://shhsift.click:7647/users", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-31 06:02:23", "1891669", "http://cdire.shop:9048/accounts", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-31 05:41:16", "1891666", "yhztr74434.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 05:37:00", "1891665", "dixibahy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 05:36:16", "1891664", "wdccb3xe.home-power-shield.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x0f14,macos", "1", "anonymous"
"2026-08-31 05:34:31", "1891663", "muziwawy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 05:18:58", "1891662", "vyivy22522.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 05:05:06", "1891659", "106.15.10.2:5672", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 05:04:38", "1891658", "fyjilowu.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 05:03:18", "1891657", "prgfeg84.getdsm.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-31 04:52:25", "1891656", "rlltn52176.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 04:33:23", "1891655", "http://flreaow.click:6527/webhooks", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-31 04:28:19", "1891654", "cenoci.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 04:08:11", "1891653", "fekajyzy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 04:05:05", "1891650", "123.56.83.34:9999", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-31 04:05:05", "1891651", "106.15.10.2:111", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 04:05:05", "1891652", "106.15.10.2:4369", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 04:04:03", "1891649", "pikeryri.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 03:57:47", "1891648", "f0n95tk64n.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 03:39:44", "1891646", "xocosyke.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 03:21:12", "1891645", "wequgucu.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 03:13:17", "1891644", "https://raw.githubusercontent.com/Christa6547/fling/refs/heads/main/scoop", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-31 03:06:11", "1891643", "dphx1pvb.en-us-glucotrustt-bites.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-31 03:05:07", "1891640", "117.72.202.93:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-31 03:05:07", "1891641", "117.72.202.93:8080", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-31 03:05:07", "1891642", "106.54.41.209:21118", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "viper", "1", "anonymous"
"2026-08-31 02:53:40", "1891639", "netiqu.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 02:52:30", "1891638", "vewiqy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 02:31:10", "1891637", "dyveku.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 02:27:34", "1891636", "gybyce.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 02:21:31", "1891635", "vucaw13958.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 02:11:24", "1891634", "xeryxo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 01:50:52", "1891633", "cixife.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 01:42:15", "1891632", "bp3mtp82.shop-aizenpower.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-31 01:29:51", "1891631", "qa5c8tze.www-glucotrust-bites.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xdcf2,macos", "1", "anonymous"
"2026-08-31 01:25:33", "1891630", "m3c33sfv.rtinaclear.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x0f14,macos", "1", "anonymous"
"2026-08-31 01:24:06", "1891629", "rtinaclear.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 01:24:12", "100", "True", "None", "31August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-31 01:18:52", "1891628", "pkigp79697.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 01:07:04", "1891627", "lixytala.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 01:05:06", "1891624", "101.42.136.73:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 01:05:06", "1891625", "47.105.114.163:9999", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-31 01:05:05", "1891623", "101.42.136.73:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-31 01:02:38", "1891620", "353qfu36.en-trump-token.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-31 00:55:09", "1891618", "156.251.11.58:935", "ip:port", "botnet_cc", "win.valley_rat", "Winos", "ValleyRAT", "", "100", "False", "None", "RAT,ValleyRAT", "0", "abuse_ch"
"2026-08-31 00:55:05", "1891617", "156.251.11.58:936", "ip:port", "botnet_cc", "win.valley_rat", "Winos", "ValleyRAT", "", "100", "False", "None", "RAT,ValleyRAT", "0", "abuse_ch"
"2026-08-31 00:51:52", "1891616", "sysyki.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 00:51:02", "1891615", "1oplympr3m.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 00:48:43", "1891614", "wuhola.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 00:36:51", "1891613", "www.forumeciv-afriquecentrale.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-31 00:14:22", "1891612", "dybecyvu.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-31 00:05:05", "1891611", "150.158.102.111:5003", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 23:54:28", "1891610", "varygo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 23:50:19", "1891607", "112.213.103.17:1217", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "75", "False", "https://bazaar.abuse.ch/sample/f6f7dbd6561e7ee6ba7e6abffdb1e5de01bf511318aade34825d888e99db645f/", "asyncrat", "0", "abuse_ch"
"2026-08-30 23:50:19", "1891608", "112.213.103.58:5812", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "75", "False", "https://bazaar.abuse.ch/sample/9109d9bd117f540aed9afa6f293c1396cc18ed979056eadca97c69e3f957c14d/", "asyncrat", "0", "abuse_ch"
"2026-08-30 23:46:41", "1891605", "101.42.136.73:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:42", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-30 23:46:41", "1891606", "101.42.136.73:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:43", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-30 23:35:57", "1891604", "nifibe.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 23:25:18", "1891603", "http://gofkaxz.click:8137/invoices", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-31 01:00:07", "75", "False", "https://bazaar.abuse.ch/sample/71cdf126636c50a3a2b71fa730ddc3f3ab03791a35a70aa774de8652ca96a174/", "remus", "0", "abuse_ch"
"2026-08-30 23:25:17", "1891602", "http://cdire.shop:9048/transactions", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-31 01:00:07", "75", "False", "https://bazaar.abuse.ch/sample/71cdf126636c50a3a2b71fa730ddc3f3ab03791a35a70aa774de8652ca96a174/", "remus", "0", "abuse_ch"
"2026-08-30 23:16:30", "1891601", "jycajame.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 23:14:52", "1891600", "nswpk62437.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 23:07:59", "1891598", "nerotywo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 23:05:37", "1891597", "228dione.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 23:05:08", "1891596", "150.158.102.111:22", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 23:05:07", "1891595", "150.158.102.111:8082", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 23:05:06", "1891594", "150.158.102.111:85", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 23:05:05", "1891593", "109.236.50.145:22", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 23:01:28", "1891592", "h5xluule.barbashat.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-30 22:44:22", "1891591", "http://urbandm.click:4812/documents", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-30 22:34:05", "1891590", "mumyqowi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 22:15:01", "1891589", "lacygenetic.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 22:11:23", "1891588", "http://cdire.shop:9048/videos", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-30 22:08:34", "1891587", "uey2bqd5os.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 22:05:06", "1891585", "150.158.102.111:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 22:05:06", "1891586", "150.158.102.111:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 22:05:05", "1891584", "150.158.102.111:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 21:44:47", "1891582", "kahule.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 21:38:30", "1891581", "dyfaqymo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 21:31:14", "1891580", "lerubizi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 21:16:00", "1891578", "zqjoz45628.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 21:14:02", "1891576", "0qa0xgkt.retinaclr.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x0f14,macos", "1", "anonymous"
"2026-08-30 21:13:04", "1891575", "retinaclr.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 21:14:11", "100", "True", "None", "30August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-30 21:06:39", "1891574", "mail.ded7845.inmotionhosting.com", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "2026-08-30 21:06:39", "90", "True", "None", "ClickFix,compromised", "1", "anonymous"
"2026-08-30 21:05:07", "1891573", "104.168.102.116:22", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 21:05:06", "1891572", "104.168.102.116:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 21:05:05", "1891570", "104.168.102.116:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:43", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 21:05:05", "1891571", "104.168.102.116:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 21:01:08", "1891569", "xnjbjf7o.shop-aquapeace.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-30 21:00:08", "1891568", "shop-aquapeace.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 21:01:12", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-30 20:56:03", "1891566", "http://cdire.shop:9048/tokens", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-30 20:53:44", "1891565", "dypocemy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 20:40:43", "1891564", "29l1b9y1.shop-aeroslim.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-30 20:40:06", "1891563", "pu8gkxg57y.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 20:25:04", "1891562", "http://cdire.shop:9048/webhooks", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-30 20:20:18", "1891561", "p0iqkjuq.usen-glucotrust-bites.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xdcf2,macos", "1", "anonymous"
"2026-08-30 20:19:34", "1891560", "usen-glucotrust-bites.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 01:29:33", "100", "True", "None", "30August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-30 20:14:27", "1891559", "toqima.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 20:05:07", "1891558", "109.236.50.145:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 20:05:06", "1891556", "109.236.50.145:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 20:05:06", "1891557", "109.236.50.145:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 20:05:05", "1891554", "109.236.50.145:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 20:05:05", "1891555", "109.236.50.145:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 20:05:04", "1891553", "http://cc893886.tw1.ru/L1nc0In.php", "url", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "", "100", "False", "None", "DCRat,RAT", "0", "abuse_ch"
"2026-08-30 20:02:40", "1891552", "tv7dug0hg6.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 19:57:53", "1891551", "nzasn96104.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 19:56:05", "1891550", "kadazyci.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 19:52:20", "1891549", "bezamy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 19:47:05", "1891547", "lbxpg68375.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 19:46:45", "1891546", "check1.judicica1n", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:37", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-30 19:46:39", "1891545", "94.228.166.168:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:31", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:46:33", "1891544", "91.219.239.81:972", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:23", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-30 19:45:59", "1891543", "45.225.135.156:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:43", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:45:29", "1891541", "217.60.195.109:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:45:29", "1891542", "217.60.195.109:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:44:37", "1891539", "195.177.94.188:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:00", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:44:37", "1891540", "195.177.94.188:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:00", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:44:35", "1891538", "194.59.30.96:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:44:58", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-30 19:44:14", "1891537", "185.112.59.115:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:44:04", "1891536", "172.86.122.177:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:43:52", "1891535", "162.243.160.70:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:05", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-30 19:43:51", "1891534", "160.119.69.30:5555", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-30 19:43:37", "1891531", "144.31.6.6:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:43:37", "1891532", "144.31.6.6:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:43:37", "1891533", "144.31.6.6:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 19:43:36", "1891529", "144.31.106.168:443", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:43:43", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-30 19:43:36", "1891530", "144.31.106.168:80", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:43:43", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-30 19:05:04", "1891528", "102.117.167.19:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:04", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-30 19:02:30", "1891527", "eelsq5rh.shop-aquaburn.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-30 18:59:54", "1891526", "shop-aquaburn.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 19:00:29", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-30 18:55:41", "1891525", "nelinura.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 18:52:58", "1891523", "zalyxi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 18:47:44", "1891522", "dosydi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 18:31:27", "1891517", "l9hmkvn2xm.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 18:14:00", "1891516", "vi28v3xsvo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 18:09:21", "1891515", "cc.nhancute.site", "domain", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-30 18:09:21", "100", "False", "https://bazaar.abuse.ch/sample/1bf4366ad6b382991c6b8c68b4863e9bafcc8e9533867b0e17b1d5825689c143/", "Mirai", "0", "abuse_ch"
"2026-08-30 18:09:20", "1891514", "160.250.181.124:47925", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "", "75", "False", "https://bazaar.abuse.ch/sample/1bf4366ad6b382991c6b8c68b4863e9bafcc8e9533867b0e17b1d5825689c143/", "Mirai", "0", "abuse_ch"
"2026-08-30 18:08:29", "1891513", "zoxycada.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 18:00:42", "1891512", "87.120.104.147:8080", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "75", "False", "https://bazaar.abuse.ch/sample/82bee273347b6e752d229b8fd3e5fed68cfc49f0f7145a8e457bf3ca0c91b5df/", "None", "0", "abuse_ch"
"2026-08-30 17:40:00", "1891439", "http://36.255.33.242:53631/Mozi.a", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/36.255.33.242", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-30 17:39:59", "1891440", "http://103.148.128.156:45276/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/103.148.128.156", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-30 17:39:59", "1891441", "http://103.237.157.163:56063/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/103.237.157.163", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-30 17:39:58", "1891442", "http://153.117.32.82:36030/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/153.117.32.82", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-30 17:39:58", "1891443", "http://124.29.214.104:35063/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/124.29.214.104", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-30 17:39:57", "1891444", "http://139.135.40.153:53926/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/139.135.40.153", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-30 17:39:56", "1891461", "167.99.128.245:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 14:21:00", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 17:39:56", "1891473", "45.142.30.152:3000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "False", "https://x.com/devmihaylov/status/2093987929282560285", "angel-panel,clipper,multiablo,stealer,telegram", "0", "devmihaylov"
"2026-08-30 17:39:55", "1891475", "159.89.24.55:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 17:39:54", "1891491", "https://zca.12naga.org", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:58:13", "100", "False", "None", "b8546d0712608b893c6c87d32a5986c5,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-30 17:39:54", "1891492", "https://2.28.55.31", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:56:06", "100", "False", "None", "4811e2fc839a15fdbf489521544e9eb9,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-30 17:35:56", "1891511", "qumilaga.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 17:24:22", "1891510", "jizegumy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 17:20:06", "1891509", "nonikiri.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 17:17:44", "1891508", "gygaqila.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 17:11:16", "1891507", "zavemo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 17:09:19", "1891506", "sahowi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 17:07:43", "1891505", "http://cdire.shop:9048/posts", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-30 17:03:53", "1891504", "7109hvuj.retinaclier.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x0f14,macos", "1", "anonymous"
"2026-08-30 17:03:07", "1891503", "retinaclier.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 17:03:14", "100", "True", "None", "30August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-30 17:00:30", "1891502", "lf2qo513.shop-aquaburn.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-30 16:59:25", "1891501", "shop-aquaburn.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 17:00:23", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-30 16:57:46", "1891500", "shop-alphatonic.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 16:58:52", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-30 16:54:56", "1891499", "glyco--free.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "True", "None", "30August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-30 16:49:40", "1891498", "ryduzoxe.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 16:41:43", "1891496", "http://cdire.shop:9048/subscriptions", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-30 16:41:43", "1891497", "http://cdire.shop:9048/messages", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-30 16:41:42", "1891495", "http://flreaow.click:6527/tasks", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-30 16:19:03", "1891494", "pucotihy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 16:06:23", "1891493", "www.maxmetalpackage.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-30 15:55:19", "1891490", "http://zonxh.shop:7728/reports", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/44fbba738f24e417236317f4efd260be890bcc745d6d9919a91b7015f84c402f/", "remus", "0", "abuse_ch"
"2026-08-30 15:55:16", "1891489", "http://kupzovo.shop:7567/reports", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "https://bazaar.abuse.ch/sample/44fbba738f24e417236317f4efd260be890bcc745d6d9919a91b7015f84c402f/", "remus", "0", "abuse_ch"
"2026-08-30 15:51:00", "1891488", "nolacu.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 15:35:23", "1891487", "7ytwphx3.purabst.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-30 15:34:49", "1891486", "fppanzb0p4.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 15:33:32", "1891485", "purabst.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 15:34:24", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-30 15:31:28", "1891484", "cxgsu17653.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 15:30:16", "1891483", "kuhekybi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 15:21:08", "1891482", "ryqagywe.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 15:08:15", "1891481", "quzerydu.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 15:06:30", "1891480", "2uehzspm.prosta-fense.org", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xdcf2,macos", "1", "anonymous"
"2026-08-30 15:02:03", "1891479", "prosta-fense.org", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 15:02:10", "100", "True", "None", "30August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-30 14:58:58", "1891478", "zyo61rgc.shop-alphasurge.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-30 14:57:14", "1891477", "shop-alphasurge.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 14:58:00", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-30 14:43:33", "1891476", "mdd0cs6ycy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 14:21:55", "1891474", "molylasu.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 14:07:37", "1891472", "yvjqs79906.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 14:05:08", "1891470", "160.250.128.197:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "supershell", "1", "anonymous"
"2026-08-30 14:05:08", "1891471", "145.79.143.166:80", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-30 14:05:07", "1891469", "106.53.172.234:30092", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-30 14:05:05", "1891468", "121.127.253.146:4444", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-08-30 13:55:33", "1891467", "sitykyly.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 13:50:23", "1891466", "http://cdire.shop:9048/images", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-30 13:50:22", "1891465", "http://flreaow.click:6527/messages", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-30 13:47:35", "1891464", "gmla8hmqnc.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 13:43:00", "1891463", "lufytiqi.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 13:24:54", "1891462", "demuqyle.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 13:10:21", "1891460", "http://uiccvbk.click:8839/notifications", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-30 14:20:55", "75", "False", "https://bazaar.abuse.ch/sample/7a1ecb216f5fb09d8290fb0a5136c118b82f5e264043f839f0259775b05c0c29/", "remus", "0", "abuse_ch"
"2026-08-30 13:10:18", "1891459", "http://cdire.shop:9048/imports", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-30 14:20:55", "75", "False", "https://bazaar.abuse.ch/sample/c06a85f0ad8b1fca254994fc3a0953f903aa28027f165d79214bbe3363332939/", "remus", "0", "abuse_ch"
"2026-08-30 13:10:16", "1891458", "http://cdire.shop:9048/documents", "url", "botnet_cc", "win.remus", "None", "Remus", "2026-08-30 14:20:55", "75", "False", "https://bazaar.abuse.ch/sample/7a1ecb216f5fb09d8290fb0a5136c118b82f5e264043f839f0259775b05c0c29/", "remus", "0", "abuse_ch"
"2026-08-30 13:05:07", "1891456", "121.127.253.146:80", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-08-30 13:05:07", "1891457", "121.127.253.146:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-08-30 13:05:06", "1891455", "121.127.253.146:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-08-30 13:04:20", "1891454", "pdrlxmneon.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 12:58:10", "1891453", "eq7rkug7.shop-alphastreamplus.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-30 12:57:22", "1891452", "glucotrust-bites.us.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-09-01 03:17:47", "100", "True", "None", "30August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-30 12:56:47", "1891451", "shop-alphastreamplus.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 12:57:40", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-30 12:55:21", "1891450", "https://raw.githubusercontent.com/Kath19634/ural3495/refs/heads/main/fds5412", "url", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-30 12:55:09", "1891449", "84pa4isp.retinaclearofficials.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x0f14,macos", "1", "anonymous"
"2026-08-30 12:52:06", "1891448", "retinaclearofficials.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 12:52:12", "100", "True", "None", "30August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-30 12:41:12", "1891446", "lbsa.nova-dev.ch", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-30 12:41:12", "1891447", "woodfield.global", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-30 12:35:38", "1891445", "toruseli.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 12:15:12", "1891438", "ciqyzo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 12:14:19", "1891437", "jficfycgrz.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 12:05:15", "1891436", "poqakybe.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 12:05:06", "1891435", "102.129.165.177:8080", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-30 12:01:09", "1891433", "lywixeha.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 12:01:09", "1891434", "hendersonlawjax.net", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-30 11:55:39", "1891430", "46.101.179.59:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 11:38:23", "1891432", "wazabe.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 11:31:00", "1891431", "cuzurejo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 10:57:37", "1891429", "4u4hidmw.shop-alphaboostpro.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-30 10:56:53", "1891428", "shop-alphaboostpro.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 06:41:03", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-30 10:55:16", "1891427", "199.85.8.183:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 03:17:46", "75", "False", "https://bazaar.abuse.ch/sample/b0f2fe074f097302568a247237554fb52e8001997671a3aa88adfff25e620ac1/", "remcos", "0", "abuse_ch"
"2026-08-30 10:54:18", "1891426", "hegitylo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 10:54:11", "1891425", "3pynvhuk.ultralightlondon.uk", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x0f14,macos", "1", "anonymous"
"2026-08-30 10:53:12", "1891424", "ultralightlondon.uk", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 10:53:19", "100", "True", "None", "30August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-30 10:50:26", "1891423", "yzcza03457.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 10:50:18", "1891422", "36.255.97.175:8787", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "", "75", "False", "https://bazaar.abuse.ch/sample/7404b53e27b9a0c6a53a6f01f57874b64acec513ebc90abc38f7f8096bc91cb0/", "xworm", "0", "abuse_ch"
"2026-08-30 10:43:05", "1891420", "45.55.191.196:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 00:46:52", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 10:43:05", "1891421", "64.89.160.222:65481", "ip:port", "botnet_cc", "elf.bashlite", "gayfgt,Gafgyt,qbot,torlus,lizkebab", "Bashlite", "", "100", "False", "None", "Gafgyt", "0", "elfdigest"
"2026-08-30 10:34:53", "1891419", "zqnro91792.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 10:34:51", "1891418", "1jtxup9c.pura--boost.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x76c7,macos", "1", "anonymous"
"2026-08-30 10:33:25", "1891417", "pura--boost.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 10:33:45", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-30 10:30:52", "1891416", "gebasaje.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 10:23:00", "1891415", "xylucyzo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 10:06:02", "1891414", "smtp.freshtlemanbarbershop.com", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "", "90", "True", "None", "ClickFix,compromised", "1", "anonymous"
"2026-08-30 10:05:06", "1891413", "111.230.143.136:8080", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "viper", "1", "anonymous"
"2026-08-30 10:05:05", "1891412", "111.230.143.136:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "viper", "1", "anonymous"
"2026-08-30 10:04:54", "1891411", "curly7588.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 10:02:21", "1891410", "uehky4jw.prosta--fense.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0xdcf2,macos", "1", "anonymous"
"2026-08-30 09:47:47", "1891409", "bufepy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 09:47:12", "1891408", "80.190.77.86:2414", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:11", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-30 09:47:00", "1891407", "64.177.112.21:50", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-30 09:46:48", "1891406", "46.151.182.98:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:50", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-30 09:46:38", "1891405", "45.156.87.215:1111", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:40", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 09:46:25", "1891404", "37.244.243.56:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:46:25", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-30 09:46:20", "1891403", "31.57.38.7:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 09:46:06", "1891402", "217.60.195.109:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 09:45:14", "1891401", "2.91.185.72:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:45:16", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-30 09:44:54", "1891400", "194.59.30.96:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:44:58", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-30 09:44:14", "1891399", "172.174.128.128:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:44:14", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-30 09:44:09", "1891397", "166.88.95.90:5000", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:44:08", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-30 09:44:09", "1891398", "166.88.95.90:8080", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:44:08", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-30 09:43:17", "1891396", "104.250.180.85:56013", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-30 09:24:40", "1891395", "piwola.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 09:19:05", "1891394", "distrosummit.xyz", "domain", "botnet_cc", "unknown_loader", "None", "Unknown Loader", "", "100", "False", "", "OffLoader", "0", "abuse_ch"
"2026-08-30 09:01:24", "1891393", "xy08z5pm.shop-aizenpower.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-30 08:57:05", "1891392", "48dodie.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 08:55:52", "1891391", "shop-aizenpower.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 01:40:00", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-30 08:54:43", "1891390", "gfzatydyf8.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 08:51:34", "1891389", "bixaky.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 08:27:04", "1891388", "cjbwc69441.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 08:16:51", "1891380", "103.153.183.25:3231", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-31 08:55:41", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-08-30 08:16:51", "1891382", "152.42.255.118:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 10:10:59", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 08:08:06", "1891387", "qwxeh11866.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 08:05:10", "1891386", "111.230.143.136:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "viper", "1", "anonymous"
"2026-08-30 08:05:09", "1891384", "38.55.200.183:8443", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-30 08:05:09", "1891385", "111.230.143.136:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "", "100", "True", "None", "viper", "1", "anonymous"
"2026-08-30 08:05:07", "1891383", "172.245.91.44:22", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 07:58:19", "1891381", "injured304.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 07:41:15", "1891379", "lyvoha.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 07:31:55", "1891375", "demahapa.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 07:21:26", "1891374", "gawipavy.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 07:14:47", "1891373", "5462elka.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 07:09:46", "1891088", "69.167.11.148:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "", "100", "False", "None", "c2,Remcos,Start-Asegurar", "0", "Bitsight"
"2026-08-30 07:09:45", "1891091", "190.123.46.208:80", "ip:port", "payload_delivery", "elf.mirai", "Katana", "Mirai", "", "75", "False", "https://www.virustotal.com/gui/file/193ea99089cfef206c47bf4e8e335546bdadc3f146374f6ef7489ae8fce4208c", "cowrie,honeypot", "0", "TawnyBalfour"
"2026-08-30 07:09:45", "1891106", "shift-api-control.com", "domain", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "2026-08-30 08:25:32", "100", "False", "https://github.com/Justice-Hammer/threat-hunting-detections/blob/main/30-research/RES-0007%20-%20ComponentTask33%20MSI%20Loader%20with%20On-Chain%20C2%20Discovery.md", "ComponentTask33,EtherHiding,MSI-loader,NodeJS-RAT,on-chain-c2,Polygon", "0", "Justice_Hammer"
"2026-08-30 07:09:44", "1891107", "176.65.144.127:3847", "ip:port", "botnet_cc", "unknown_rat", "None", "Unknown RAT", "2026-08-30 08:25:34", "100", "False", "https://github.com/Justice-Hammer/threat-hunting-detections/blob/main/30-research/RES-0007%20-%20ComponentTask33%20MSI%20Loader%20with%20On-Chain%20C2%20Discovery.md", "ComponentTask33,EtherHiding,MSI-loader,NodeJS-RAT,on-chain-c2,Polygon", "0", "Justice_Hammer"
"2026-08-30 07:09:44", "1891108", "api-configuard.com", "domain", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "", "100", "False", "https://github.com/Justice-Hammer/threat-hunting-detections/blob/main/30-research/RES-0007%20-%20ComponentTask33%20MSI%20Loader%20with%20On-Chain%20C2%20Discovery.md", "ComponentTask33,EtherHiding,MSI-loader,NodeJS-RAT,on-chain-c2,Polygon", "0", "Justice_Hammer"
"2026-08-30 07:09:43", "1891127", "45.74.7.158:4332", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-30 19:15:00", "100", "False", "None", "c2,Remcos,tor25t", "0", "Bitsight"
"2026-08-30 07:09:42", "1891109", "82.25.63.146:80", "ip:port", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "", "100", "False", "https://github.com/Justice-Hammer/threat-hunting-detections/blob/main/30-research/RES-0007%20-%20ComponentTask33%20MSI%20Loader%20with%20On-Chain%20C2%20Discovery.md", "ComponentTask33,EtherHiding,MSI-loader,NodeJS-RAT,on-chain-c2,Polygon", "0", "Justice_Hammer"
"2026-08-30 07:09:41", "1891131", "http://103.26.82.216:35366/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/103.26.82.216", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-30 07:09:41", "1891132", "http://139.135.42.31:43969/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/139.135.42.31", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-30 07:09:40", "1891190", "134.122.124.236:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:36:46", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:39", "1891191", "45.55.191.196:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:36:16", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:39", "1891192", "152.42.255.118:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:36:03", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:38", "1891193", "167.99.128.245:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:36:59", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:38", "1891194", "67.205.132.147:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:35:36", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:37", "1891197", "174.138.30.59:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:35:49", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:36", "1891195", "165.22.191.159:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:36:31", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:35", "1891196", "104.248.27.128:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:37:12", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:35", "1891198", "165.22.122.89:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:34", "1891231", "https://daskljtitaskastvv.pro/dsasfd555.js", "url", "payload_delivery", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "", "90", "False", "https://github.com/Justice-Hammer/threat-hunting-detections/blob/main/10-hunts/HUNT-0005%20-%20ClickFix%20WordPress%20Delivery%20Network%20Hunt.md", "clickfix,evalusion,fake-captcha,merry-florist,netsupport,unc2190,wordpress-injection", "0", "Justice_Hammer"
"2026-08-30 07:09:33", "1891234", "http://116.109.33.252:33235/Mozi.a", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/116.109.33.252", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-30 07:09:32", "1891235", "http://112.25.235.194:60134/Mozi.7", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/112.25.235.194", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-30 07:09:31", "1891236", "http://175.107.0.8:44034/Mozi.7", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/175.107.0.8", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-30 07:09:31", "1891243", "https://chi.12naga.org", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 06:00:00", "100", "False", "None", "268d1539fef7aab0b99f0b10cc2693b0,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-30 07:09:30", "1891242", "https://ley.123ful.net", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 06:00:25", "100", "False", "None", "9e42080fd45ba9f402718ea0d28bb085,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-30 07:09:30", "1891245", "185.195.65.180:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "50", "False", "None", "57169,c2,censys,cobalt strike", "0", "sojubear"
"2026-08-30 07:09:29", "1891250", "141.94.96.195:3333", "ip:port", "botnet_cc", "elf.xmrig", "None", "XMRIG", "", "90", "True", "None", "cryptojacking,docker-api,monero,xmrig", "0", "Stateoftheattack"
"2026-08-30 07:09:28", "1891253", "165.22.191.159:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 01:17:45", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:28", "1891294", "104.248.247.126:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:27", "1891306", "174.138.30.59:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 23:11:07", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:26", "1891311", "167.99.194.254:9035", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:26", "1891312", "104.248.27.128:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 01:18:50", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:26", "1891313", "67.205.132.147:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 04:30:52", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:25", "1891314", "134.122.124.236:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 05:49:38", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:25", "1891315", "188.166.234.214:7528", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-09-01 01:59:08", "100", "False", "None", "945c9f3c8cddcb7f33efce50a9a949ad,c2,remus", "0", "Bitsight"
"2026-08-30 07:09:24", "1891321", "167.99.128.245:34567", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:24", "1891331", "log.afghankabobgrill.com", "domain", "botnet_cc", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,ClickFix,EtherHiding", "0", "penislandrocket"
"2026-08-30 07:09:24", "1891345", "http://153.117.37.70:33874/Mozi.m", "url", "payload_delivery", "elf.mozi", "None", "Mozi", "", "75", "False", "https://honeylabs.net/lookup/153.117.37.70", "elf,iot,Mozi", "0", "HoneyLabs"
"2026-08-30 07:09:21", "1891364", "152.42.255.118:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 17:41:04", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:09:21", "1891365", "159.65.50.202:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-30 08:31:50", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-30 07:05:06", "1891372", "47.113.179.196:8085", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-30 07:05:05", "1891370", "123.254.106.168:8084", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-30 07:05:05", "1891371", "118.99.55.153:8083", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "", "100", "True", "None", "vshell", "1", "anonymous"
"2026-08-30 07:03:17", "1891369", "significant615.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 06:59:14", "1891368", "quy30mlr.shop-aeroslim.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "100", "False", "None", "ClearFake,mac-0x68dc,macos", "1", "anonymous"
"2026-08-30 06:57:14", "1891367", "levulibo.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 06:55:19", "1891366", "shop-aeroslim.us", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 20:39:23", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-30 06:43:00", "1891363", "s0bhultx.thirtyonehat.net", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 06:43:17", "100", "False", "None", "ClearFake,mac-0x0f14,macos", "1", "anonymous"
"2026-08-30 06:41:42", "1891362", "jyxali.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 06:40:55", "1891360", "http://flreaow.click:6527/customers", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-30 06:40:55", "1891361", "http://shhsift.click:7647/products", "url", "botnet_cc", "win.remus", "None", "Remus", "", "75", "False", "None", "remus", "0", "Myrtus0x0"
"2026-08-30 06:40:50", "1891359", "boyenspray.arrow-it.dev", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "", "90", "True", "None", "compromised,EtherHide", "1", "anonymous"
"2026-08-30 06:34:01", "1891356", "1c250ac3db43c8379591c0a1e8e428b972c1adda38eec2fb46376fb905e0a5e1", "sha256_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "2026-09-01 01:40:49", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:34:01", "1891357", "a7306d1131fc113334101d30db8b5b0fa376665b", "sha1_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "2026-09-01 01:40:49", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:34:01", "1891358", "df436f62af38b7a5bcd8a3368a9f110a", "md5_hash", "payload", "win.nanocore", "Nancrat,NanoCore", "Nanocore RAT", "2026-09-01 01:40:49", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:34:00", "1891354", "6daf41bd96b45d41c4a6c149efda326e5baf663e", "sha1_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-09-01 01:40:48", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:34:00", "1891355", "f6db29a1c53467f9d613666064785e98", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-09-01 01:40:48", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:33:59", "1891351", "5d1307ffad96536894481fead93401448cc6adac", "sha1_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-01 01:40:46", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:33:59", "1891352", "99ad52820bd7ae090c578610e367fcdb", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-01 01:40:46", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:33:59", "1891353", "95dc20449c307be8bad1541a3fbf53ee6c9a107f9add5811f744ee33e344b63d", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-09-01 01:40:47", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:33:58", "1891348", "d313053982390ae6a4707aeba20451cfc13fc88e", "sha1_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-09-01 01:40:45", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:33:58", "1891349", "70f6dff404b94d943db1514648700cfa", "md5_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-09-01 01:40:46", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:33:58", "1891350", "916cf18c98363cf3419b4d51e9635dd1c610adb3b6d6264aac3f52a02b77541a", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-01 01:40:46", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:33:57", "1891347", "507bbce068c50bc2e2c3907debe65c3bf974ac1c2ace16d15c952bd3a72c15f2", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-09-01 01:40:45", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 06:23:24", "1891346", "xutegaje.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 06:10:22", "1891344", "boqoca.workers.dev", "domain", "botnet_cc", "php.shin_webshell", "None", "php.shin_webshell", "", "50", "True", "None", "Cloudflare,GIF,PHP,webshell,WordPress,workers.dev,wp-admin", "0", "xscon"
"2026-08-30 06:05:07", "1891342", "172.245.91.44:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 06:05:07", "1891343", "172.245.91.44:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 06:05:06", "1891341", "172.245.91.44:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-30 06:05:05", "1891340", "188.212.158.203:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-30 05:35:04", "1891334", "log.afghankabobgrill.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 08:18:04", "90", "False", "None", "ClearFake,ClickFix,ErrTraffic,EtherHiding", "1", "anonymous"
"2026-08-30 01:34:45", "1891287", "8bbbf6e8040d137c142bbf1775be770c", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-30 06:34:32", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:44", "1891285", "db4a45d88c943be3f60bf216bb6ac8a2d3b70dfa13e9669e402f11e2aaea1b74", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-30 06:34:31", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:44", "1891286", "0d5f36f78a1cbf922f9e33c348c5693e93e24c06", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-30 06:34:32", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:28", "1891282", "30550319146db843b5987e3bd4f3befcd5dd77ec3f24862db2d0703f5998667c", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-08-30 06:34:13", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:28", "1891283", "eb5e1454e3edc95f364b74c3db91c12c21ad0902", "sha1_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-08-30 06:34:14", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:28", "1891284", "d9c681a726183af26a21128279ef0ced", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-08-30 06:34:14", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:27", "1891278", "d6016c0b8acc0c4d73d27019ed290ba5", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-08-30 06:34:12", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:27", "1891279", "1a71cf44e6bf88acc3009341875a6ac584f70f1d8f02517ad08090b6d9c94f84", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-08-30 06:34:13", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:27", "1891280", "b6294d17310ca94f96e129d0ad8901252c8556a7", "sha1_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-08-30 06:34:13", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:27", "1891281", "28318ef8d982d051f7ea8987ea303075", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-08-30 06:34:13", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:26", "1891276", "c4476378ccde96e2bcbb413e42d7df500c56b577b3a8a58c5318df96201e0b02", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-08-30 06:34:12", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:26", "1891277", "c639de6cf192fd1f6a1edf72537d92e744bc764b", "sha1_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-08-30 06:34:12", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:25", "1891273", "9c927df9fdd83af1b57810daa6cc7712a238d31a860bb8d33c6dacb03f53584d", "sha256_hash", "payload", "win.stealc", "None", "Stealc", "2026-09-01 01:41:26", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:25", "1891274", "ca3229c74dd6ac34f0f7e2469229865d58dfc89d", "sha1_hash", "payload", "win.stealc", "None", "Stealc", "2026-09-01 01:41:26", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:25", "1891275", "7e03150e97b7d8e181ae4092c55b3b27", "md5_hash", "payload", "win.stealc", "None", "Stealc", "2026-09-01 01:41:27", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:22", "1891270", "0f1af10b96c08c9aeecf28c2fa238542e667d218df65ce51701aaaeb7dcc75b1", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-01 01:41:23", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:22", "1891271", "94c1d86395777db22933c0d97cac2b535d543c87", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-01 01:41:23", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:22", "1891272", "0b130d9fec6bb8f9b80b13e110d4e0b0", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-01 01:41:24", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:21", "1891266", "e7905f19dc5cebd37e3f9e2f65368b04", "md5_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-09-01 01:41:12", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:21", "1891267", "b434022c41d8380221ddd621eaae69b0f0eb2503ac53069ef7f932f45cdf81d7", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-01 01:41:18", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:21", "1891268", "8cced0e041a11e7d0d85c3c9b7595e70004b7414", "sha1_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-01 01:41:19", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:21", "1891269", "c3fb146a44516f025122c71348c36b0e", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-01 01:41:19", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:20", "1891262", "1b8bee90a24f2303b3e30d5cbd0d0bb2f7dba242", "sha1_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-09-01 01:41:06", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:20", "1891263", "c5c38ba91507353b7b68c0086fe53274", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-09-01 01:41:06", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:20", "1891264", "0960a25a046f08f30489bce5f7cc6e83af9b21989f8e937c57722cafe00b2dca", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-09-01 01:41:11", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:20", "1891265", "12da85ebf11415b0837c4930af8ae1f46194e8cb", "sha1_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-09-01 01:41:11", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:19", "1891258", "117dc9528d518447ab50ba8114b5a47fd06a7c251ade9e90162df66fcb7fd279", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-01 01:40:53", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:19", "1891259", "b38e013a2139f76614c42147befaa2d357ab56ec", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-01 01:40:53", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:19", "1891260", "7399b202c9c2fe7479680505e1f55e89", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-09-01 01:40:54", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:19", "1891261", "0970ea5b4f55b1cfee90c06e00ed48dbc861f5eac590b144d4a911b62942abbc", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-09-01 01:41:05", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:18", "1891255", "11ae2d71c9ccae0fa60dc80eedf85ebf784267c28ca42e9c14fffa06515e097a", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-01 01:40:51", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:18", "1891256", "0e6e9304c236469d4e8a62ac9bcbfca6ca7a1114", "sha1_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-01 01:40:52", "95", "False", "None", "None", "0", "Grim"
"2026-08-30 01:34:18", "1891257", "7d7fd1e5a3ef87809b2e82e000f835c7", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-01 01:40:52", "95", "False", "None", "None", "0", "Grim"
"2026-08-29 23:47:01", "1891222", "47.86.9.253:10982", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-29 23:46:50", "1891221", "161.35.173.98:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:55", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-29 23:46:49", "1891220", "154.94.237.203:8086", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:54", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-29 23:46:33", "1891219", "161-35-173-98.sslip.io", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:35", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-29 19:47:14", "1891174", "94.228.166.168:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:31", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-29 19:46:41", "1891173", "54.199.206.9:21672", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:57", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 19:46:40", "1891172", "52.196.79.161:21672", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:56", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 19:46:36", "1891171", "46.246.93.245:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:52", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-29 19:46:25", "1891170", "45.192.169.254:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:40", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 19:46:17", "1891168", "38.60.252.124:80", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:31", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 19:46:17", "1891169", "38.60.252.124:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:31", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 19:46:14", "1891167", "38.180.250.214:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:46:28", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-29 19:46:07", "1891165", "31.76.100.3:443", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:46:21", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-29 19:46:07", "1891166", "31.76.100.3:80", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:46:21", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-29 19:46:03", "1891164", "3.113.147.16:21672", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:16", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 19:44:52", "1891163", "196.251.121.124:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:05", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-29 19:44:51", "1891162", "195.20.115.80:52203", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-29 19:44:48", "1891160", "194.9.6.35:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:59", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-29 19:44:48", "1891161", "194.9.6.35:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:59", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-29 19:44:04", "1891159", "168.222.97.92:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-29 19:43:33", "1891158", "132.226.72.227:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:36", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-29 19:43:30", "1891157", "128.90.171.209:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:31", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 19:43:29", "1891156", "128.90.105.118:8624", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:30", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 19:43:15", "1891155", "104.250.180.85:55010", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-29 19:43:10", "1891154", "103.98.18.238:8660", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:10", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 19:43:02", "1891153", "1.69.201.249:9003", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:02", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-29 15:05:05", "1891085", "45.140.213.2:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:38", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-29 15:05:05", "1891087", "102.117.162.133:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:03", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-29 14:51:53", "1891082", "gluccotrust--bites.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 09:04:24", "100", "True", "None", "29August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-29 14:31:11", "1891078", "mertre.net", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 09:50:23", "100", "True", "None", "29August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-29 14:08:52", "1891021", "https://playmounthdom.top/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:12:00", "100", "False", "None", "c2,loader,printer,StealC,stealer", "0", "Bitsight"
"2026-08-29 14:08:51", "1891034", "https://46.225.92.123", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:58:00", "100", "False", "None", "052d95aa0b0505a149188acc00af5b78,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-29 13:14:03", "1891062", "7ti.li", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 15:41:11", "100", "True", "None", "29August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-29 11:48:21", "1891033", "162.251.92.64:448", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:55", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-29 09:47:13", "1891005", "94.250.167.221:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:47:31", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-29 09:47:12", "1891004", "94.184.37.68:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:47:30", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-29 09:46:52", "1891003", "80.190.77.86:10700", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:11", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 09:46:31", "1891002", "46.109.235.15:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:49", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 09:46:28", "1891001", "45.61.177.135:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:46:45", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-29 09:46:20", "1890999", "45.125.67.196:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:46:37", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-29 09:46:20", "1891000", "45.125.67.196:8888", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:46:37", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-29 09:45:55", "1890998", "220.154.128.196:9443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:10", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-29 09:45:09", "1890997", "204.152.217.122:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:45:21", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-29 09:44:10", "1890996", "172.111.198.212:56013", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-29 09:44:07", "1890995", "169.58.180.142:30300", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:11", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 09:44:04", "1890994", "163.5.210.229:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-29 09:43:41", "1890993", "144.172.117.108:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:43", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-29 09:43:10", "1890992", "103.98.18.238:3333", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:10", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-29 09:43:05", "1890991", "103.116.52.203:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:05", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-29 09:30:46", "1890988", "gogetdsm.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 11:04:31", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-29 06:49:54", "1890943", "145.223.23.25:3215", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-09-01 05:21:21", "100", "False", "None", "945c9f3c8cddcb7f33efce50a9a949ad,c2,remus", "0", "Bitsight"
"2026-08-29 05:59:45", "1890941", "barbashat.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 23:01:33", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-29 05:55:05", "1890877", "104.248.41.207:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-30 21:07:57", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-29 03:49:53", "1890919", "workwithgetdsm.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 01:20:09", "100", "True", "None", "29August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-29 03:05:06", "1890912", "43.133.164.200:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:33", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-29 01:39:20", "1890897", "trygetdsm.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 20:09:19", "100", "True", "None", "29August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-29 01:36:17", "1890895", "thegetdsm.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 20:02:40", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-28 23:47:33", "1890864", "8.134.166.14:54451", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-28 23:35:25", "1890860", "teamgetdsm.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 11:41:07", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-28 23:30:16", "1890859", "getdsmwebagency.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 07:03:35", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-28 22:57:18", "1890853", "getdsm.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 05:03:15", "100", "True", "None", "28August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-28 22:44:17", "1890851", "enus-theeloncode.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 12:20:19", "100", "True", "None", "28August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-28 21:16:11", "1890838", "hqgetdsm.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 09:45:03", "100", "True", "None", "28August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-28 20:58:17", "1890835", "scalewithgetdsm.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 20:35:07", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-28 19:46:31", "1890815", "91.92.241.38:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:24", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-28 19:46:27", "1890814", "87.58.199.75:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:19", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-28 19:46:24", "1890812", "84.201.20.74:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:46:24", "1890813", "84.201.20.74:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:46:23", "1890811", "82.165.202.90:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:14", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-28 19:46:20", "1890810", "80.190.77.86:20700", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:11", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-28 19:44:36", "1890809", "196.70.69.77:5001", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-28 19:44:34", "1890808", "195.177.94.91:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:03", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:44:31", "1890807", "194.59.31.78:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:44:58", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-28 19:44:10", "1890804", "183.90.187.111:10888", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:31", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:44:10", "1890805", "183.90.187.2:10888", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:31", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:44:10", "1890806", "183.90.187.73:10888", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:31", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:44:08", "1890803", "179.61.227.213:55004", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:44:04", "1890802", "176.65.139.139:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-09-01 05:44:23", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-28 19:43:40", "1890800", "154.201.82.108:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:43:39", "1890799", "154.201.82.105:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:43:29", "1890798", "136.0.213.135:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:37", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 19:43:04", "1890796", "102.220.160.231:80", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:04", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-28 19:43:04", "1890797", "102.220.160.231:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:04", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-28 19:43:03", "1890795", "102.117.171.26:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:04", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-28 19:27:30", "1890744", "https://46.29.26.35", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:56:08", "100", "False", "None", "8e8e7920d1ac7f57735398887661bf8d,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-28 19:27:25", "1890760", "https://nsn.12naga.org", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:59:39", "100", "False", "None", "279244a0387f7d5a1b68137bd9768de8,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-28 19:27:20", "1890781", "https://185.229.225.31", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 16:09:04", "100", "False", "None", "c2,e53c0776fdba467447b61be1a2bc4027,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-28 19:05:10", "1890785", "20.119.73.195:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:17", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-28 16:03:23", "1890650", "https://sss.fbdfsgfwrgerwefew.top/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:18:30", "100", "False", "None", "123,c2,loader,StealC,stealer", "0", "Bitsight"
"2026-08-28 16:02:35", "1890715", "105195dfdfbfdce7cf13f50d92bba761eba5bc22c31000109a67708f61474e12", "sha256_hash", "payload", "win.acr_stealer", "None", "ACR Stealer", "2026-08-30 06:34:32", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:35", "1890716", "ba655e73a1c08143324ffeaf56b6f6bea0a134e6", "sha1_hash", "payload", "win.acr_stealer", "None", "ACR Stealer", "2026-08-30 06:34:32", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:35", "1890717", "8be48ea27f6cd6b2ec2ef3be4977322d", "md5_hash", "payload", "win.acr_stealer", "None", "ACR Stealer", "2026-08-30 06:34:33", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:33", "1890713", "4f6839725a41eee6426b1aeed61e7b27e40515d5", "sha1_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-08-30 06:34:29", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:33", "1890714", "6a4d5ab74aab4d6b8c24edb29d4b6d64", "md5_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-08-30 06:34:29", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:32", "1890710", "b07426979d61bbc20b209b88d2f6dd3f5cceb1ee", "sha1_hash", "payload", "py.stealler", "None", "stealler", "2026-08-30 06:34:28", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:32", "1890711", "57629b1f3807d324e3c51a340228fe5a", "md5_hash", "payload", "py.stealler", "None", "stealler", "2026-08-30 06:34:28", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:32", "1890712", "1738f890d5686b1c17b43166659643dde6ff57fc9ed4143dc9801ae331036273", "sha256_hash", "payload", "win.wannacryptor", "Wana Decrypt0r,WannaCry,WannaCrypt,Wcry", "WannaCryptor", "2026-08-30 06:34:28", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:31", "1890707", "153d808ae3f57827a81024aa742ebbda96763f92", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-30 06:34:27", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:31", "1890708", "133027a245bc3253038e082b5115a9dc", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-30 06:34:27", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:31", "1890709", "f19ce246b09aec504d8cb547f9d3344e14a6ca898f8d88f2207ece0d74f0d3f1", "sha256_hash", "payload", "py.stealler", "None", "stealler", "2026-08-30 06:34:28", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:30", "1890705", "846f4ed47a679e24505470f61d9110db", "md5_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-08-30 06:34:26", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:30", "1890706", "0c8c4a99337505f79c05af524ef2c8ce810269a1896b9bd83bbd39454a618b8d", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-30 06:34:27", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:29", "1890701", "92937973d50ddd6bff639bf35feb25b119f56edd", "sha1_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-30 06:34:25", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:29", "1890702", "9fce0558dd8b2061c7a8baf0877d5384", "md5_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-30 06:34:26", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:29", "1890703", "0bab062af7894bc44d68ebc5b9633a84ffaae1f17671ff3949002c43321ec86a", "sha256_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-08-30 06:34:26", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:29", "1890704", "7be1989c25579401ac8638a889a1657d5182f7b8", "sha1_hash", "payload", "win.valley_rat", "Winos", "ValleyRAT", "2026-08-30 06:34:26", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:28", "1890698", "5bfdc93f36ecf75b5be5590a48bdc58503c34fb0", "sha1_hash", "payload", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-30 06:34:24", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:28", "1890699", "2ca17777470b32e4e74b547e5f3f9306", "md5_hash", "payload", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-30 06:34:25", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:28", "1890700", "9b0e3f974dac0023599bb604b5b30e3e763c2d1d28ecff80d307ca73dc06243f", "sha256_hash", "payload", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-30 06:34:25", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:27", "1890695", "bcf32c802a7a27b2bfe6ea5e26b75091c8a76175", "sha1_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-08-30 06:34:24", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:27", "1890696", "4878d995e4e23c6961c91179e6e2c704", "md5_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-08-30 06:34:24", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:27", "1890697", "f63eb2664ac9076250491b1cb0787042f75a056e235867d9f9967322c5cf20a4", "sha256_hash", "payload", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-30 06:34:24", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:26", "1890692", "f4ecc1edd84194b94aceb5c3485b830081507508", "sha1_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-08-30 06:34:23", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:26", "1890693", "18054d12b0ba2dc0c9918f455ec86699", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-08-30 06:34:23", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:26", "1890694", "5cb54c53e2169a23a815d87229b00c63d1d3c8c0d19e0f92b5e83bd231481419", "sha256_hash", "payload", "py.venus_stealer", "None", "Venus Stealer", "2026-08-30 06:34:23", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:25", "1890690", "c5616af2cef3dcdb095d8cc55db75c96", "md5_hash", "payload", "win.amadey", "None", "Amadey", "2026-08-30 06:34:22", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:25", "1890691", "245f6e3f6750701d58c06bd96f4623c62942305fb32bcdc5a99bf367becaafd0", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-08-30 06:34:23", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:24", "1890686", "3941abf37772bfdeefa1d8b8bc617f9e1ce4bd48", "sha1_hash", "payload", "win.gcleaner", "None", "GCleaner", "2026-08-30 06:34:21", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:24", "1890687", "801e7911d8ef33ab7843bb638c0b5abc", "md5_hash", "payload", "win.gcleaner", "None", "GCleaner", "2026-08-30 06:34:22", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:24", "1890688", "76e6367d8123171afa540fe92a3758424ec7d1e029c4e5a3b9771e24fe0085c1", "sha256_hash", "payload", "win.amadey", "None", "Amadey", "2026-08-30 06:34:22", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:24", "1890689", "3c584320e4f7523645ed71d09321d2f5a476f103", "sha1_hash", "payload", "win.amadey", "None", "Amadey", "2026-08-30 06:34:22", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:23", "1890684", "356484cecd7e391a8376ad70afa8f97a", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-30 06:34:20", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:23", "1890685", "c496e8e8f7cc2e40c515c9dbd98ffce43861acaf504466f478ceaebf712214b8", "sha256_hash", "payload", "win.gcleaner", "None", "GCleaner", "2026-08-30 06:34:20", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:22", "1890681", "bb65c6e1104854b87418a16fffd59230", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2026-08-30 06:34:19", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:22", "1890682", "16168cc3b16d768beffaf0fd10f74f86f79da7a2c7ca26edd91c09c1c101811d", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-30 06:34:20", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:22", "1890683", "eaf41de301f2e71c912836fd1eac285043ee841f", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-30 06:34:20", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:21", "1890678", "98f00e36daaf4c4bae91031d4b53ea9b", "md5_hash", "payload", "win.acr_stealer", "None", "ACR Stealer", "2026-08-30 06:34:18", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:21", "1890679", "b926a44910e4f4d55c53fdc6d9cdbfb043059355d55fb3595a3434bd69b1e7e3", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2026-08-30 06:34:19", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:21", "1890680", "32452cd6c337772b89c6a83dfd1c96ab7af565c8", "sha1_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2026-08-30 06:34:19", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:20", "1890674", "be6714ad8e992e7ef38c3d5c61edfb73259bb64b", "sha1_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-08-30 06:34:17", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:20", "1890675", "bedeeefa188f9fea4f050848adcb3f0a", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-08-30 06:34:17", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:20", "1890676", "46ced738ab9a9a37df3e36c6a8603742f26783f0be2fa845bdec10b5ddb50bfb", "sha256_hash", "payload", "win.acr_stealer", "None", "ACR Stealer", "2026-08-30 06:34:18", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:20", "1890677", "6c19930c2b6b2ec49b42399dcd8e477de347c010", "sha1_hash", "payload", "win.acr_stealer", "None", "ACR Stealer", "2026-08-30 06:34:18", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:19", "1890671", "dd10660387c33c8be281991f55a03f0f1a683b62", "sha1_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-08-30 06:34:16", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:19", "1890672", "c44e30aa705a5d352079d63eaa1f3dce", "md5_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-08-30 06:34:17", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:19", "1890673", "a2fc3ab543e72decbea89ff3479cc9d813324bccccb291cba2536d95b0bdc64c", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-08-30 06:34:17", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:18", "1890669", "9c61f3f9e04f32f1d66edbf131ba9a6b", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-30 06:34:16", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:18", "1890670", "94a33fc48ecb504091be4ab6c64cb3b828ac0efe1c9449c8ee952774de38b44f", "sha256_hash", "payload", "win.formbook", "win.xloader", "Formbook", "2026-08-30 06:34:16", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:17", "1890665", "8f1d05b224256caed347c500259b721ac97d70fc", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-30 06:34:14", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:17", "1890666", "13f0f22fab59d7475a4ff3d926b1de63", "md5_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-30 06:34:15", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:17", "1890667", "97fdbb5506534af805db9e23503d93439322650eeaba8132c2627d8a1b9c2dfb", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-30 06:34:15", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:17", "1890668", "8376ef7e11d99d7b14e2b5d2750fc0978dcf4a8a", "sha1_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-30 06:34:15", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:16", "1890662", "dd0012a6ba2ffda25354d1a998178b9dce62a482", "sha1_hash", "payload", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "2026-09-01 01:41:27", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:16", "1890663", "ba2ff4a8b689fab54670cf87b4008528", "md5_hash", "payload", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "2026-09-01 01:41:27", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:16", "1890664", "4f8f926c45e51aa51bea9f95d3e8f34a29bcdc9dec1d3ea40354e50bb69c986b", "sha256_hash", "payload", "win.vidar", "None", "Vidar", "2026-08-30 06:34:14", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:15", "1890660", "c7d899d6f7ccecb85c409767d8645906", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-01 01:41:26", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:15", "1890661", "c40eac770e2bc5081175b782c4455d977ccff123571a73c3ab8c8c882db38b85", "sha256_hash", "payload", "win.ghost_rat", "Farfli,Gh0st RAT,PCRat", "Ghost RAT", "2026-09-01 01:41:27", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:14", "1890658", "656b90c4553ec077f0ff60bf35edee765dffa4d63d4e2148221f9ef1171bb437", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-01 01:41:25", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:14", "1890659", "4cecb2462dfdbf0869cab54eef5de1d793c21c80", "sha1_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-09-01 01:41:26", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:13", "1890655", "b6296bad0fdf16df0811053e5c5cee71946d05e06222324e76dc26ec676ff976", "sha256_hash", "payload", "py.creal_stealer", "None", "Creal Stealer", "2026-09-01 01:41:25", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:13", "1890656", "58376e7466c7ca80e9040d28a17d16800ff7d956", "sha1_hash", "payload", "py.creal_stealer", "None", "Creal Stealer", "2026-09-01 01:41:25", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:13", "1890657", "579933376ffc365ca48eb14046655171", "md5_hash", "payload", "py.creal_stealer", "None", "Creal Stealer", "2026-09-01 01:41:25", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:12", "1890653", "da282e209c707c015745f578076f892cc10d3e24", "sha1_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2026-09-01 01:41:24", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:12", "1890654", "38588342e64c159b60e1530aef1081bc", "md5_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2026-09-01 01:41:24", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:02:11", "1890652", "d47a793404c4bb0419c9ae1fda9847aa6a75a029e60ed65f05645dad9ee9573b", "sha256_hash", "payload", "win.luca_stealer", "None", "Luca Stealer", "2026-09-01 01:41:24", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 16:00:52", "1890651", "96.9.226.22:9462", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 05:13:12", "75", "False", "https://bazaar.abuse.ch/sample/a4498a429e9b3efe12e2070e454449dc713253d15f0cb575057ca15993403cd4/", "remcos", "0", "abuse_ch"
"2026-08-28 14:05:05", "1890615", "34.24.127.255:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:23", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-28 13:05:10", "1890601", "104.207.93.167:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:12", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-28 13:05:09", "1890600", "103.41.177.238:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:08", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-28 13:04:03", "1889841", "185.169.52.99:9001", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-09-01 04:23:36", "100", "False", "None", "0f81469cc7638ba7c82eaddbd6b3c20a,c2,remus", "0", "Bitsight"
"2026-08-28 13:03:44", "1890503", "172.111.163.164:65070", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-30 10:12:52", "100", "False", "None", "c2,Crypters&tools,Remcos", "0", "Bitsight"
"2026-08-28 12:56:23", "1890592", "home-power-shield.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 05:34:38", "100", "True", "None", "28August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-28 11:55:29", "1890557", "https://proxy.goglehandaz.com", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:08:59", "75", "False", "https://bazaar.abuse.ch/sample/9c927df9fdd83af1b57810daa6cc7712a238d31a860bb8d33c6dacb03f53584d/", "stealc", "0", "abuse_ch"
"2026-08-28 11:47:52", "1890556", "162.251.92.64:18888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:55", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-28 09:47:31", "1889875", "94.26.3.30:7081", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:33", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-28 09:46:59", "1889874", "64.118.140.156:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:01", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-28 09:46:55", "1889873", "52.221.246.243:8443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:46:56", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-08-28 09:46:25", "1889872", "37.244.238.125:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:46:25", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-28 09:45:18", "1889871", "203.159.90.177:55006", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 09:45:14", "1889870", "20.115.227.161:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:16", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-28 09:45:01", "1889869", "198.23.177.210:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:45:07", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-28 09:44:55", "1889868", "194.59.31.78:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:44:58", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-28 09:44:42", "1889867", "186.244.245.91:45702", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:46", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-28 09:44:14", "1889866", "172.245.155.83:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:44:16", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-28 09:44:12", "1889864", "172.111.198.212:56012", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-28 09:44:12", "1889865", "172.111.247.65:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-28 09:44:11", "1889862", "172.111.177.77:5000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:13", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-28 09:44:11", "1889863", "172.111.177.77:8888", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:13", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-28 09:44:00", "1889861", "159.203.69.210:8008", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-28 09:43:58", "1889860", "158.94.209.180:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-28 09:43:52", "1889859", "154.37.213.27:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:53", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-28 08:05:06", "1889831", "117.72.182.5:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:47", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-28 07:05:06", "1889817", "103.41.177.64:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:08", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-28 06:57:28", "1889814", "159.89.24.55:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 06:01:02", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-28 06:25:13", "1889802", "93.152.221.220:42867", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-31 09:26:57", "100", "False", "None", "c2,HEAVYFUNDS,Remcos", "0", "Bitsight"
"2026-08-28 06:00:30", "1889447", "139.59.154.153:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-30 23:21:35", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-28 06:00:30", "1889452", "185.169.52.99:6527", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-09-01 05:58:05", "100", "False", "None", "6efb1e0ab361cda1dd534e37e543789c,c2,remus", "0", "Bitsight"
"2026-08-28 06:00:22", "1889550", "104.248.41.207:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 11:45:53", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-28 06:00:22", "1889553", "https://194.146.39.66", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 08:34:45", "100", "False", "None", "2549bffcf949a19ce487546b5948fdfa,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-28 06:00:21", "1889552", "http://2.26.126.74/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:12:39", "100", "False", "None", "73f82eed6521,c2,loader,StealC,stealer", "0", "Bitsight"
"2026-08-28 06:00:20", "1889565", "104.248.247.126:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 10:40:07", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-28 06:00:11", "1889741", "https://kiprihorycom.com/work/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:43:30", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-08-28 06:00:10", "1889745", "46.101.146.87:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-30 23:22:10", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-28 02:34:37", "1889623", "7c71762aae512f7ec674a1f4aa407380184abf2a01b85de8264375b1ae2bcca4", "sha256_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-08-30 06:34:33", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 02:34:37", "1889624", "8f4a7a4b4a9320dadf7b91ac4580f4ea95206421", "sha1_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-08-30 06:34:33", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 02:34:37", "1889625", "140117db527bee77a2830f1576ce8997", "md5_hash", "payload", "win.coinminer", "None", "Coinminer", "2026-08-30 06:34:33", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 02:34:36", "1889620", "178b290d24527fda41dcaa0960b289e024e4fac39b96a3d8aebf9be14f51a635", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-08-30 06:34:30", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 02:34:36", "1889621", "3de514f7e96a69e607258c05c68ddc58145a1531", "sha1_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-08-30 06:34:31", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 02:34:36", "1889622", "3135bf9c620aea1463c948d1be481493", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-08-30 06:34:31", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 02:34:35", "1889617", "27d22c374ffa52ab63cfb05c09b7925100f6ccd0eb00e314cf8f20be231da250", "sha256_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-08-30 06:34:29", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 02:34:35", "1889618", "ce1f829dec06ac8558bc4d2a9973ac85cba073c0", "sha1_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-08-30 06:34:30", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 02:34:35", "1889619", "3304b81686f03893b0a931f23c6665ba", "md5_hash", "payload", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-08-30 06:34:30", "95", "False", "None", "None", "0", "Grim"
"2026-08-28 02:25:47", "1889613", "sha.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-28 02:25:47", "1889614", "https://sha.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 06:00:18", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-27 23:47:17", "1889561", "185.130.46.191:44882", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 23:47:17", "1889562", "185.130.46.191:44884", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 23:47:17", "1889563", "185.130.46.191:44885", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 23:47:07", "1889560", "114.55.250.233:1128", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:46", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 23:46:56", "1889559", "ajax.graphwindows.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:36", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 21:05:47", "1889527", "rsc.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-27 21:05:47", "1889528", "https://rsc.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:58:56", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-27 19:47:51", "1889511", "94.26.3.112:30173", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:32", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-27 19:47:49", "1889510", "94.154.43.60:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-09-01 05:47:30", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-27 19:47:36", "1889509", "89.125.13.158:36626", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:20", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-27 19:47:18", "1889508", "64.89.160.76:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:03", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-27 19:47:08", "1889507", "5.230.201.54:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:47:05", "1889506", "46.246.84.10:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:51", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-27 19:47:01", "1889505", "45.94.31.187:56015", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:46:17", "1889502", "217.60.102.3:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:46:17", "1889503", "217.60.102.3:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:44:53", "1889501", "192.229.115.243:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:44:50", "1889500", "191.252.184.198:1337", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:48", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-27 19:44:41", "1889499", "185.254.96.155:7000", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:40", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:44:38", "1889497", "185.212.128.90:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:36", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-27 19:44:38", "1889498", "185.212.128.96:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:36", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-27 19:44:18", "1889496", "172.111.247.65:6666", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-27 19:44:17", "1889495", "172.111.198.212:3001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:44:07", "1889494", "159.195.242.22:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:01", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-27 19:44:04", "1889493", "157.20.182.21:1997", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:58", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-27 19:43:54", "1889492", "154.201.82.108:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:43:53", "1889490", "154.198.49.31:8444", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:51", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-27 19:43:53", "1889491", "154.201.82.106:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:43:39", "1889487", "134.122.187.68:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:43:39", "1889488", "134.122.187.68:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:43:39", "1889489", "134.122.187.68:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:43:19", "1889486", "105.155.16.5:5000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:16", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-27 19:43:18", "1889485", "105.111.84.214:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:43:14", "1889484", "104.243.248.63:302", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-27 19:43:09", "1889483", "103.54.153.49:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 19:43:04", "1889482", "102.117.174.189:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:04", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-27 18:15:35", "1889464", "https://2.28.48.67", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 08:34:44", "75", "False", "https://bazaar.abuse.ch/sample/e6cc428cccc9aae9fb3fbcb9d310e5bc23f813f73e993620ef98e3e511773e2a/", "vidar", "0", "abuse_ch"
"2026-08-27 16:34:54", "1889443", "en-us-theeloncod.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 12:40:14", "100", "True", "None", "27August2026,ClearFake,Commandline,DomainShadowing,Windows", "0", "Gi7w0rm"
"2026-08-27 15:45:47", "1889432", "bnb.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-27 14:54:27", "1889303", "159.89.24.55:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 09:02:44", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-27 14:54:27", "1889306", "217.60.195.33:17542", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-31 03:56:24", "100", "False", "None", "c2,DonRemoteHost,Remcos", "0", "Bitsight"
"2026-08-27 14:54:26", "1889307", "109.248.151.101:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-31 19:18:55", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-08-27 14:54:25", "1889310", "155.103.71.126:2405", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 00:02:59", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-08-27 14:54:25", "1889311", "203.202.232.155:2444", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 05:26:36", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-08-27 14:54:24", "1889312", "209.99.188.27:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 05:08:32", "100", "False", "None", "4,c2,Remcos", "0", "Bitsight"
"2026-08-27 14:54:24", "1889313", "31.40.204.219:3467", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 05:02:58", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-08-27 14:54:21", "1889318", "161.248.179.102:1604", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 05:13:48", "100", "False", "None", "c2,Remcos,SALES", "0", "Bitsight"
"2026-08-27 14:54:21", "1889319", "23.95.117.248:6040", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 01:03:17", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-08-27 14:54:13", "1889321", "45.225.135.55:8080", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 04:28:42", "100", "False", "None", "23_06_64B,c2,Remcos", "0", "Bitsight"
"2026-08-27 14:54:12", "1889322", "23.95.117.233:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 02:20:22", "100", "False", "None", "c2,Remcos,RemoteHost", "0", "Bitsight"
"2026-08-27 14:54:12", "1889323", "185.91.126.34:443", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-30 18:03:43", "100", "False", "None", "c2,Remcos,Server", "0", "Bitsight"
"2026-08-27 13:54:16", "1889289", "209.97.138.100:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 04:58:09", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-27 11:48:55", "1889245", "8.162.1.240:10087", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 11:48:51", "1889244", "47.79.21.106:45678", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 11:48:44", "1889243", "39.97.57.155:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:03", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 11:48:43", "1889242", "38.207.177.73:9966", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 11:48:39", "1889241", "186.244.245.91:28446", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 11:48:21", "1889239", "106.15.10.2:11111", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:44", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 11:48:21", "1889240", "106.15.10.2:6789", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:44", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 11:48:13", "1889238", "c-proxy-xjmkjgbsdn.cn-hangzhou.fcapp.run", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:36", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-27 11:45:54", "1889201", "https://46.29.26.32", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:59:23", "100", "False", "None", "ac7d2c4b87323734e60ab2166f449356,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-27 11:30:29", "1889235", "https://91.98.109.169", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 16:07:54", "75", "False", "https://bazaar.abuse.ch/sample/561c1001e1595263f9216f7547d7715b98926a61aaf52db644eb7f78a09db18d/", "vidar", "0", "abuse_ch"
"2026-08-27 10:20:47", "1889212", "rmv.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-27 10:05:10", "1889205", "185.34.147.32:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:41", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-27 10:05:10", "1889206", "45.61.170.105:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:45", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-27 09:47:08", "1889181", "62.238.110.216:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:00", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-27 09:47:06", "1889180", "56.69.251.23:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:58", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 09:46:35", "1889179", "38.240.48.155:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 09:46:14", "1889178", "217.60.195.139:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 09:46:13", "1889177", "217.217.97.164:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:06", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-27 09:45:31", "1889175", "209.97.166.99:80", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:45:26", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-27 09:45:24", "1889174", "203.202.232.132:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 09:45:22", "1889173", "201.51.2.186:8443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:19", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-27 09:45:16", "1889172", "2.27.203.59:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-09-01 05:45:12", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-27 09:45:14", "1889171", "199.245.176.147:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-27 09:45:10", "1889170", "198.23.177.210:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:45:07", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-27 09:44:46", "1889169", "188.190.23.7:4343", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:47", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-27 09:44:17", "1889167", "172.86.119.225:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:19", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-27 09:44:17", "1889168", "172.93.187.109:13901", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:44:20", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-27 09:43:59", "1889166", "158.94.210.136:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-27 09:43:53", "1889165", "155.117.183.31:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:54", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-27 09:43:50", "1889163", "154.201.82.105:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 09:43:50", "1889164", "154.201.82.106:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 09:43:43", "1889162", "144.31.6.21:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-27 09:43:42", "1889161", "144.217.94.115:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:43:43", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-27 09:43:18", "1889159", "105.159.4.49:5000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:17", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-27 09:43:18", "1889160", "106.15.65.247:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:17", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-27 09:05:07", "1889149", "206.123.137.133:56090", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 05:54:31", "100", "False", "None", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-08-27 08:50:41", "1889127", "217.60.195.34:18622", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 00:21:28", "75", "False", "https://bazaar.abuse.ch/sample/1be4ef70585595235b1f6b4890552228382101ba41226661aa6a86585e5fc458/", "remcos", "0", "abuse_ch"
"2026-08-27 08:38:11", "1889092", "172.245.155.83:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:44:16", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-27 08:38:10", "1889093", "94.26.3.112:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:32", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-27 08:38:10", "1889094", "94.26.3.112:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:32", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-27 08:38:09", "1889095", "198.23.177.206:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:45:07", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-27 08:38:09", "1889096", "198.23.177.206:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:45:07", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-27 08:38:09", "1889097", "46.151.182.98:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:50", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-27 08:38:09", "1889098", "196.251.121.137:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:45:05", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-27 08:38:05", "1889104", "69.166.66.88:4480", "ip:port", "botnet_cc", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-08-31 03:05:06", "75", "False", "", "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil", "0", "whoamix302"
"2026-08-27 07:52:19", "1889065", "102.220.160.58:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-27 07:22:34", "1888334", "159.65.50.202:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 03:15:29", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-27 07:21:34", "1888903", "154.94.224.35:2096", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:54", "50", "False", "None", "141159,c2,censys,cobalt strike", "0", "sojubear"
"2026-08-27 07:21:33", "1888905", "154.94.224.35:2087", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:54", "50", "False", "None", "141159,c2,censys,cobalt strike", "0", "sojubear"
"2026-08-27 07:21:33", "1888911", "http://144.31.40.80/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-08-31 08:09:45", "100", "False", "None", "c2,loader,mix,StealC,stealer", "0", "Bitsight"
"2026-08-27 07:21:32", "1888938", "104.248.247.126:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 04:56:55", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-27 07:21:31", "1888928", "139.59.154.153:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-30 11:18:17", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-27 07:21:30", "1888939", "139.59.154.153:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 13:18:54", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-27 02:05:47", "1888914", "vcd.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-27 02:05:47", "1888915", "https://vcd.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:59:03", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-26 22:55:37", "1888832", "https://5.78.91.236", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 08:34:43", "75", "False", "https://bazaar.abuse.ch/sample/6f513495ae2d862bce46785c4273e72250f77ca6d32b98313def15a8d75741f5/", "vidar", "0", "abuse_ch"
"2026-08-26 22:55:34", "1888830", "https://168.119.56.135", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 16:08:46", "75", "False", "https://bazaar.abuse.ch/sample/4d6e5173353ab469f05a0b630a1aaaf5286b187c14c37535ed01f87a66701525/", "vidar", "0", "abuse_ch"
"2026-08-26 22:03:27", "1888814", "198.23.209.155:6466", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:08", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-08-26 22:01:47", "1888807", "209.99.186.142:55009", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:26", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-26 21:44:55", "1888601", "202.155.9.186:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:46", "1888600", "195.177.94.91:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:03", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:45", "1888599", "195.177.94.91:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:02", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:39", "1888598", "193.233.126.164:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:38", "1888597", "193.233.126.164:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:36", "1888593", "192.229.115.246:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:36", "1888594", "192.229.115.246:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:36", "1888595", "192.229.115.254:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:36", "1888596", "192.229.115.254:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:44:35", "1888592", "192.229.115.243:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:43:39", "1888591", "147.45.61.65:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:43:15", "1888590", "105.103.57.94:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:43:08", "1888588", "103.54.153.49:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 21:43:08", "1888589", "103.54.153.49:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 20:53:46", "1888543", "31.77.220.21:62020", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:22", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-26 20:53:46", "1888544", "155.117.183.31:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:54", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-26 20:50:46", "1888539", "31.57.219.139:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:19", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-26 20:50:46", "1888540", "38.240.48.155:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:29", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-26 20:46:55", "1888533", "209.97.166.99:9999", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:45:26", "75", "False", "", "Sliver", "0", "whoamix302"
"2026-08-26 20:05:06", "1888487", "2.88.92.98:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:45:16", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-26 19:46:34", "1888479", "77.110.109.229:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:08", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 19:46:23", "1888478", "52.41.190.254:443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-09-01 05:46:56", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-08-26 19:46:20", "1888477", "49.232.135.25:8080", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:53", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-26 19:46:19", "1888476", "46.246.6.27:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:51", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 19:46:07", "1888475", "45.142.30.157:7770", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:38", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 19:46:05", "1888474", "45.131.182.88:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:37", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 19:44:42", "1888473", "199.245.176.147:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 19:44:32", "1888472", "193.111.117.26:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:53", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-26 19:44:29", "1888471", "192.121.163.188:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:49", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-26 19:44:28", "1888470", "188.23.175.25:8000", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:44:47", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-08-26 19:44:27", "1888469", "187.145.56.252:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:46", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-26 19:43:49", "1888466", "158.220.96.15:3321", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 19:43:47", "1888465", "157.20.182.21:1998", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:58", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 18:10:47", "1888396", "tak.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-26 18:10:47", "1888397", "https://tak.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:57:04", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-26 16:20:40", "1888303", "https://168.119.60.33", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 16:08:48", "75", "False", "https://bazaar.abuse.ch/sample/ea47a085e40feb6adabfac56e22edfba2589567de2ff41a22de51b0d42954b65/", "vidar", "0", "abuse_ch"
"2026-08-26 15:09:39", "1888271", "102.220.160.221:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 04:14:39", "75", "False", "https://bazaar.abuse.ch/sample/306e7d78929cb893e2ecde6bb182b0c8423991275a999704c69eaf9282be1091/", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-08-26 12:43:55", "1888148", "46.101.179.59:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 08:26:44", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-26 12:08:13", "1888193", "204.77.9.71:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:45:22", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-26 12:08:12", "1888190", "108.186.112.147:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:20", "75", "False", "", "HypeAgent", "0", "whoamix302"
"2026-08-26 12:05:07", "1888176", "34.45.74.63:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:23", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-26 12:03:30", "1888158", "178.208.169.166:7070", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:27", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-08-26 12:03:30", "1888159", "107.175.88.79:30305", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:19", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-08-26 11:48:52", "1888154", "91.108.189.81:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:12", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-26 11:48:12", "1888153", "online-r.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-26 10:50:47", "1888124", "eos.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-26 10:50:47", "1888125", "https://eos.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 06:00:41", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-26 09:47:09", "1888109", "94.154.32.6:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:29", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-26 09:47:09", "1888110", "94.154.32.6:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:30", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-26 09:46:43", "1888108", "64.89.160.77:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:03", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-26 09:46:34", "1888107", "49.235.130.208:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:53", "75", "False", "None", "drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 09:46:30", "1888106", "45.9.12.6:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 09:46:29", "1888105", "45.85.94.195:36626", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:47", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-26 09:46:11", "1888104", "38.147.188.28:9001", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:46:27", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-08-26 09:46:05", "1888103", "31.77.248.3:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:22", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-26 09:44:58", "1888102", "203.159.90.177:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 09:44:43", "1888101", "193.233.220.65:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:55", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-26 09:44:41", "1888100", "192.255.195.141:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:44:53", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-26 09:44:16", "1888099", "176.96.138.2:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-26 09:44:15", "1888098", "176.124.204.23:45051", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-09-01 05:44:23", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-08-26 09:44:12", "1888097", "172.93.187.109:40572", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:44:20", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-26 09:44:09", "1888096", "172.245.209.209:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:44:16", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-26 09:44:07", "1888095", "171.113.116.219:8001", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:12", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-26 09:43:40", "1888094", "144.172.107.81:8444", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:43", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-26 09:43:20", "1888093", "108.186.112.147:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:20", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-26 09:43:18", "1888092", "107.173.47.158:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:18", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 09:43:14", "1888091", "104.243.248.63:400", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 09:43:10", "1888090", "104.105.15.96:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:43:10", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-26 09:43:04", "1888089", "101.99.92.134:4788", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-26 09:23:04", "1888081", "128.90.136.110:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:31", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-08-26 09:23:04", "1888082", "199.245.176.147:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:10", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-08-26 09:05:06", "1888071", "68.221.168.156:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:47:07", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-26 08:00:43", "1888053", "207.180.29.217:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 05:07:32", "75", "False", "https://bazaar.abuse.ch/sample/0e27227f011931ac1eb53596299df5a7b6223f155c80093db19471e9b4abec6f/", "remcos", "0", "abuse_ch"
"2026-08-26 08:00:43", "1888054", "207.180.29.85:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 05:30:41", "75", "False", "https://bazaar.abuse.ch/sample/6b5ded751fcf17c56d5f8f9701397cc1e1f675437cd22dcd83f21c8f7a2ff107/", "remcos", "0", "abuse_ch"
"2026-08-26 05:46:26", "1887900", "13.231.27.0:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-09-01 05:43:32", "50", "False", "None", "16509,brute ratel,c2,censys", "0", "sojubear"
"2026-08-26 05:46:19", "1887271", "46.101.146.87:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-30 12:22:11", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-26 05:46:18", "1887882", "https://77.42.69.149", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:59:46", "100", "False", "None", "a6d2471547d36419d2976bfb5f58f7b6,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-26 05:46:17", "1887947", "167.99.194.254:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-30 09:38:02", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-26 05:05:30", "1887955", "bratusferramentas.grupomoltz.com.br", "domain", "payload_delivery", "unknown", "None", "Unknown malware", "2026-08-31 01:56:57", "90", "True", "None", "ClickFix,compromised", "1", "anonymous"
"2026-08-26 03:05:47", "1887930", "uza.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-26 03:05:47", "1887931", "https://uza.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:57:46", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-26 03:05:07", "1887929", "176.65.144.177:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:24", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-26 01:05:37", "1887901", "en-us-glucotrustt-bites.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 03:02:38", "100", "False", "None", "ClearFake", "0", "threatcat_ch"
"2026-08-25 22:16:21", "1887862", "124.198.132.77:1458", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:29", "75", "False", "", "DarkCrystal RAT,DCRat", "0", "whoamix302"
"2026-08-25 22:13:16", "1887854", "207.56.26.11:2222", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:24", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 22:13:16", "1887855", "207.56.26.2:2222", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:24", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 21:47:10", "1887850", "119.45.225.53:8889", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:49", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-25 21:46:58", "1887849", "ck.erloro.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:37", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-25 20:05:47", "1887630", "jij.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-25 20:05:47", "1887631", "https://jij.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:56:26", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-25 19:47:17", "1887625", "66.179.29.5:5000", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-25 19:47:17", "1887626", "66.235.175.82:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:06", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-25 19:47:16", "1887624", "66.179.29.5:2000", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-25 19:47:14", "1887622", "64.89.160.140:7040", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:03", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-25 19:47:14", "1887623", "64.89.160.140:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:03", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-25 19:46:57", "1887621", "45.61.178.41:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:46:45", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-25 19:46:50", "1887620", "45.145.41.185:6767", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:39", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-25 19:46:42", "1887619", "38.54.88.188:65533", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:31", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-25 19:46:37", "1887618", "37.244.224.146:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:46:25", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-25 19:46:24", "1887617", "23.226.68.34:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-25 19:45:14", "1887616", "213.35.118.205:4322", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:31", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-25 19:44:28", "1887615", "185.242.3.249:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:44:39", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-25 19:44:08", "1887614", "172.245.209.209:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:44:16", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-25 19:44:07", "1887613", "172.237.88.168:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-25 19:44:05", "1887612", "172.111.134.94:3001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-25 19:43:53", "1887611", "157.20.182.22:1973", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:58", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-25 19:43:41", "1887610", "147.124.212.136:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:45", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-25 19:43:12", "1887609", "104.239.66.99:56401", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-25 19:43:09", "1887608", "104.143.204.239:52310", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:11", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-25 17:16:04", "1887530", "185.231.154.75:5555", "ip:port", "botnet_cc", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-09-01 03:05:06", "75", "False", "", "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil", "0", "whoamix302"
"2026-08-25 17:15:08", "1887525", "217.60.195.89:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:09", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 17:15:08", "1887526", "193.233.126.164:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:55", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 17:15:08", "1887527", "192.229.115.243:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:52", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 17:15:08", "1887528", "192.229.115.243:56004", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:52", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 17:15:07", "1887523", "217.60.195.25:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:08", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 17:13:45", "1887521", "77.110.124.109:1882", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:08", "75", "False", "", "DarkCrystal RAT,DCRat", "0", "whoamix302"
"2026-08-25 17:13:45", "1887522", "46.246.14.6:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:50", "75", "False", "", "DarkCrystal RAT,DCRat", "0", "whoamix302"
"2026-08-25 17:13:00", "1887519", "107.173.47.158:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:18", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-08-25 17:13:00", "1887520", "107.173.47.158:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:18", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-08-25 16:44:48", "1887508", "visitoldcastle.com", "domain", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "2026-09-01 04:04:28", "100", "True", "", "etherhiding,wordpress", "0", "varysz"
"2026-08-25 16:44:45", "1887489", "studiochr.com", "domain", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "2026-09-01 04:04:29", "100", "True", "", "etherhiding,wordpress", "0", "varysz"
"2026-08-25 16:44:44", "1887481", "santuariodelmontelussari.it", "domain", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "2026-09-01 03:54:27", "100", "True", "", "etherhiding,wordpress", "0", "varysz"
"2026-08-25 16:44:42", "1887462", "pieterzandvliet.com", "domain", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "2026-09-01 03:08:23", "100", "True", "", "etherhiding,wordpress", "0", "varysz"
"2026-08-25 16:44:41", "1887453", "nestrevaitis.lt", "domain", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "2026-09-01 03:14:25", "100", "True", "", "etherhiding,wordpress", "0", "varysz"
"2026-08-25 16:44:39", "1887438", "mamarowsu.nl", "domain", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "2026-09-01 03:08:53", "100", "True", "", "etherhiding,wordpress", "0", "varysz"
"2026-08-25 16:44:39", "1887446", "mepi.com.sa", "domain", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "2026-09-01 03:07:36", "100", "True", "", "etherhiding,wordpress", "0", "varysz"
"2026-08-25 16:44:39", "1887447", "midiachurch.com.br", "domain", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "2026-09-01 03:14:25", "100", "True", "", "etherhiding,wordpress", "0", "varysz"
"2026-08-25 16:43:49", "1887408", "globalelite.group", "domain", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "2026-09-01 03:07:06", "100", "True", "", "etherhiding,wordpress", "0", "varysz"
"2026-08-25 16:43:47", "1887390", "dscconsortium.com", "domain", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "2026-09-01 03:05:35", "100", "True", "", "etherhiding,wordpress", "0", "varysz"
"2026-08-25 16:43:46", "1887388", "drfreddyschauss.be", "domain", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "2026-09-01 03:06:35", "100", "True", "", "etherhiding,wordpress", "0", "varysz"
"2026-08-25 16:43:45", "1887373", "cufl.ie", "domain", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "2026-09-01 03:06:05", "100", "True", "", "etherhiding,wordpress", "0", "varysz"
"2026-08-25 16:43:42", "1887338", "adonget.com.vn", "domain", "payload_delivery", "unknown_loader", "None", "Unknown Loader", "2026-09-01 03:14:25", "100", "True", "", "etherhiding,wordpress", "0", "varysz"
"2026-08-25 15:50:47", "1887245", "x0x.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-25 15:00:45", "1887207", "45.94.31.187:55012", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:48", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 15:00:43", "1887208", "192.229.115.254:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:53", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 15:00:42", "1887209", "192.229.115.254:56004", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:53", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 15:00:42", "1887210", "192.229.115.246:56004", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:52", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 15:00:41", "1887211", "192.229.115.246:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:52", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 15:00:41", "1887212", "178.16.55.133:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:27", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-25 14:18:09", "1887132", "167.71.217.41:8839", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-09-01 05:15:27", "100", "False", "None", "c2,d7d7f50ed686001c727dbd987b7fc7e7,remus", "0", "Bitsight"
"2026-08-25 13:05:06", "1887000", "2.27.202.130:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:12", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-25 12:20:23", "1886835", "http://downloadfreemanager.com/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:31:33", "100", "False", "None", "2,c2,loader,StealC,stealer", "0", "Bitsight"
"2026-08-25 11:32:58", "1886747", "https://168.119.61.136", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 16:08:51", "100", "False", "None", "608de134a53f9215c6fa06e5a514d150,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-25 11:25:47", "1886770", "hh3.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-25 11:05:07", "1886768", "104.143.204.239:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:11", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-25 10:05:16", "1886754", "175.43.223.195:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:22", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-25 09:46:47", "1886746", "80.76.49.47:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:12", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-25 09:46:42", "1886745", "66.235.175.82:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:06", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-25 09:46:05", "1886744", "31.77.248.3:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:22", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-25 09:44:41", "1886743", "195.177.94.155:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:45:00", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-25 09:43:47", "1886742", "155.117.40.213:7721", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:54", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-25 09:43:42", "1886741", "151.241.154.55:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:48", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-25 09:41:59", "1886720", "http://31.76.30.6/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:33:12", "100", "False", "None", "c2,loader,StealC,stealer,tst100", "0", "Bitsight"
"2026-08-25 09:41:58", "1886731", "69.167.11.198:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:07", "75", "False", "", "DarkCrystal RAT,DCRat", "0", "whoamix302"
"2026-08-25 08:52:09", "1886718", "121.4.38.18:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:50", "100", "False", "None", "CobaltStrike,cs-watermark-1234567890", "0", "abuse_ch"
"2026-08-25 07:17:25", "1886686", "ggk.sm188dnsxx.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-25 07:17:25", "1886688", "hbd.sm188dnsxx.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-25 07:17:07", "1886682", "https://178.104.211.128/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:59:25", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-25 02:13:07", "1886601", "en-prosta-fense.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-30 10:02:36", "100", "True", "None", "25August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-24 23:45:47", "1886524", "ibi.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-24 23:45:47", "1886525", "https://ibi.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:57:03", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-24 20:05:05", "1886402", "91.107.211.179:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:22", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-24 18:50:48", "1886368", "https://hit.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:55:36", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-24 18:50:47", "1886367", "hit.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-24 17:39:33", "1886345", "175.27.214.144:4433", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:56", "75", "False", "", "BEACON,Cobalt Strike,CobaltStrike,cobeacon", "0", "whoamix302"
"2026-08-24 17:37:46", "1886341", "154.201.82.108:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:52", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-24 17:37:46", "1886342", "154.201.82.105:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:51", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-24 14:10:48", "1886304", "https://ggk.123ful.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:59:10", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-24 14:10:47", "1886303", "ggk.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-24 13:05:05", "1886132", "45.131.182.88:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:37", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-24 11:47:51", "1886106", "209.200.246.194:24563", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-24 11:25:47", "1886098", "dor.123ful.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-24 10:22:43", "1886046", "159.89.24.55:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 13:21:57", "75", "False", "None", "AISURU", "0", "abuse_ch"
"2026-08-24 10:22:42", "1886045", "46.101.146.87:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 13:21:57", "75", "False", "None", "AISURU", "0", "abuse_ch"
"2026-08-24 10:22:41", "1886044", "104.248.247.126:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 13:21:56", "75", "False", "None", "AISURU", "0", "abuse_ch"
"2026-08-24 10:22:40", "1886043", "46.101.179.59:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 13:21:56", "75", "False", "None", "AISURU", "0", "abuse_ch"
"2026-08-24 10:22:39", "1886042", "159.65.50.202:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 13:21:55", "75", "False", "None", "AISURU", "0", "abuse_ch"
"2026-08-24 10:22:38", "1886041", "167.99.194.254:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 13:21:56", "75", "False", "None", "AISURU", "0", "abuse_ch"
"2026-08-24 10:22:37", "1886040", "165.22.122.89:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 13:21:55", "75", "False", "None", "AISURU", "0", "abuse_ch"
"2026-08-24 10:22:36", "1886038", "104.248.41.207:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 13:21:54", "75", "False", "None", "AISURU", "0", "abuse_ch"
"2026-08-24 10:22:36", "1886039", "209.97.138.100:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 13:21:54", "75", "False", "None", "AISURU", "0", "abuse_ch"
"2026-08-24 10:22:35", "1886037", "139.59.154.153:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 13:21:53", "75", "False", "None", "AISURU", "0", "abuse_ch"
"2026-08-24 09:43:42", "1886022", "151.242.63.248:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:49", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-24 07:51:09", "1885836", "585697.us20.myftpupload.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-31 01:06:53", "50", "True", "", "ClearFake,ClickFix", "0", "skocherhan"
"2026-08-24 07:51:09", "1885837", "dueelletappezzeria.it", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-31 00:56:52", "50", "True", "", "ClearFake,ClickFix", "0", "skocherhan"
"2026-08-24 07:43:11", "1885954", "wsp.sm188dnsxx.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-24 07:42:36", "1885943", "https://2.29.15.189/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 06:00:47", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-24 07:42:35", "1885937", "https://dev.epicgames.com/community/api/user_profiles/profile.json?hash_id=roAjr", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 16:08:36", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-24 07:40:47", "1885935", "wsp.1234e.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-24 00:37:06", "1885759", "krishnamyfriend.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-31 00:26:50", "50", "True", "", "ClearFake,ClickFix", "0", "skocherhan"
"2026-08-24 00:37:03", "1885710", "md-fliesenleger.de", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-31 00:16:49", "50", "True", "", "ClearFake,ClickFix", "0", "skocherhan"
"2026-08-24 00:37:03", "1885715", "charteredglobal.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-31 00:16:49", "50", "True", "", "ClearFake,ClickFix", "0", "skocherhan"
"2026-08-24 00:37:01", "1885696", "sarahstephensescapes.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-31 00:26:50", "50", "True", "", "ClearFake,ClickFix", "0", "skocherhan"
"2026-08-24 00:37:01", "1885701", "cantinastage.wpengine.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-30 09:05:57", "50", "True", "", "ClearFake,ClickFix", "0", "skocherhan"
"2026-08-24 00:37:00", "1885685", "eclipseworldfest.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-31 00:16:48", "50", "True", "", "ClearFake,ClickFix", "0", "skocherhan"
"2026-08-23 23:46:54", "1885678", "209.200.246.194:32126", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-23 23:46:32", "1885677", "acsdomaindsadas.click", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:35", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-23 19:44:44", "1885595", "203.159.90.155:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-23 19:44:37", "1885594", "196.251.121.124:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:05", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-23 19:44:33", "1885593", "194.9.6.125:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:59", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-23 19:43:41", "1885592", "154.201.82.106:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-23 19:43:26", "1885591", "13.205.33.34:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:32", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-23 16:11:17", "1884716", "https://45.91.168.240", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 16:08:37", "100", "False", "None", "2f892afb9f4a0f0cdf19274d21bcc6f8,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-23 16:11:13", "1884663", "https://peermangoz.me/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:46:21", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-08-23 16:11:12", "1884669", "https://aprettopizza.world/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:55:23", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-08-23 16:11:07", "1884742", "http://5.252.177.69/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 04:41:58", "100", "False", "None", "auto1,c2,loader,StealC,stealer", "0", "Bitsight"
"2026-08-23 16:11:07", "1884746", "165.22.158.1:7728", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-09-01 05:55:58", "100", "False", "None", "6efb1e0ab361cda1dd534e37e543789c,c2,remus", "0", "Bitsight"
"2026-08-23 16:11:07", "1884751", "http://31.76.87.171/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:35:21", "100", "False", "None", "AMG63,c2,loader,StealC,stealer", "0", "Bitsight"
"2026-08-23 16:11:06", "1884834", "119.45.225.53:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:49", "50", "False", "None", "45090,c2,censys,cobalt strike", "0", "sojubear"
"2026-08-23 16:11:00", "1885146", "31.187.72.99:8654", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-08-31 17:37:53", "100", "False", "None", "945c9f3c8cddcb7f33efce50a9a949ad,c2,remus", "0", "Bitsight"
"2026-08-23 16:11:00", "1885174", "147.182.132.149:2958", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-09-01 00:49:38", "100", "False", "None", "c2,d7f27ef1d93b25ea58fb91b39d5a6f49,remus", "0", "Bitsight"
"2026-08-23 13:05:05", "1885381", "182.255.91.104:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:57", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-23 09:43:34", "1885188", "130.12.182.39:2600", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:34", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-23 09:05:05", "1885180", "89.144.53.144:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:20", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-23 03:19:29", "1885088", "oraclepacificltd.com", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-31 03:02:00", "100", "True", "", "ClickFix,fake-plugin,hw-fingerprinting", "0", "varysz"
"2026-08-23 03:19:28", "1885077", "agenciaarco.com.br", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-31 03:02:30", "100", "True", "", "ClickFix,fake-plugin,hw-fingerprinting", "0", "varysz"
"2026-08-23 00:40:21", "1884824", "167.71.217.41:7242", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-09-01 04:33:11", "75", "False", "https://bazaar.abuse.ch/sample/0325bda37ee3ae51de29b706986ee9345d9e110b14cdcbde615dd11f959c085a/", "remus", "0", "abuse_ch"
"2026-08-22 23:00:32", "1884753", "eng-trump-token.com", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 01:01:56", "100", "True", "None", "22August2026,ClearFake,Commandline,MacOS", "0", "Gi7w0rm"
"2026-08-22 19:46:00", "1884712", "35.73.165.146:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-09-01 05:46:25", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-08-22 19:44:46", "1884710", "195.177.94.193:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:45:00", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-22 19:44:46", "1884711", "195.177.94.217:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:45:01", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-22 10:12:18", "1884313", "102.220.160.58:418", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-22 09:47:02", "1884305", "93.152.223.39:28447", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:47:28", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-22 09:46:45", "1884304", "80.76.49.47:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:12", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-22 09:46:22", "1884303", "45.61.182.3:2030", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:46:46", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-22 09:46:13", "1884302", "45.131.182.88:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:37", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-22 09:45:59", "1884301", "31.77.138.156:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:22", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-22 09:44:35", "1884300", "185.42.163.55:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-09-01 05:44:45", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-22 09:43:35", "1884299", "137.184.139.185:443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-09-01 05:43:38", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-08-22 09:43:24", "1884298", "117.72.192.13:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:25", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-22 09:43:12", "1884297", "104.243.248.63:100", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:13", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-22 09:03:33", "1884159", "165.227.199.109:8539", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-09-01 06:00:24", "100", "False", "None", "6efb1e0ab361cda1dd534e37e543789c,c2,remus", "0", "Bitsight"
"2026-08-22 09:03:23", "1884193", "128.90.105.164:6666", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:30", "75", "False", "", "DarkCrystal RAT,DCRat", "0", "whoamix302"
"2026-08-22 07:00:00", "1884130", "150.109.93.78:12345", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-30 13:17:11", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-22 06:30:39", "1884148", "217.60.195.33:17541", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-31 04:06:21", "75", "False", "https://bazaar.abuse.ch/sample/10e00b5609e2579472202fa80d3f7cb27d3d5f6e975c5497107dde55237b4ae0/", "remcos", "0", "abuse_ch"
"2026-08-21 19:46:56", "1883965", "82.29.101.38:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:15", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-21 19:46:06", "1883964", "31.59.41.79:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:20", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-21 19:46:05", "1883963", "31.57.184.154:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-21 19:44:39", "1883961", "185.34.147.35:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:45", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 19:44:38", "1883960", "185.34.147.34:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 19:44:37", "1883959", "185.34.147.33:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 19:44:35", "1883958", "185.34.147.31:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 19:43:15", "1883956", "104.249.10.86:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-21 19:43:15", "1883957", "104.249.10.86:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-21 19:18:37", "1883945", "172.93.187.109:4433", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:44:20", "75", "False", "", "None", "0", "whoamix302"
"2026-08-21 19:18:24", "1883942", "91.92.240.98:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:24", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-08-21 19:13:47", "1883934", "104.239.66.192:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:12", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-21 14:05:04", "1883825", "104.238.57.209:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:12", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-21 13:30:47", "1883820", "dez.11gokil.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 16:08:40", "100", "True", "None", "vidar", "0", "crep1x"
"2026-08-21 13:07:09", "1883810", "ses.1001gacor.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-21 13:07:09", "1883812", "ljr.1001gacor.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-21 13:07:09", "1883813", "nhg.1001gacor.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-21 13:07:09", "1883814", "bob.1001gacor.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-21 13:07:09", "1883817", "sto.1001gacor.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-21 13:07:09", "1883818", "rex.1001gacor.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-21 13:07:09", "1883819", "bib.1001gacor.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-21 13:05:05", "1883799", "20.74.145.114:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:18", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-21 11:48:09", "1883789", "8.137.92.225:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-21 11:48:07", "1883787", "68.64.178.130:8081", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-21 11:48:07", "1883788", "68.64.178.130:9443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-21 11:47:47", "1883786", "162.251.92.64:800", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:55", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-21 11:47:46", "1883785", "156.225.18.45:33333", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:55", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-21 11:47:41", "1883784", "122.51.12.180:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:50", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-21 11:05:04", "1883765", "66.85.27.43:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:06", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-21 09:47:34", "1883727", "94.154.32.73:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:30", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-21 09:47:29", "1883726", "91.92.40.209:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-21 09:47:15", "1883724", "80.190.77.86:7007", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:11", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 09:47:09", "1883722", "64.95.13.219:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:05", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-21 09:47:09", "1883723", "65.1.70.222:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:05", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-21 09:44:59", "1883719", "198.23.185.98:6666", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 09:44:59", "1883720", "198.23.185.98:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 09:44:45", "1883718", "188.49.86.25:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:48", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-21 09:44:42", "1883717", "185.34.147.35:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:45", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 09:44:41", "1883716", "185.34.147.34:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 09:44:40", "1883715", "185.34.147.33:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 09:44:34", "1883714", "185.212.129.143:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:37", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-21 09:44:14", "1883713", "172.239.45.42:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:16", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-21 09:44:13", "1883712", "172.236.157.30:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-21 09:44:10", "1883711", "169.58.201.247:5000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:11", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-21 09:44:05", "1883710", "162.35.170.53:2030", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:06", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-21 09:44:04", "1883709", "162.35.105.100:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:06", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-21 09:43:30", "1883708", "128.90.105.217:7209", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:30", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-21 09:43:29", "1883707", "125.62.77.141:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-21 09:43:27", "1883706", "121.127.253.146:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:27", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-21 09:43:21", "1883705", "109.227.36.61:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:43:22", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-21 08:50:30", "1883673", "ges.1001gacor.org", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-21 08:48:14", "1883656", "172.111.198.212:56011", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:13", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-21 06:05:25", "1883231", "176.98.182.177:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 18:23:46", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-21 06:05:23", "1883232", "43.129.180.120:34567", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 16:07:34", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-21 06:05:10", "1883540", "176.98.182.216:34567", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-30 07:27:28", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-20 23:47:00", "1883530", "43.140.219.182:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:04", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-20 19:46:45", "1883459", "95.133.229.173:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-20 19:46:45", "1883460", "95.164.123.132:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:34", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 19:46:38", "1883458", "91.92.243.36:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-20 19:46:12", "1883456", "5.230.201.54:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-20 19:46:12", "1883457", "5.230.201.54:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-20 19:46:10", "1883455", "46.246.84.10:2703", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-20 19:45:57", "1883454", "45.141.215.40:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:38", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 19:45:44", "1883453", "31.59.137.166:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-20 19:45:31", "1883451", "217.60.195.196:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-20 19:45:31", "1883452", "217.60.195.196:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-20 19:45:30", "1883450", "217.217.97.125:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:05", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 19:44:32", "1883448", "193.161.193.99:36731", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:54", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-20 19:44:04", "1883447", "172.86.113.226:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:19", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-20 19:43:50", "1883446", "159.203.69.210:4500", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-20 19:43:37", "1883445", "147.124.221.0:62020", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:45", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 19:24:37", "1883375", "45.61.180.161:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:45", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-20 19:24:37", "1883376", "104.249.10.86:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:15", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-20 19:23:27", "1883373", "45.154.98.38:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:39", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-08-20 19:23:27", "1883374", "216.250.252.108:6680", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:05", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-08-20 16:47:30", "1883212", "95.164.123.132:53105", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:34", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:47:30", "1883213", "95.164.123.132:56545", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:34", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:47:30", "1883214", "95.164.123.132:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:34", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:47:23", "1883210", "91.92.47.94:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:27", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:47:23", "1883211", "91.92.47.94:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:27", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:47:18", "1883208", "91.124.98.25:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:22", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:47:18", "1883209", "91.124.98.25:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:22", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:46:35", "1883207", "45.141.215.40:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:38", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:46:04", "1883206", "217.217.97.125:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:05", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:45:27", "1883204", "213.152.186.188:32605", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:45:29", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:45:27", "1883205", "213.152.186.188:32635", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:45:29", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:44:49", "1883203", "192.109.139.69:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:44:49", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:44:48", "1883202", "192.109.139.69:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:44:49", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:43:12", "1883201", "104.168.70.163:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:11", "75", "False", "None", "drb-ra,HypeAgent", "0", "abuse_ch"
"2026-08-20 16:05:05", "1883189", "178.156.181.26:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:26", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-20 14:10:36", "1883153", "143.246.216.114:38990", "ip:port", "botnet_cc", "elf.pink", "None", "Pink", "2026-09-01 05:58:23", "100", "False", "None", "Pink", "0", "Bitsight"
"2026-08-20 14:05:06", "1883148", "80.190.77.86:2222", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:11", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-20 13:14:57", "1883118", "http://178.16.52.8/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:33:26", "100", "False", "None", "c2,loader,StealC,stealer,test_2", "0", "Bitsight"
"2026-08-20 12:05:05", "1883107", "80.190.77.86:2000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:11", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-20 11:47:46", "1883105", "185.92.190.174:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-20 09:46:42", "1883090", "82.197.65.206:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:15", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-20 09:46:39", "1883088", "80.190.77.86:1000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:11", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-20 09:46:39", "1883089", "80.190.77.86:8008", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:11", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-20 09:46:04", "1883087", "4.193.136.143:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:32", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-20 09:43:19", "1883086", "109.227.40.60:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:43:22", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-20 09:43:12", "1883085", "104.243.248.63:84", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-20 09:28:44", "1883069", "ses.sm188daftar.mom", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-20 09:28:44", "1883070", "nhg.sm188daftar.mom", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-20 09:28:44", "1883071", "ges.sm188daftar.mom", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-20 09:28:44", "1883072", "kra.sm188daftar.mom", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-20 09:28:44", "1883073", "brr.sm188daftar.mom", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-20 09:28:44", "1883074", "sto.sm188daftar.mom", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-20 09:28:44", "1883075", "rex.sm188daftar.mom", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-20 09:28:44", "1883076", "bib.sm188daftar.mom", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-20 09:28:25", "1883057", "https://2.29.7.186/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:58:35", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-20 09:05:06", "1883050", "43.134.42.247:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:33", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-20 08:23:29", "1883026", "217.60.102.8:2269", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 05:05:51", "75", "False", "https://bazaar.abuse.ch/sample/c5103eaa70a4a80176440a0e0dc75136a0e7bcfd9a68d7c8440a4d0edea72011/", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-08-20 08:06:40", "1883020", "46.151.182.93:9090", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 05:03:37", "75", "False", "https://bazaar.abuse.ch/sample/f6117413027a3ddba78e3dcc7e975a626bf0e8f9ffe1dc5dd2387237b40f378f/", "remcos", "0", "abuse_ch"
"2026-08-20 08:05:08", "1883010", "4.193.136.143:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:32", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-20 08:05:06", "1883008", "103.185.249.199:8081", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:43", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-20 07:40:58", "1883000", "46.151.182.148:8080", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 03:11:05", "75", "False", "https://bazaar.abuse.ch/sample/d2d5abf113cb0723ba13b3e4c2c007de844f19673bdae5639b53cd01bb6859ec/", "remcos", "0", "abuse_ch"
"2026-08-20 05:44:41", "1882919", "185.130.45.240:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:32", "50", "False", "https://www.shodan.io/host/185.130.45.240#80", "c2,havoc,shodan", "0", "juroots"
"2026-08-20 05:11:59", "1882826", "176.98.182.217:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 06:12:57", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-20 02:05:53", "1882824", "https://dev.epicgames.com/community/api/user_profiles/profile.json?hash_id=YmbKZ", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 16:08:32", "75", "False", "https://bazaar.abuse.ch/sample/082370aaf679a20e722fec6c88ab73803063e34683b0106e11b0d1999508cec4/", "vidar", "0", "abuse_ch"
"2026-08-19 19:46:59", "1882677", "95.133.166.10:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:47:33", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-19 19:46:51", "1882676", "91.202.233.120:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:23", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:46:01", "1882675", "38.247.165.127:8015", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:30", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:45:55", "1882674", "34.186.150.169:6932", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:23", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:45:50", "1882673", "27.124.36.136:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-19 19:44:57", "1882672", "209.99.188.193:43222", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:27", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-19 19:44:40", "1882671", "194.56.225.150:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-19 19:44:33", "1882670", "189.249.193.210:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:48", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-19 19:44:31", "1882669", "185.34.147.35:2204", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:44:30", "1882668", "185.34.147.34:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:44:29", "1882667", "185.34.147.33:2204", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:42", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:44:28", "1882665", "185.34.147.31:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:44:28", "1882666", "185.34.147.32:2204", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:44:20", "1882664", "185.129.85.77:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:32", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-08-19 19:44:12", "1882663", "176.96.138.71:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-19 19:44:04", "1882662", "172.111.136.159:3000", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-19 19:43:59", "1882661", "164.90.205.13:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:08", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-19 19:43:48", "1882660", "155.2.192.251:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-19 19:43:27", "1882659", "128.90.63.100:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:32", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:43:24", "1882658", "118.107.5.200:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:27", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-19 19:43:19", "1882657", "109.248.160.184:7070", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:22", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-19 19:43:16", "1882656", "107.174.33.36:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:43:12", "1882655", "104.243.248.63:301", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:13", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 19:43:08", "1882654", "103.43.11.40:4443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-19 19:43:04", "1882653", "102.117.164.97:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:03", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-19 19:43:02", "1882652", "1.69.202.103:9003", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:02", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-19 15:05:06", "1882376", "134.209.112.52:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:36", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-19 11:48:03", "1882265", "2.57.241.129:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-19 11:46:03", "1882253", "185.91.126.107:443", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-30 18:15:08", "50", "False", "", "c2,remcos", "0", "juroots"
"2026-08-19 10:05:07", "1881965", "185.34.147.35:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:44", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-19 10:05:06", "1881964", "185.34.147.33:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:42", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-19 09:46:55", "1881949", "94.26.3.52:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-19 09:46:55", "1881950", "95.133.229.218:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:34", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-19 09:46:53", "1881948", "94.20.141.82:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:47:30", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-19 09:45:53", "1881947", "31.77.228.179:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-19 09:44:57", "1881942", "209.99.186.201:55009", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:26", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-19 09:44:24", "1881929", "185.212.129.129:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:37", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-19 09:44:02", "1881928", "169.239.128.90:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:44:10", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-19 09:43:54", "1881927", "159.203.69.210:12262", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-19 09:43:22", "1881926", "118.107.23.86:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:25", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-19 09:31:44", "1881893", "8.148.185.15:3347", "ip:port", "botnet_cc", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-09-01 03:05:06", "75", "False", "", "CinaRAT,Quasar RAT,QuasarRAT,Yggdrasil", "0", "whoamix302"
"2026-08-19 09:29:13", "1881852", "194.56.225.150:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:57", "75", "False", "", "PureRAT", "0", "whoamix302"
"2026-08-19 08:54:11", "1881802", "154.13.7.199:9999", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:50", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-19 08:54:11", "1881803", "209.99.186.201:55006", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:26", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-19 08:53:12", "1881801", "41.100.227.210:3030", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:32", "75", "False", "", "AsyncRAT", "0", "whoamix302"
"2026-08-19 08:05:06", "1881784", "121.200.216.84:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:28", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-19 07:50:12", "1881777", "188.245.219.133:8137", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-08-30 23:25:19", "100", "False", "None", "RemusStealer", "0", "abuse_ch"
"2026-08-19 07:11:04", "1881764", "192.169.176.54:449", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:50", "50", "False", "https://www.shodan.io/host/192.169.176.54#449", "c2,havoc,shodan", "0", "juroots"
"2026-08-19 06:06:14", "1881352", "23.106.253.199:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:12", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:14", "1881353", "23.106.253.199:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:11", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:14", "1881354", "31.40.204.178:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:18", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:12", "1881357", "31.77.138.156:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:21", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:12", "1881358", "31.77.168.191:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:22", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:11", "1881359", "31.77.168.191:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:22", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:11", "1881360", "31.207.7.126:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:17", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:10", "1881361", "31.207.7.126:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:17", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:10", "1881362", "46.151.182.30:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:50", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:09", "1881363", "46.151.182.30:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:50", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:09", "1881364", "64.224.17.66:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:02", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:09", "1881365", "64.224.17.66:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:02", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:08", "1881366", "78.40.209.239:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:10", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:08", "1881367", "78.40.209.239:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:09", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:07", "1881369", "84.38.129.111:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:16", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:06", "1881370", "89.106.83.159:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:20", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:06", "1881371", "89.106.83.159:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:20", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:06", "1881372", "91.92.47.111:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:27", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:04", "1881373", "91.92.47.111:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:27", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:04", "1881374", "91.92.120.61:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:24", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:03", "1881375", "91.92.120.61:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:24", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:01", "1881377", "94.26.3.211:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:32", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:01", "1881378", "94.154.32.73:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:30", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:01", "1881379", "103.141.235.248:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:05", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:00", "1881380", "103.141.235.248:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:05", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:06:00", "1881381", "104.168.70.163:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:11", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:05:59", "1881382", "107.174.146.6:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:19", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:05:59", "1881383", "107.174.146.6:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:18", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:05:58", "1881385", "151.242.63.24:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:49", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:05:58", "1881386", "151.242.63.24:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:49", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:05:58", "1881387", "151.242.63.165:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:49", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:05:57", "1881388", "151.242.63.165:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:48", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:05:57", "1881389", "151.242.63.215:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:49", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:05:56", "1881390", "151.242.63.215:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:49", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:05:56", "1881391", "195.177.94.60:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:45:01", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:05:55", "1881393", "209.54.103.173:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:45:25", "75", "False", "https://infosec.exchange/@RecklessPush38671/117118098460752628", "C2,Censys,HypeAgent", "0", "Overkill1984zzz"
"2026-08-19 06:05:25", "1881417", "43.128.113.133:9035", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 18:21:42", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-19 06:05:25", "1881418", "https://62.238.98.35", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 16:08:30", "100", "False", "None", "592a9e009f92c0e8eaea74a337b4f67c,c2,loader,stealer,Vidar", "0", "Bitsight"
"2026-08-19 06:05:24", "1881423", "150.109.93.78:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 21:10:08", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-19 06:05:24", "1881442", "150.109.93.78:34567", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 01:35:41", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-19 06:05:10", "1881491", "43.128.113.133:12345", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-30 14:49:02", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-19 06:05:09", "1881540", "43.134.49.218:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 17:48:57", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-19 06:04:57", "1881309", "176.96.138.73:7000", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:25", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-19 06:04:57", "1881311", "85.209.129.102:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:17", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-19 06:04:56", "1881310", "213.111.148.180:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:29", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-19 04:05:04", "1881609", "47.108.86.120:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:06", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-18 22:05:04", "1881456", "109.248.160.184:8080", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:22", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-18 19:46:56", "1881411", "92.63.180.96:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:27", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-18 19:46:55", "1881410", "91.92.42.94:4851", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:26", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-18 19:46:53", "1881409", "91.92.243.36:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 19:46:23", "1881408", "46.63.0.187:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:52", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-18 19:46:16", "1881407", "45.59.120.82:7001", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:44", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-18 19:45:44", "1881406", "23.175.48.7:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-18 19:44:42", "1881405", "195.177.94.19:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:00", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 19:44:23", "1881404", "185.199.197.93:1488", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-18 19:44:16", "1881403", "178.211.155.154:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 19:44:13", "1881402", "176.96.138.71:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 19:44:08", "1881401", "172.252.172.33:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 19:44:07", "1881400", "172.252.172.31:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 19:43:45", "1881399", "154.222.16.160:9098", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-09-01 05:43:52", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-18 19:43:25", "1881398", "124.198.131.129:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:28", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-18 19:43:03", "1881397", "102.117.161.35:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:03", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-18 12:08:13", "1880798", "216.128.179.190:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:05", "50", "False", "https://www.shodan.io/host/216.128.179.190#7443", "c2,mythic,shodan", "0", "juroots"
"2026-08-18 12:03:39", "1880756", "149.202.227.107:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:46", "50", "False", "https://www.shodan.io/host/149.202.227.107#4321", "adaptixc2,c2,shodan", "0", "juroots"
"2026-08-18 11:48:07", "1880291", "23.148.212.123:2053", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:01", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-18 11:47:40", "1880290", "ossb6.oss-cn-beijing.aliyuncs.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-18 10:56:26", "1880267", "94.26.3.211:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:47:33", "75", "False", "", "HypeAgent", "0", "abuse_ch"
"2026-08-18 10:56:26", "1880269", "195.177.94.60:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:45:01", "75", "False", "", "HypeAgent", "0", "abuse_ch"
"2026-08-18 10:56:26", "1880270", "107.175.148.122:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:43:19", "75", "False", "", "HypeAgent", "0", "abuse_ch"
"2026-08-18 10:56:26", "1880271", "209.54.103.173:7443", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:45:25", "75", "False", "", "HypeAgent", "0", "abuse_ch"
"2026-08-18 09:47:49", "1880248", "95.216.220.204:8000", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:47:34", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-18 09:47:23", "1880246", "68.178.202.150:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:06", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-18 09:47:23", "1880247", "68.178.205.17:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:07", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-18 09:46:48", "1880244", "45.11.181.85:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 09:46:48", "1880245", "45.11.181.85:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:36", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 09:46:37", "1880243", "36.248.232.166:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:25", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-18 09:46:30", "1880242", "31.56.209.245:5088", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:46:18", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-18 09:45:34", "1880241", "213.199.53.152:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:30", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-18 09:45:20", "1880240", "20.51.121.37:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-18 09:45:13", "1880239", "198.23.185.98:8888", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-18 09:45:11", "1880238", "198.135.54.91:2030", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:45:06", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-18 09:45:09", "1880237", "195.242.119.228:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:04", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-18 09:44:53", "1880236", "192.169.176.54:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:50", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-18 09:44:49", "1880235", "187.194.216.103:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:46", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-18 09:44:48", "1880234", "186.169.88.130:5011", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:45", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-18 09:44:44", "1880232", "185.254.99.153:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:40", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 09:44:44", "1880233", "185.254.99.153:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:40", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 09:44:40", "1880231", "185.212.128.51:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:36", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-18 09:44:38", "1880230", "185.193.127.4:13370", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-18 09:44:30", "1880229", "178.211.155.154:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 09:44:25", "1880228", "176.96.138.71:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 09:44:18", "1880225", "172.252.172.30:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 09:44:18", "1880226", "172.252.172.30:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 09:44:18", "1880227", "172.252.172.30:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 09:43:52", "1880224", "154.248.45.157:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 09:43:37", "1880223", "137.175.30.119:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:38", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-18 09:43:30", "1880222", "128.90.112.33:2486", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:31", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-18 09:43:14", "1880221", "104.243.248.63:408", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-18 09:15:11", "1880192", "43.128.113.133:34567", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 17:50:17", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-18 09:15:10", "1880191", "43.134.49.218:34567", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 01:15:29", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-18 07:05:10", "1878822", "38.76.183.197:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:02", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-18 07:04:33", "1878815", "https://62.238.107.2/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 16:08:35", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-18 05:28:19", "1878059", "167.99.67.141:8811", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-09-01 05:12:41", "100", "False", "None", "974b6b4ed30ddaa4b6f4ec27976e52d8,c2,remus", "0", "Bitsight"
"2026-08-18 05:28:17", "1878062", "176.98.182.177:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 15:00:45", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-18 05:24:56", "1878646", "43.134.49.218:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 04:56:47", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-18 05:24:25", "1878751", "43.128.113.133:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 03:02:33", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-18 05:24:22", "1878778", "150.109.93.78:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 10:06:06", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-17 19:46:54", "1878626", "94.143.231.61:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 19:46:42", "1878625", "83.229.120.106:45231", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:15", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-17 19:46:32", "1878624", "64.89.160.127:8088", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-17 19:46:21", "1878622", "46.246.6.16:2703", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-17 19:46:21", "1878623", "46.246.6.16:7049", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-17 19:46:15", "1878621", "45.61.114.254:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 19:45:59", "1878620", "38.240.47.77:8088", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:29", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-17 19:45:42", "1878618", "217.60.195.226:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 19:45:42", "1878619", "217.60.195.226:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 19:44:57", "1878617", "207.89.17.21:7070", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:45:24", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-17 19:44:49", "1878616", "2.27.63.240:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:15", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-17 19:44:41", "1878615", "194.59.30.183:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:58", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 19:44:40", "1878614", "194.110.247.114:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:56", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-17 19:44:19", "1878613", "179.61.227.148:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:29", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-17 19:44:16", "1878612", "178.16.52.100:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:44:26", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-17 19:44:12", "1878611", "172.98.22.177:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 19:44:00", "1878610", "164.160.187.69:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:07", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-17 19:43:56", "1878609", "159.223.145.166:443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-09-01 05:44:03", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-08-17 19:43:48", "1878608", "155.138.175.126:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:54", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-17 19:43:47", "1878606", "154.222.16.226:9098", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-09-01 05:43:52", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-17 19:43:47", "1878607", "154.222.16.250:9098", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-09-01 05:43:53", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-17 19:43:46", "1878604", "154.205.145.162:48443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-09-01 05:43:52", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-08-17 19:43:46", "1878605", "154.222.16.141:9098", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-09-01 05:43:52", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-17 19:43:44", "1878602", "151.242.170.219:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 19:43:44", "1878603", "151.242.170.219:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 19:43:25", "1878600", "124.198.131.110:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 19:43:25", "1878601", "124.198.131.110:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 19:43:23", "1878598", "118.107.5.200:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:26", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 19:43:23", "1878599", "118.107.5.200:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:27", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 19:43:12", "1878597", "104.243.248.63:401", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-17 15:00:38", "1878053", "43.128.113.133:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 03:51:52", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-17 15:00:38", "1878054", "43.129.180.120:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:29:05", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-17 14:05:05", "1878047", "189.128.189.249:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:48", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-17 11:47:55", "1877899", "c2.apamm.kdns.fr", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:36", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-17 10:05:22", "1877763", "https://svhost-update-service.casa/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:18:34", "100", "False", "None", "c2,loader,PG,StealC,stealer", "0", "Bitsight"
"2026-08-17 09:47:53", "1877751", "95.133.229.173:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 09:47:52", "1877750", "94.250.190.137:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:47:31", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-17 09:47:39", "1877749", "86.48.16.94:3200", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:18", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-17 09:47:35", "1877748", "83.136.211.230:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 09:47:34", "1877747", "82.158.90.134:50555", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-09-01 05:47:14", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-08-17 09:47:33", "1877745", "82.158.90.131:50555", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-09-01 05:47:13", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-08-17 09:47:33", "1877746", "82.158.90.133:50555", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-09-01 05:47:14", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-08-17 09:46:26", "1877744", "217.60.195.226:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-17 09:45:33", "1877743", "204.13.234.19:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:45:21", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-17 09:45:13", "1877742", "193.32.162.108:4432", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:56", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-17 09:44:57", "1877741", "186.112.73.78:8443", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:44:45", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-08-17 09:44:35", "1877740", "178.128.14.67:4443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:26", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-17 09:44:22", "1877739", "169.58.180.142:30400", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:11", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-17 09:43:51", "1877738", "145.63.130.104:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-17 09:43:20", "1877737", "107.173.160.185:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-17 08:00:26", "1877688", "http://158.94.210.108/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-08-30 22:47:12", "100", "False", "None", "c2,loader,StealC,stealer,userr", "0", "Bitsight"
"2026-08-17 06:05:06", "1877665", "185.34.147.32:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:42", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-17 06:05:05", "1877664", "34.150.91.139:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:23", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-17 05:38:27", "1877146", "43.129.180.120:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 04:56:12", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-16 23:47:35", "1877531", "23.148.212.86:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:01", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-16 23:47:35", "1877532", "38.190.196.19:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-16 23:47:26", "1877530", "154.91.85.44:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:54", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-16 23:47:06", "1877529", "cdn.winservers-network.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:37", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-16 21:06:08", "1877422", "2.27.4.236:5552", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:15", "75", "False", "https://bazaar.abuse.ch/sample/85cd6c3229f9ab547cc54f2cbdcf6ef2937987c0181e5ffa3c4205105df8e8fe/", "asyncrat", "0", "abuse_ch"
"2026-08-16 19:46:47", "1877334", "94.250.182.47:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:47:31", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-16 19:46:47", "1877335", "94.26.0.7:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:31", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-16 19:46:34", "1877333", "85.120.217.247:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:16", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-16 19:46:27", "1877332", "68.183.248.32:4443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:47:07", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-16 19:46:17", "1877331", "51.79.169.74:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-16 19:46:03", "1877329", "45.145.41.185:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:38", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-16 19:46:03", "1877330", "45.145.41.185:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:39", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-16 19:45:35", "1877328", "217.60.195.110:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-16 19:44:40", "1877327", "195.177.94.41:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:01", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-16 19:44:30", "1877326", "187.154.215.53:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:46", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-16 19:44:15", "1877325", "178.172.173.84:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:27", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-16 19:44:09", "1877324", "172.94.18.103:77", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-16 19:43:44", "1877323", "153.52.182.78:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:50", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-16 19:43:41", "1877322", "148.163.101.169:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-16 19:43:25", "1877321", "124.198.131.110:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-16 19:43:19", "1877320", "109.248.160.184:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:22", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-16 19:43:12", "1877319", "104.243.248.63:1002", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:13", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-16 19:05:07", "1877301", "108.174.153.97:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:20", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-16 13:05:07", "1877129", "185.34.147.34:21", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:43", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-16 13:04:44", "1876883", "217.60.195.110:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:07", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-16 13:04:43", "1876882", "217.60.195.110:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:06", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-16 13:03:50", "1876897", "150.109.93.78:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 04:23:31", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-16 13:03:33", "1876984", "43.128.113.133:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 00:27:10", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-16 13:03:33", "1877005", "176.98.182.218:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 02:09:53", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-16 13:03:28", "1877037", "176.98.182.216:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 13:53:46", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-16 13:03:28", "1877040", "45.145.41.185:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:38", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-16 13:03:28", "1877041", "172.98.22.177:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:21", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-08-16 13:03:26", "1877051", "150.109.93.78:9035", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-30 14:52:43", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-16 13:03:09", "1876556", "http://158.94.209.112/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:04:36", "100", "False", "None", "c2,loader,StealC,stealer,V1", "0", "Bitsight"
"2026-08-16 13:03:07", "1876789", "43.129.180.120:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 03:18:25", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-16 11:47:14", "1877094", "47.242.248.156:30001", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-16 09:45:53", "1877059", "45.156.87.224:8443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-16 09:45:38", "1877058", "31.59.137.24:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-16 09:45:26", "1877057", "217.60.195.195:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-16 09:45:25", "1877056", "217.60.195.110:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-16 09:44:29", "1877055", "194.59.31.11:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:58", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-16 09:44:26", "1877054", "193.161.193.99:35711", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:54", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-16 09:44:24", "1877053", "192.162.199.185:38492", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:50", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-16 09:43:30", "1877052", "135.136.147.86:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:37", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-16 05:05:05", "1877003", "2.27.63.244:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:15", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-16 04:05:05", "1876997", "155.117.155.237:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:54", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-16 01:05:07", "1876969", "149.88.66.234:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:52", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-15 23:46:23", "1876960", "149.88.66.234:2020", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:52", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-15 19:46:52", "1876823", "91.236.230.143:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:24", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-15 19:46:50", "1876822", "89.37.100.205:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:46:32", "1876817", "64.176.199.134:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:47:01", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-15 19:46:31", "1876816", "62.171.166.237:44300", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:47:00", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-15 19:46:12", "1876814", "45.154.98.207:80", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:46:39", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-15 19:46:05", "1876813", "38.60.253.24:443", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:31", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 19:45:56", "1876812", "31.59.137.24:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:45:55", "1876811", "31.59.137.166:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:45:43", "1876809", "217.60.195.40:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:45:43", "1876810", "217.60.195.40:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:45:42", "1876808", "217.60.195.197:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:44:44", "1876806", "195.177.94.19:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:00", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:44:44", "1876807", "195.177.94.19:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:00", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:44:33", "1876805", "185.34.147.35:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 19:44:32", "1876803", "185.34.147.33:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 19:44:32", "1876804", "185.34.147.34:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 19:44:31", "1876802", "185.34.147.32:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:42", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 19:44:30", "1876801", "185.34.147.31:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 19:44:11", "1876800", "172.86.77.50:5656", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:44:20", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 19:43:46", "1876799", "153.52.176.60:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:43:45", "1876797", "153.52.176.60:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:43:45", "1876798", "153.52.176.60:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:43:38", "1876796", "143.110.197.12:65000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:42", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-15 19:43:25", "1876795", "124.198.131.110:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:43:20", "1876794", "109.227.57.186:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:43:22", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-15 19:43:16", "1876793", "107.173.177.168:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 19:05:05", "1876791", "102.117.167.183:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:03", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-15 15:42:48", "1875029", "176.98.182.218:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 03:17:02", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-15 15:42:44", "1875086", "150.109.93.78:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:59:51", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-15 15:42:44", "1875087", "43.128.113.133:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:28:31", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-15 15:42:43", "1875088", "43.129.180.120:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 04:22:38", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-15 15:42:43", "1875089", "43.134.49.218:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 04:22:52", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-15 15:42:34", "1876044", "176.98.182.218:8080", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 08:24:54", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-15 15:42:27", "1876137", "176.98.182.177:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 02:09:09", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-15 15:42:24", "1876160", "176.98.182.216:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 23:53:14", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-15 15:42:23", "1876188", "43.134.49.218:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:59:35", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-15 15:41:55", "1876244", "176.98.182.217:9034", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 11:11:33", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-15 15:41:43", "1876365", "http://160.20.109.90/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:23:00", "100", "False", "None", "c2,loader,newbuild,StealC,stealer", "0", "Bitsight"
"2026-08-15 15:41:38", "1876375", "209.38.82.72:9048", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-09-01 05:23:10", "100", "False", "None", "0f81469cc7638ba7c82eaddbd6b3c20a,c2,remus", "0", "Bitsight"
"2026-08-15 12:05:06", "1876366", "31.171.131.250:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:17", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-15 11:47:14", "1876361", "youcool.pl", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-09-01 02:35:33", "100", "True", "", "ClickFix,etherhiding,Polygon", "0", "varysz"
"2026-08-15 09:46:30", "1876320", "91.92.243.114:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 09:46:15", "1876319", "64.94.84.119:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:05", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-15 09:46:11", "1876318", "62.171.166.237:8080", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:47:00", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-15 09:45:57", "1876317", "45.61.177.23:2030", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:46:45", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-15 09:45:51", "1876316", "45.154.98.207:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:46:39", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-15 09:45:42", "1876315", "38.147.162.163:15087", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:27", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-15 09:45:31", "1876314", "23.175.48.7:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 09:44:31", "1876313", "194.182.87.116:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:56", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-15 09:44:09", "1876312", "177.22.119.159:9001", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:44:25", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-15 09:44:08", "1876311", "176.44.51.156:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:23", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-15 09:43:45", "1876309", "155.94.150.221:6745", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:55", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 09:43:39", "1876308", "147.45.61.65:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-15 09:43:37", "1876307", "144.124.234.128:49999", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:43", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-15 09:43:24", "1876306", "123.136.92.100:49999", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:28", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-15 09:43:20", "1876305", "111.228.13.59:18443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:23", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-15 09:43:13", "1876304", "104.243.248.63:306", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-15 09:43:10", "1876303", "104.194.132.192:24432", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:11", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-15 09:05:05", "1876285", "93.95.227.51:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:29", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-15 03:20:51", "1876221", "62.72.59.224:7713", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-08-31 08:15:34", "75", "False", "https://bazaar.abuse.ch/sample/460001cd92917d1c8d4e538d0ec367abf02e6533e357083a8382a1e41f7be5ce/", "remus", "0", "abuse_ch"
"2026-08-14 23:46:57", "1876169", "47.84.15.240:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-14 19:46:43", "1876084", "94.143.231.61:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-14 19:46:41", "1876083", "91.92.43.103:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:26", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-14 19:46:27", "1876082", "78.17.213.180:1907", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:09", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-14 19:46:22", "1876081", "64.89.161.196:4444", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:04", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-14 19:46:21", "1876080", "64.227.74.35:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:02", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-14 19:46:07", "1876079", "46.149.68.224:8443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-09-01 05:46:49", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-08-14 19:45:58", "1876078", "45.157.233.139:7000", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:40", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-14 19:45:36", "1876077", "23.175.48.7:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:12", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-14 19:44:53", "1876076", "212.103.26.10:55000", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:45:29", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-14 19:44:43", "1876073", "2.59.133.115:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-14 19:44:43", "1876074", "2.59.133.115:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-14 19:44:43", "1876075", "2.59.133.115:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-14 19:44:41", "1876072", "2.27.248.16:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:45:13", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-14 19:44:38", "1876071", "198.199.74.231:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:07", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-14 19:44:36", "1876070", "195.177.94.41:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:01", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-14 19:44:16", "1876067", "185.112.147.233:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:44:32", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-14 19:44:16", "1876068", "185.112.147.233:80", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:44:32", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-14 19:44:10", "1876066", "178.16.52.136:3009", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:26", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-14 19:44:08", "1876065", "176.65.139.232:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-09-01 05:44:23", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-14 19:44:01", "1876064", "172.236.157.30:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-14 19:43:39", "1876063", "147.45.61.65:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-14 19:43:38", "1876062", "147.124.223.225:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:45", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-14 19:43:26", "1876061", "128.90.63.117:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:32", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-14 19:43:18", "1876059", "108.187.7.173:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-14 19:43:18", "1876060", "108.187.7.180:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-14 19:43:10", "1876058", "104.164.46.182:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-14 19:43:04", "1876057", "102.117.165.168:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:03", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-14 19:05:07", "1876046", "45.66.248.156:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:46", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-14 11:47:34", "1874713", "117.72.159.96:9998", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:47", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-14 09:46:18", "1874678", "63.141.237.101:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-14 09:45:58", "1874677", "45.74.6.146:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:46", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-14 09:45:27", "1874676", "23.111.14.80:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-14 09:45:24", "1874675", "217.60.241.247:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-14 09:44:42", "1874672", "207.56.26.118:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:24", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-14 09:44:42", "1874673", "207.56.26.121:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:24", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-14 09:44:32", "1874671", "198.23.185.238:30305", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-14 09:43:24", "1874670", "128.90.108.184:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:31", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-14 09:43:21", "1874669", "117.24.4.112:3333", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:25", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-14 09:43:13", "1874668", "104.251.180.164:55009", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-14 09:43:07", "1874667", "103.51.145.75:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-14 09:05:09", "1874661", "172.188.0.134:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:14", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-14 06:20:07", "1873910", "176.98.182.217:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:27:39", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-14 06:20:06", "1873911", "176.98.182.177:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:28:17", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-14 06:20:06", "1873912", "176.98.182.218:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 06:00:15", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-14 06:20:06", "1873913", "176.98.182.216:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:27:25", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-14 06:18:51", "1874176", "176.98.182.217:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 06:00:41", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-14 06:05:07", "1874208", "20.187.120.42:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:59", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-14 04:05:06", "1874171", "169.58.31.140:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:11", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-14 03:05:04", "1874136", "169.58.31.140:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:11", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-14 00:05:43", "1873953", "145.223.93.74:7748", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-09-01 04:31:52", "75", "False", "https://bazaar.abuse.ch/sample/949d52a103ea1b3c8752abf5cdcdfe58363b157d031cb78c99f1e45029bfbcb5/", "remus", "0", "abuse_ch"
"2026-08-13 23:46:59", "1873917", "185.92.190.175:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-13 23:46:48", "1873916", "113.52.135.27:19666", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:46", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-13 19:46:44", "1873849", "85.208.69.45:443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-09-01 05:47:17", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-08-13 19:46:34", "1873847", "64.89.161.181:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 19:46:34", "1873848", "64.89.161.181:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 19:46:32", "1873846", "63.141.237.101:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 19:46:31", "1873845", "63.141.237.101:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 19:46:22", "1873844", "46.246.4.16:7049", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 19:46:19", "1873843", "45.88.91.74:7580", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 19:45:43", "1873841", "217.60.195.226:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 19:45:43", "1873842", "217.60.241.247:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 19:45:40", "1873839", "216.118.235.66:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:05", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-13 19:45:40", "1873840", "216.118.235.69:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:05", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-13 19:44:16", "1873838", "177.22.117.81:9001", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:44:25", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-13 19:44:12", "1873837", "172.86.72.75:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:19", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-13 19:43:43", "1873836", "147.45.61.65:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:46", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 19:43:29", "1873831", "128.90.112.237:6666", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:31", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 19:43:28", "1873830", "128.90.105.154:8624", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:30", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 19:43:20", "1873826", "108.187.43.137:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 19:43:20", "1873827", "108.187.43.137:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 19:43:20", "1873828", "108.187.43.144:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 19:43:20", "1873829", "108.187.43.144:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 19:43:15", "1873825", "104.251.180.164:55006", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 19:43:13", "1873824", "104.239.66.245:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 19:43:04", "1873823", "102.117.162.167:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:03", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-13 16:50:12", "1873797", "31.40.204.178:7080", "ip:port", "botnet_cc", "win.hype_agent", "None", "HypeAgent", "2026-09-01 05:46:18", "75", "False", "https://bazaar.abuse.ch/sample/797f2a8984090b782a158c170edeb51285a57d42df02aaf35e65e082f88e77e0/", "HypeAgent", "0", "abuse_ch"
"2026-08-13 15:05:05", "1873757", "4.232.64.244:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:32", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-13 11:47:22", "1873640", "91.92.42.118:13019", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:12", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-13 11:46:56", "1873639", "118.31.18.77:2301", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:48", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-13 09:47:21", "1873575", "91.242.163.227:5174", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:24", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 09:47:14", "1873574", "86.124.168.48:443", "ip:port", "botnet_cc", "js.fakeupdates", "FakeUpdate,GhoLoader,SocGholish", "FAKEUPDATES", "2026-09-01 05:47:18", "75", "False", "None", "drb-ra,SocGholish", "0", "abuse_ch"
"2026-08-13 09:46:54", "1873573", "54.54.27.128:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:58", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-13 09:46:22", "1873571", "38.240.57.198:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 09:46:03", "1873570", "217.60.241.247:7722", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 09:45:09", "1873568", "203.161.55.41:7691", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:20", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-13 09:45:08", "1873567", "202.73.4.82:44321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:19", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-13 09:44:52", "1873566", "194.76.226.90:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:59", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-13 09:44:48", "1873563", "193.138.195.29:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 09:44:48", "1873564", "193.138.195.29:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 09:44:48", "1873565", "193.138.195.29:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 09:44:40", "1873561", "185.34.147.34:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 09:44:40", "1873562", "185.34.147.35:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:45", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 09:44:39", "1873559", "185.34.147.31:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 09:44:39", "1873560", "185.34.147.32:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:42", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 09:44:32", "1873558", "185.199.197.93:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:35", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-08-13 09:44:13", "1873557", "172.111.134.94:56013", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 09:43:51", "1873556", "154.36.188.233:8080", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:53", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-13 09:43:39", "1873555", "139.180.136.200:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:40", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-13 09:43:32", "1873554", "130.12.182.39:2500", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:33", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 09:43:10", "1873553", "103.54.153.49:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-13 09:43:08", "1873552", "103.182.16.169:443", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:07", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-13 08:30:34", "1873504", "http://91.92.34.11/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:57:42", "100", "False", "None", "c2,flka,loader,StealC,stealer", "0", "Bitsight"
"2026-08-13 06:05:05", "1873444", "198.199.86.166:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:07", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-13 05:53:05", "1873415", "http://91.202.233.163/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:52:18", "100", "False", "None", "321LL,c2,loader,StealC,stealer", "0", "Bitsight"
"2026-08-13 05:53:04", "1873416", "https://fbdfsgfwrgerwefew.top/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 03:38:17", "100", "False", "None", "c2,kard,loader,StealC,stealer", "0", "Bitsight"
"2026-08-12 23:46:54", "1873335", "120.55.93.58:10092", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:50", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-12 23:46:53", "1873334", "119.45.231.164:4433", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:49", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-12 23:05:10", "1873316", "130.94.30.59:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:35", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-12 23:05:05", "1873315", "185.34.147.33:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:43", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-12 19:46:45", "1873272", "89.110.91.35:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:20", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-12 19:46:44", "1873270", "87.58.201.47:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 19:46:44", "1873271", "87.58.201.47:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 19:46:43", "1873269", "87.199.206.169:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:19", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-12 19:46:38", "1873268", "80.76.49.54:2244", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:13", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:46:32", "1873267", "65.21.102.4:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:05", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-12 19:46:26", "1873266", "54.54.33.23:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:58", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-12 19:46:19", "1873265", "46.246.14.7:7049", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:46:18", "1873264", "46.246.14.7:2703", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:51", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:46:09", "1873263", "45.221.97.68:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:43", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 19:46:03", "1873261", "44.251.4.9:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:35", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-12 19:45:56", "1873259", "38.240.57.198:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 19:45:56", "1873260", "38.240.57.198:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 19:45:47", "1873258", "3.39.249.68:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:17", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-12 19:45:46", "1873257", "3.122.223.106:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:17", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-12 19:45:44", "1873255", "23.95.103.215:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:45:44", "1873256", "27.124.17.46:442", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 19:45:40", "1873254", "23.148.228.253:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:12", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-12 19:45:37", "1873253", "217.60.241.247:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:44:38", "1873249", "194.59.30.170:1009", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:57", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:44:38", "1873250", "194.59.30.170:60", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:57", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:44:38", "1873251", "194.59.30.170:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:57", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:44:28", "1873243", "185.34.147.32:3306", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:44:28", "1873244", "185.34.147.33:21", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:42", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:44:28", "1873245", "185.34.147.33:3306", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:42", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:44:28", "1873246", "185.34.147.34:3306", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:43", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:44:28", "1873247", "185.34.147.35:21", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:44:28", "1873248", "185.34.147.35:3306", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:44:27", "1873240", "185.34.147.31:21", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:40", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:44:27", "1873241", "185.34.147.31:3306", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:40", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:44:27", "1873242", "185.34.147.32:21", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:41", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:44:18", "1873237", "183.90.187.196:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:31", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 19:44:18", "1873238", "183.90.187.196:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:31", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 19:44:18", "1873239", "183.90.187.196:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:31", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 19:44:17", "1873236", "182.16.29.36:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 19:44:01", "1873235", "168.222.251.83:56013", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 19:43:53", "1873234", "158.94.208.101:666", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:43:41", "1873233", "149.28.121.179:1337", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:43:46", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-12 19:43:37", "1873232", "143.92.61.47:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:43", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-12 19:43:26", "1873231", "128.90.59.81:7070", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:31", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 19:43:23", "1873230", "117.50.214.216:8000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:25", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-12 19:43:06", "1873229", "103.149.91.182:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:07", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-12 19:43:04", "1873227", "103.117.149.104:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:05", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-12 19:43:04", "1873228", "103.118.199.85:50555", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-09-01 05:43:05", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-08-12 17:32:12", "1873148", "http://95.135.181.73/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:52:36", "100", "False", "None", "c2,loader,Mewwski,StealC,stealer", "0", "Bitsight"
"2026-08-12 13:05:08", "1873032", "185.100.87.42:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:31", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-12 12:05:06", "1873018", "185.100.87.43:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:32", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-12 09:46:07", "1872712", "23.95.103.215:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 09:46:07", "1872713", "23.95.103.215:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 09:45:15", "1872710", "209.99.184.151:55006", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:26", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 09:45:15", "1872711", "209.99.184.151:55009", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:26", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 09:44:45", "1872709", "192.229.115.162:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 09:44:44", "1872708", "192.229.115.154:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 09:44:25", "1872706", "178.211.155.64:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 09:44:22", "1872705", "177.22.118.236:9001", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:44:25", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-12 09:44:20", "1872704", "175.43.223.196:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:22", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-12 09:44:15", "1872701", "172.245.23.153:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 09:44:15", "1872702", "172.245.23.153:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 09:44:15", "1872703", "172.245.23.153:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-12 09:44:03", "1872700", "158.94.208.101:963", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 09:44:01", "1872698", "158.94.208.101:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 09:44:01", "1872699", "158.94.208.101:777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:00", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 09:43:32", "1872696", "13.236.153.60:443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-09-01 05:43:33", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-08-12 09:43:30", "1872695", "128.90.105.228:6666", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:31", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 09:43:20", "1872694", "107.22.41.214:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:19", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-12 09:43:19", "1872692", "107.172.72.178:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:43:18", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-12 09:43:19", "1872693", "107.172.72.178:54398", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:43:18", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-12 09:43:16", "1872691", "104.243.248.63:410", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-12 09:43:06", "1872690", "103.146.231.107:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:06", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-12 09:43:05", "1872689", "103.140.154.7:32333", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:05", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-12 07:32:50", "1872624", "169.58.121.189:4443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:56", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-08-12 06:05:09", "1872592", "140.82.46.246:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:40", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-12 05:05:06", "1872568", "93.152.223.39:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:47:28", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-12 00:05:05", "1872489", "89.127.233.194:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:20", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-11 23:47:15", "1872484", "159.75.123.199:1111", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:55", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-11 23:47:05", "1872483", "114.67.98.107:54325", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:46", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-11 23:05:07", "1872473", "185.139.214.67:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:32", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-11 22:05:06", "1872465", "188.49.80.159:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:47", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-11 19:46:42", "1872428", "91.92.243.36:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 19:46:40", "1872426", "89.37.100.205:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 19:46:40", "1872427", "89.37.100.205:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 19:46:37", "1872425", "87.76.146.221:7771", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-11 19:46:34", "1872424", "85.137.249.185:25729", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:16", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-11 19:46:23", "1872423", "64.188.69.73:7273", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:47:01", "75", "False", "None", "drb-ra,NetSupport,RAT", "0", "abuse_ch"
"2026-08-11 19:46:18", "1872422", "54.171.35.227:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:57", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-11 19:46:09", "1872421", "45.88.91.103:2244", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:47", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-11 19:45:34", "1872420", "220.154.140.4:9443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:10", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-11 19:45:32", "1872419", "217.60.241.19:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-11 19:44:49", "1872418", "209.99.184.151:55005", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:26", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 19:44:30", "1872417", "193.221.201.164:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:55", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-08-11 19:44:15", "1872415", "182.16.29.35:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 19:44:15", "1872416", "182.16.29.37:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 19:44:13", "1872414", "18.171.60.199:9999", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:29", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-11 19:43:59", "1872412", "168.222.251.83:56011", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 19:43:44", "1872411", "154.40.62.125:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:43:53", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-08-11 19:43:42", "1872410", "153.80.249.203:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 19:43:27", "1872409", "130.12.182.39:5444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:34", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-11 19:43:25", "1872408", "124.198.131.169:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 19:43:24", "1872406", "124.198.131.169:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 19:43:24", "1872407", "124.198.131.169:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 15:47:04", "1872330", "146.56.227.227:9443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:52", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-11 15:46:46", "1872329", "cf.lala1.lat", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:37", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-11 11:48:37", "1872210", "47.94.224.229:1111", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-11 11:48:28", "1872208", "36.140.162.173:6666", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-11 09:47:24", "1872161", "98.156.49.133:2021", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:34", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-11 09:46:52", "1872159", "57.181.120.61:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-09-01 05:46:59", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-08-11 09:46:51", "1872158", "54.54.33.23:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:58", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-11 09:46:08", "1872157", "23.94.252.16:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:46:13", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-11 09:44:46", "1872153", "192.229.115.156:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 09:44:46", "1872154", "192.229.115.156:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 09:44:46", "1872155", "192.229.115.156:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 09:44:46", "1872156", "192.229.115.162:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 09:44:45", "1872151", "192.229.115.154:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 09:44:45", "1872152", "192.229.115.154:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 09:44:32", "1872150", "185.174.101.235:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-11 09:44:26", "1872148", "178.16.52.136:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:26", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-11 09:43:32", "1872146", "128.90.102.72:8888", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:30", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-11 09:43:18", "1872145", "104.251.181.111:3333", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:15", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-11 09:43:17", "1872144", "104.243.248.63:300", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:13", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-11 06:58:27", "1872079", "155.103.70.232:14554", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 00:01:22", "75", "False", "https://bazaar.abuse.ch/sample/d6fd0e658ec1560ce283754920373825805e7e57176f371e6bc8b9270055bab0/", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-08-11 06:17:57", "1872061", "102.220.160.58:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-11 06:17:56", "1872059", "102.220.160.58:416", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-11 06:05:05", "1872041", "107.182.173.199:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:19", "100", "True", "None", "havoc", "1", "anonymous"
"2026-08-10 23:46:52", "1871924", "43.254.166.41:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:05", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-10 23:46:29", "1871923", "update.qzkgpqn.kdns.fr", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:41", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-10 20:05:05", "1871881", "192.252.185.78:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:59", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 19:46:44", "1871878", "91.92.42.22:6767", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:26", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:46:36", "1871877", "85.137.252.216:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:46:25", "1871876", "64.89.160.127:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:03", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-10 19:46:16", "1871875", "5.133.102.33:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:53", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-10 19:46:12", "1871874", "46.151.182.113:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:49", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-10 19:46:10", "1871873", "45.88.91.145:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:47", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:45:52", "1871872", "38.54.45.183:80", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-09-01 05:46:30", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-08-10 19:45:48", "1871871", "37.244.251.138:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:46:26", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-10 19:45:45", "1871870", "31.76.125.2:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:45:31", "1871869", "216.250.254.245:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-10 19:44:23", "1871868", "186.168.97.172:8443", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:44:45", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-08-10 19:44:14", "1871867", "181.215.49.119:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:44:05", "1871865", "172.81.132.75:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:44:05", "1871866", "172.81.132.75:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:43:40", "1871864", "151.241.99.168:1447", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-10 19:43:22", "1871863", "118.99.88.240:10549", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:27", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-10 19:43:13", "1871862", "104.249.10.87:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 19:43:06", "1871861", "103.213.248.61:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:07", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-10 19:31:02", "1871806", "38.97.63.243:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-09-01 05:14:21", "100", "False", "None", "loader,Vo1d", "0", "Bitsight"
"2026-08-10 19:05:07", "1871851", "192.252.179.24:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:59", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-10 14:24:09", "1871717", "38.97.63.242:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-09-01 05:44:23", "100", "False", "None", "loader,Vo1d", "0", "Bitsight"
"2026-08-10 11:47:37", "1871659", "123.207.203.20:55501", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:51", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-10 11:47:33", "1871658", "117.24.4.112:4521", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:47", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-10 09:46:58", "1871626", "98.191.191.44:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:47:35", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-08-10 09:46:52", "1871625", "91.92.42.22:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:26", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 09:46:51", "1871624", "91.92.34.73:43283", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:25", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-10 09:46:36", "1871623", "77.237.97.58:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:47:08", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-10 09:45:53", "1871622", "31.77.195.32:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-10 09:44:52", "1871621", "209.99.190.23:56014", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:27", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 09:43:58", "1871620", "167.233.161.42:3287", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:44:09", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-10 09:43:52", "1871619", "159.203.69.210:8401", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-10 09:43:38", "1871618", "149.28.121.179:5000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:43:46", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-10 09:43:10", "1871617", "104.239.66.245:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-10 08:19:49", "1871573", "xox.slotmacau188bd.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:32", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 08:19:14", "1871555", "https://78.47.230.34/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 04:12:45", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-10 07:05:05", "1871475", "102.117.174.217:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:04", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-10 03:05:06", "1871452", "169.58.150.130:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:11", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-09 19:46:19", "1871395", "91.202.233.151:8443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:47:23", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-09 19:46:18", "1871394", "91.202.233.151:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:47:23", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-09 19:46:13", "1871393", "85.209.87.84:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 19:45:52", "1871392", "49.235.153.53:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:46:53", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-09 19:45:38", "1871390", "45.140.204.12:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:46:37", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-08-09 19:45:38", "1871391", "45.140.204.12:9000", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:46:38", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-08-09 19:45:16", "1871389", "217.60.77.60:4782", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 19:44:29", "1871388", "2.50.170.49:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-09 19:43:21", "1871387", "128.90.59.58:1110", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:31", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-09 19:43:12", "1871386", "107.172.133.190:56002", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:17", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-09 19:43:08", "1871385", "104.164.46.182:52203", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:11", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:46:40", "1871285", "72.14.136.55:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:46:40", "1871286", "72.14.136.55:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:46:40", "1871287", "72.14.136.55:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:46:39", "1871284", "69.164.245.180:4000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:47:07", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-09 09:46:06", "1871282", "43.134.169.103:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:46:33", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-09 09:46:06", "1871283", "43.134.169.103:40056", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:46:33", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-09 09:44:59", "1871281", "212.103.26.10:54321", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:45:29", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-09 09:44:57", "1871280", "209.99.190.23:55010", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:27", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:49", "1871279", "20.243.82.8:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:18", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-09 09:44:43", "1871278", "198.37.105.30:7777", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-09 09:44:28", "1871277", "185.247.208.91:55555", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:39", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:10", "1871275", "172.252.172.33:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:10", "1871276", "172.252.172.33:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:09", "1871272", "172.252.172.29:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:09", "1871273", "172.252.172.30:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:09", "1871274", "172.252.172.31:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:08", "1871269", "172.245.136.99:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:08", "1871270", "172.245.136.99:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:08", "1871271", "172.245.136.99:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:44:04", "1871268", "168.222.251.83:56012", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 09:43:33", "1871264", "138.2.87.233:25745", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:43:39", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-09 09:43:33", "1871265", "138.2.87.233:30462", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:43:39", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-09 09:43:33", "1871266", "138.2.87.233:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:43:39", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-08-09 09:43:33", "1871267", "139.162.113.221:64321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-09 09:43:29", "1871263", "134.122.132.3:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-09 09:43:26", "1871262", "130.12.182.39:2700", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:34", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-09 09:43:24", "1871261", "124.221.215.82:9090", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:29", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-09 09:43:14", "1871260", "105.108.109.255:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-09 08:05:08", "1871243", "45.61.136.78:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:45", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-09 08:05:05", "1871240", "207.189.23.189:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:23", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-09 06:05:06", "1871218", "202.60.232.182:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:19", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-09 06:05:05", "1871217", "34.26.129.189:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:23", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-08 23:47:03", "1871165", "68.64.183.64:9088", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-08 20:36:26", "1871140", "http://193.148.56.206/", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:47:03", "100", "False", "https://bazaar.abuse.ch/sample/d490ac7dc0854bea4728b0a4497727fdf74a8b1a4a9dc10d040c71b1814586bd/", "Stealc", "0", "abuse_ch"
"2026-08-08 19:46:26", "1871134", "91.92.40.5:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-09-01 05:47:25", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-08 19:46:05", "1871133", "57.182.128.31:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-09-01 05:46:59", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-08-08 19:46:03", "1871131", "52.128.231.157:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:56", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 19:46:03", "1871132", "52.128.231.158:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:56", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 19:46:02", "1871129", "52.128.231.155:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:56", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 19:46:02", "1871130", "52.128.231.156:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:56", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 19:45:40", "1871128", "43.139.114.212:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 19:45:33", "1871127", "34.150.91.139:19443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:23", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-08 19:44:39", "1871126", "207.189.18.213:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:44:25", "1871125", "194.69.162.217:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:58", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 19:44:19", "1871123", "191.111.244.175:8443", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:44:48", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-08-08 19:43:58", "1871122", "172.252.172.33:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:55", "1871121", "169.58.64.151:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:12", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-08 19:43:49", "1871120", "159.203.69.210:48202", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-08 19:43:43", "1871119", "157.10.52.2:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:37", "1871118", "151.242.170.219:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:22", "1871116", "125.62.77.141:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:22", "1871117", "125.62.77.141:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:17", "1871112", "112.121.176.3:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:17", "1871113", "112.121.176.4:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:17", "1871114", "112.121.176.5:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:17", "1871115", "112.121.176.6:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:11", "1871111", "104.239.66.95:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 19:43:01", "1871110", "1.92.135.168:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:02", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 18:05:08", "1871094", "38.60.227.165:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:31", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-08 18:05:07", "1871093", "37.72.168.212:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:26", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-08 17:35:05", "1871072", "130.12.182.79:430", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871058", "217.60.241.31:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871060", "130.12.182.79:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871063", "130.12.182.79:416", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871064", "130.12.182.79:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:04", "1871069", "130.12.182.79:418", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:03", "1871052", "217.60.241.48:418", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:03", "1871053", "217.60.241.31:418", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:03", "1871054", "217.60.241.50:418", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:03", "1871055", "217.60.241.31:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:03", "1871056", "217.60.241.48:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:03", "1871057", "217.60.241.50:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:01", "1871050", "217.60.241.48:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:01", "1871051", "217.60.241.50:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:00", "1871030", "217.60.241.48:416", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:00", "1871031", "217.60.241.50:416", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:00", "1871032", "217.60.241.31:416", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:00", "1871033", "217.60.241.31:430", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:00", "1871034", "217.60.241.50:430", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 17:35:00", "1871035", "217.60.241.48:430", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-08 14:05:06", "1870777", "161.248.179.92:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:04", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-08 11:47:11", "1870752", "185.92.190.177:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-08 09:46:41", "1870714", "95.133.229.173:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 09:46:32", "1870713", "88.129.145.223:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:47:19", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-08-08 09:46:21", "1870712", "68.178.202.150:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:06", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-08 09:45:58", "1870710", "45.56.165.197:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:43", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 09:45:58", "1870711", "45.56.165.197:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:43", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 09:45:54", "1870709", "45.157.117.186:27487", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 09:45:42", "1870708", "34.81.234.183:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:46:24", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-08 09:45:41", "1870707", "31.77.145.53:4443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:22", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-08 09:45:29", "1870706", "217.60.195.187:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-09-01 05:46:07", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-08 09:44:45", "1870705", "209.99.190.23:55011", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:27", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 09:44:39", "1870704", "203.98.68.17:1111", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-08 09:44:36", "1870703", "2.59.133.115:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 09:44:33", "1870702", "2.26.30.62:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:45:11", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-08-08 09:44:30", "1870701", "195.242.119.86:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:45:04", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-08 09:44:28", "1870700", "194.59.31.175:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:58", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 09:43:59", "1870699", "172.252.172.32:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 09:43:27", "1870698", "136.244.96.75:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:38", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-08 09:43:26", "1870697", "134.122.132.35:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-08 09:43:22", "1870696", "129.146.57.192:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-08 07:05:05", "1870641", "192.169.176.54:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:50", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-08 04:05:05", "1870610", "68.178.205.17:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:07", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-07 23:46:45", "1870520", "121.5.27.17:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:50", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-07 23:46:29", "1870519", "1302768123-l3a4w496qm.ap-shanghai.tencentscf.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:35", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-07 19:46:31", "1870254", "94.154.32.48:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 19:46:22", "1870253", "87.120.196.221:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-09-01 05:47:18", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-07 19:45:42", "1870252", "43.135.34.69:43911", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-07 19:45:39", "1870251", "38.18.229.217:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 19:45:24", "1870250", "217.60.97.106:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 19:44:41", "1870249", "207.231.104.146:1447", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:23", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 19:44:40", "1870248", "207.189.18.213:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 19:44:18", "1870247", "186.169.88.130:9002", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:44:46", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 19:44:13", "1870246", "185.212.128.59:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:36", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-07 19:43:59", "1870244", "172.239.45.42:82", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:15", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-07 19:43:59", "1870245", "172.86.117.104:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 19:43:55", "1870243", "167.172.145.141:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:09", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-08-07 19:43:49", "1870242", "159.203.69.210:11088", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 19:43:22", "1870241", "124.198.131.130:1907", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:28", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 19:43:11", "1870240", "104.238.57.23:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 19:43:06", "1870239", "103.158.191.249:442", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 10:05:08", "1869794", "43.139.87.203:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:04", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-07 09:46:36", "1869781", "85.209.87.84:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 09:46:29", "1869780", "78.17.71.8:5025", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:09", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 09:46:24", "1869779", "64.89.161.196:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:04", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 09:46:10", "1869778", "45.89.48.12:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 09:45:46", "1869777", "34.106.101.107:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:23", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 09:45:43", "1869776", "3.75.210.48:7777", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:46:17", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-08-07 09:44:48", "1869775", "207.32.217.227:21903", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:23", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 09:44:45", "1869774", "203.98.68.17:1009", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 09:44:19", "1869773", "185.212.129.152:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:37", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-07 09:44:18", "1869772", "185.212.128.170:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:35", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-07 09:43:53", "1869771", "159.203.69.210:35203", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 09:43:42", "1869769", "154.30.132.30:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:53", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-07 09:43:42", "1869770", "154.40.62.125:9001", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:43:54", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-08-07 09:43:22", "1869768", "124.198.131.169:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 09:43:06", "1869767", "103.249.116.184:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-07 09:05:08", "1869750", "203.98.68.17:2222", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:21", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-07 06:05:06", "1869692", "159.203.69.210:8088", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:02", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-06 23:46:46", "1869592", "151.242.125.190:9527", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:52", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-06 19:46:26", "1869558", "91.92.40.56:8888", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:46:15", "1869556", "80.76.49.3:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:46:15", "1869557", "80.76.49.3:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:46:09", "1869555", "64.89.161.42:13834", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:45:33", "1869554", "31.59.137.166:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:45:21", "1869553", "217.60.97.106:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-06 19:44:11", "1869552", "185.212.128.232:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:36", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-06 19:43:43", "1869551", "156.251.16.212:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:43:38", "1869550", "154.37.154.36:1443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 19:43:37", "1869549", "153.75.88.67:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 14:05:06", "1869453", "103.213.248.61:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:08", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-06 13:05:05", "1869415", "154.221.25.38:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:54", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-06 11:47:32", "1869383", "8.135.68.39:2087", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-06 11:47:16", "1869382", "185.92.190.176:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-06 11:47:15", "1869381", "185.92.190.173:8896", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-06 11:47:09", "1869380", "139.199.3.92:2087", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:52", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-06 09:46:43", "1869339", "94.154.32.48:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:29", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 09:46:35", "1869338", "88.214.26.49:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 09:46:27", "1869337", "80.225.83.93:4444", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-09-01 05:47:12", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-08-06 09:46:15", "1869336", "57.154.16.251:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:59", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-06 09:45:42", "1869335", "31.77.145.53:4444", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:22", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-06 09:44:47", "1869334", "209.99.190.23:56013", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:27", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 09:44:43", "1869333", "207.174.0.234:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 09:44:42", "1869332", "206.123.129.171:7720", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:45:22", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-06 09:44:38", "1869331", "20.168.52.142:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:17", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-06 09:44:37", "1869330", "20.150.148.238:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:17", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-06 09:44:32", "1869329", "196.64.146.72:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-06 09:44:19", "1869327", "186.112.66.56:8443", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:44:45", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-08-06 09:44:19", "1869328", "186.169.88.130:9031", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:44:46", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-06 09:43:59", "1869326", "172.239.45.42:81", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:15", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-06 09:43:50", "1869324", "159.203.69.210:22555", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:01", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-06 09:43:50", "1869325", "159.203.69.210:5800", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-06 09:43:25", "1869323", "134.122.132.28:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-06 09:02:08", "1869312", "217.60.195.118:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 05:18:39", "75", "False", "https://bazaar.abuse.ch/sample/a99039b4ba0da4c05516d43a10dbccc34757b1e3c7b9de7a67d35d667b19948b/", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-08-06 08:05:06", "1869296", "64.89.161.65:4444", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:04", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-08-06 07:24:00", "1869284", "154.221.25.38:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:54", "100", "False", "None", "CobaltStrike,cs-watermark-391144938", "0", "abuse_ch"
"2026-08-06 05:10:19", "1869123", "159.65.136.5:7647", "ip:port", "botnet_cc", "win.remus", "None", "Remus", "2026-09-01 05:52:08", "100", "False", "None", "0f81469cc7638ba7c82eaddbd6b3c20a,c2,remus", "0", "Bitsight"
"2026-08-05 23:47:16", "1869105", "217.154.212.25:4444", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:01", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 23:46:54", "1869104", "100.82.195.65:4444", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:42", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 23:46:49", "1869103", "hp.tailc223d4.ts.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:38", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 19:47:11", "1869057", "94.250.176.76:4433", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:47:31", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-05 19:46:59", "1869055", "85.209.87.84:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 19:46:59", "1869056", "86.48.16.94:30200", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:18", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:46:50", "1869054", "72.14.136.55:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 19:46:47", "1869052", "64.95.13.164:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:05", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-05 19:46:47", "1869053", "64.95.13.164:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:05", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-05 19:46:26", "1869051", "45.59.120.82:5656", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:44", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:44:59", "1869050", "206.123.129.171:8081", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:22", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:44:48", "1869047", "196.251.107.131:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:44:48", "1869048", "196.64.146.72:5000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:44:48", "1869049", "196.64.146.72:5001", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:44:31", "1869046", "185.212.129.31:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:37", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 19:44:30", "1869044", "185.212.129.170:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:37", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 19:44:30", "1869045", "185.212.129.25:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:37", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 19:44:29", "1869043", "185.212.128.181:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:35", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 19:44:28", "1869042", "185.212.128.124:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:35", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 19:44:27", "1869041", "185.174.103.243:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:34", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 19:44:19", "1869040", "178.16.53.222:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:26", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 19:44:13", "1869039", "172.81.132.75:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:19", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 19:44:00", "1869038", "159.203.69.210:23501", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:02", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:43:48", "1869037", "154.247.251.74:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 19:43:28", "1869036", "130.12.181.96:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:33", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 19:05:06", "1869030", "158.220.100.51:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:59", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-05 19:05:05", "1869029", "134.209.146.147:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:37", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-05 17:05:05", "1869000", "8.156.69.157:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:10", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-05 11:47:40", "1868828", "47.83.3.103:10443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 11:47:36", "1868827", "45.8.159.205:8596", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:05", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 11:47:30", "1868826", "209.200.246.194:16556", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 11:47:25", "1868825", "169.58.82.229:7788", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:56", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 11:46:59", "1868823", "acac.hopto.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:35", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-05 09:46:52", "1868757", "65.1.70.222:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:05", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 09:46:51", "1868756", "64.227.159.29:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:02", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-05 09:46:50", "1868755", "64.20.61.215:5000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:47:01", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 09:46:46", "1868754", "57.154.16.246:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:59", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-05 09:46:29", "1868753", "45.38.20.38:8491", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:43", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:46:19", "1868752", "43.135.26.173:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 09:46:13", "1868751", "36.248.232.165:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:25", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-05 09:45:56", "1868750", "217.60.97.106:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:10", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:44:55", "1868748", "203.98.68.17:1008", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:44:55", "1868749", "203.98.68.29:30300", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:44:47", "1868747", "196.251.107.131:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:44:44", "1868746", "194.87.239.245:7682", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:59", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:44:40", "1868745", "193.149.185.215:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:54", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:44:34", "1868744", "186.244.227.52:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:46", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:44:33", "1868740", "186.169.88.130:5012", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:45", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:44:33", "1868741", "186.169.88.130:9140", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:46", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:44:33", "1868742", "186.244.227.104:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:46", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:44:33", "1868743", "186.244.227.27:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:46", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:44:29", "1868736", "185.212.129.70:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:37", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 09:44:29", "1868737", "185.212.129.89:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:38", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 09:44:29", "1868738", "185.212.131.112:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:38", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 09:44:29", "1868739", "185.212.131.113:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:38", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-05 09:44:26", "1868735", "185.174.102.28:55555", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:34", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 09:44:12", "1868734", "172.81.132.75:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-05 09:44:06", "1868733", "164.132.199.212:8089", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:07", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-05 09:44:00", "1868732", "160.20.109.52:32333", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:03", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-05 09:43:43", "1868731", "149.28.163.119:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:46", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-05 09:43:27", "1868730", "128.90.59.58:7070", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:31", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-05 09:43:26", "1868729", "122.51.212.92:39901", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-09-01 05:43:28", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-08-05 08:05:05", "1868683", "169.58.82.229:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:56", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-05 06:37:44", "1868587", "43.163.88.35:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:04", "50", "False", "None", "132203,c2,censys,cobalt strike", "0", "sojubear"
"2026-08-05 06:05:05", "1868636", "43.108.51.124:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:03", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-04 23:47:37", "1868569", "210.56.48.227:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:01", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-04 23:47:37", "1868570", "222.255.215.42:30005", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:01", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-04 19:46:40", "1868505", "93.82.26.41:8000", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:47:29", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-08-04 19:46:26", "1868504", "80.96.109.107:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:45:49", "1868503", "43.134.169.103:8080", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:33", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-04 19:45:43", "1868502", "35.202.238.13:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:46:24", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-04 19:45:42", "1868501", "31.76.96.193:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:46:21", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-08-04 19:45:38", "1868500", "3.122.223.106:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:17", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-04 19:44:44", "1868499", "207.189.25.132:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:23", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:44:42", "1868498", "203.98.68.17:30200", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-04 19:44:33", "1868497", "195.177.94.71:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:01", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:44:09", "1868495", "176.97.114.8:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:44:09", "1868496", "176.97.114.8:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:25", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:44:03", "1868494", "172.182.216.158:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:14", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-04 19:43:55", "1868492", "161.97.154.193:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:43:55", "1868493", "161.97.154.193:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:04", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:43:41", "1868491", "153.75.88.67:6666", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:50", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:43:15", "1868490", "105.108.17.137:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 19:43:02", "1868489", "100.31.3.235:8082", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:43:02", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-08-04 18:00:04", "1868453", "61.54.27.211:8082", "ip:port", "botnet_cc", "vbs.vbrevshell", "None", "VBREVSHELL", "2026-09-01 06:00:05", "50", "False", "https://tracker.viriback.com/index.php?q=61.54.27.211", "ViriBack,Vshell", "0", "abuse_ch"
"2026-08-04 14:05:07", "1868328", "130.12.182.39:7001", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:34", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-04 14:05:06", "1868327", "130.12.182.39:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:34", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-04 13:05:09", "1868319", "130.12.182.39:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:34", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-04 11:47:25", "1868287", "79.110.49.186:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-04 11:47:08", "1868286", "169.58.82.229:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:56", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-04 11:46:52", "1868285", "102.204.223.230:5554", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:43", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-04 09:46:41", "1868255", "91.92.42.152:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:25", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-04 09:46:38", "1868254", "89.36.231.206:65432", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:21", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-04 09:46:30", "1868253", "81.177.222.11:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:13", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-04 09:46:05", "1868252", "45.61.176.146:8443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:45", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-04 09:45:57", "1868251", "45.139.226.224:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:37", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-04 09:45:40", "1868250", "27.124.36.136:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 09:44:09", "1868247", "178.16.53.68:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:27", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 09:44:09", "1868248", "178.16.53.68:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:27", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-04 09:44:00", "1868246", "172.111.232.133:7775", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:44:14", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-04 09:43:59", "1868244", "172.111.134.94:56011", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 09:43:59", "1868245", "172.111.134.94:56012", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 09:43:31", "1868241", "140.228.29.61:55555", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:40", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 09:43:30", "1868240", "138.124.62.3:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:39", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-04 09:43:25", "1868239", "130.12.182.39:5333", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:34", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-04 09:43:23", "1868238", "122.51.212.92:39905", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-09-01 05:43:28", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-08-04 09:43:14", "1868237", "104.251.181.111:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 09:43:12", "1868236", "104.239.66.36:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:13", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-04 09:43:11", "1868235", "104.223.98.68:2028", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:12", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-04 09:10:39", "1868210", "109.248.150.234:1012", "ip:port", "botnet_cc", "win.xworm", "None", "XWorm", "2026-08-31 10:46:30", "75", "False", "https://bazaar.abuse.ch/sample/256504f53f32ebb1c73e9b833a24991a117ea5aa307c2597abcd1e6e6cbf2d69/", "xworm", "0", "abuse_ch"
"2026-08-04 08:50:29", "1868193", "178.16.55.104:8848", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:27", "75", "False", "https://bazaar.abuse.ch/sample/e7303de39d7b302ea161b61c4200b40ec9303dd848893096dced28351e2f4370/", "asyncrat", "0", "abuse_ch"
"2026-08-04 06:55:31", "1868136", "64.89.160.127:6680", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:03", "75", "False", "https://bazaar.abuse.ch/sample/9ce274f0da79ad88585ef5377c9e5c3fa8027dd50e16c7cb9bfa133a08f2ead8/", "asyncrat", "0", "abuse_ch"
"2026-08-04 06:08:32", "1868112", "157.20.182.81:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-08-04 06:05:07", "1868107", "136.115.85.178:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:38", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-04 06:05:06", "1868106", "195.177.94.210:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:00", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-04 05:21:19", "1867971", "189.249.195.86:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:48", "100", "False", "https://platform.censys.io/hosts/189.249.195.86?at_time=2026-08-03T16%3A58%3A19.500825484Z", "AS 8151,c2,censys,mythic,online", "0", "f1nd3r"
"2026-08-04 02:05:06", "1868042", "157.230.83.73:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:58", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-03 19:54:25", "1867932", "https://nonobody123.com/a85e9a98b9364c5d8f74.php", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:23:04", "100", "False", "None", "c2,loader,NEWN1,StealC,stealer", "0", "Bitsight"
"2026-08-03 19:45:50", "1867961", "5.56.25.151:6680", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:54", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-03 19:45:41", "1867960", "45.61.176.146:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:45", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-03 19:45:40", "1867959", "45.59.120.79:7001", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:44", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-03 19:45:16", "1867958", "23.160.168.51:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-03 19:45:13", "1867957", "217.60.195.197:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-03 19:44:25", "1867956", "198.46.173.17:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-03 19:43:49", "1867955", "161.97.154.193:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:05", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-03 19:43:23", "1867954", "130.12.182.39:6666", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:34", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-03 09:46:43", "1867786", "91.206.178.155:443", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:47:23", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-08-03 09:46:33", "1867785", "80.76.49.38:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-03 09:46:06", "1867784", "45.61.176.146:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:45", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-03 09:44:45", "1867783", "207.56.28.111:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-03 09:44:44", "1867782", "207.56.28.111:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-03 09:44:27", "1867781", "193.112.169.214:30727", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:54", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-03 09:44:24", "1867780", "192.159.99.55:8989", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:44:49", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-03 09:43:28", "1867779", "135.136.132.74:55555", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:37", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-03 09:43:12", "1867777", "104.207.90.3:2030", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:43:12", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-03 09:43:12", "1867778", "104.207.90.93:2030", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:43:12", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-03 09:04:36", "1867730", "bpo.pelorsm188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 09:04:36", "1867731", "tyb.pelorsm188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 09:04:36", "1867732", "sro.pelorsm188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 09:04:36", "1867733", "ggr.pelorsm188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 09:04:36", "1867734", "cto.pelorsm188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:30", "1867712", "https://116.202.186.230/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 09:51:38", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:28", "1867701", "https://37.27.204.215/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 11:53:46", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 08:50:26", "1867690", "https://65.108.197.205/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 19:49:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-08-03 07:05:06", "1867640", "92.119.158.20:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:27", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-03 01:05:05", "1867590", "82.156.11.154:8082", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:11", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-08-02 19:45:45", "1867535", "38.60.230.135:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:31", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-02 19:45:45", "1867536", "38.60.230.135:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:31", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-02 19:45:45", "1867537", "38.60.230.135:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:31", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-02 19:45:35", "1867534", "27.124.36.153:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 19:45:28", "1867532", "217.60.77.60:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:09", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 19:45:28", "1867533", "217.60.77.60:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 19:44:42", "1867530", "207.56.28.108:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 19:44:42", "1867531", "207.56.28.111:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 19:44:33", "1867529", "198.46.173.17:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-02 19:44:07", "1867528", "176.97.114.8:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:44:25", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-02 19:43:18", "1867527", "109.248.151.114:9829", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:22", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-02 11:46:58", "1867274", "106.75.249.202:6666", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:44", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-02 10:05:06", "1867257", "43.131.251.190:8088", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:32", "100", "True", "None", "mythic", "1", "anonymous"
"2026-08-02 09:46:59", "1867254", "91.124.98.42:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:22", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 09:46:21", "1867253", "45.61.114.217:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:44", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-08-02 09:46:08", "1867251", "38.247.147.37:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 09:46:08", "1867252", "38.247.147.37:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 09:46:07", "1867250", "38.247.147.37:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:30", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 09:45:57", "1867248", "31.57.147.182:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 09:45:57", "1867249", "31.57.147.182:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 09:44:44", "1867247", "198.46.187.30:65528", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:09", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-02 09:44:39", "1867246", "194.59.30.183:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-02 09:44:17", "1867245", "178.16.55.237:6443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:27", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-02 09:44:03", "1867244", "162.35.187.214:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:06", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-02 09:43:44", "1867243", "15.235.204.51:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:47", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-01 23:47:05", "1867044", "54.178.100.27:8022", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-01 23:46:49", "1867043", "185.92.190.177:8696", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-01 23:46:46", "1867042", "156.224.18.21:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:54", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-01 23:46:25", "1867041", "cs.rainbowrain.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:37", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-08-01 23:05:05", "1867022", "157.20.182.22:6666", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:58", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-08-01 19:46:16", "1866972", "64.20.61.215:8443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:47:02", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-01 19:46:07", "1866971", "46.246.82.10:6490", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:51", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-08-01 19:45:56", "1866970", "45.192.211.77:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:42", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 19:45:32", "1866969", "217.60.77.60:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 19:44:38", "1866968", "195.177.94.61:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:01", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 19:43:46", "1866967", "155.2.192.251:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 19:43:31", "1866966", "139.199.160.80:32408", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 19:43:16", "1866963", "104.251.181.111:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 19:43:16", "1866964", "106.53.107.131:30943", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 19:43:16", "1866965", "107.152.42.223:34321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 19:43:07", "1866962", "103.148.58.18:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 19:43:03", "1866960", "101.36.123.12:34321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:03", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 19:43:03", "1866961", "102.117.164.193:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:03", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-01 09:46:41", "1866624", "87.199.203.248:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-31 18:46:59", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-01 09:46:39", "1866622", "85.11.167.134:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-31 18:46:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:46:39", "1866623", "85.11.167.134:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-31 18:46:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:46:33", "1866621", "77.246.111.132:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:47:09", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-08-01 09:46:18", "1866620", "47.87.84.177:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:52", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-01 09:45:59", "1866618", "43.213.166.7:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:35", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-01 09:45:59", "1866619", "43.213.254.221:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:46:18", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-01 09:45:50", "1866617", "31.57.38.232:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:20", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:45:47", "1866616", "3.115.55.199:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-09-01 05:46:16", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-08-01 09:45:39", "1866615", "217.60.195.197:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:45:38", "1866614", "217.60.195.197:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:08", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:44:46", "1866613", "202.182.108.40:21157", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:19", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-01 09:44:44", "1866612", "20.125.96.116:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:17", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-01 09:44:41", "1866611", "198.46.187.30:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:09", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-08-01 09:44:31", "1866609", "192.159.99.70:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:44:31", "1866610", "192.162.199.180:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:49", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 09:44:30", "1866608", "192.159.99.70:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:44:05", "1866607", "168.144.89.89:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:10", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-08-01 09:43:58", "1866606", "16.76.80.179:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-09-01 05:44:03", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-08-01 09:43:16", "1866603", "104.251.181.111:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-31 18:43:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:43:16", "1866604", "104.251.181.111:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-31 18:43:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:43:16", "1866605", "104.253.79.117:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:16", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-08-01 09:43:09", "1866602", "103.148.58.8:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:43:08", "1866597", "103.148.58.10:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:43:08", "1866598", "103.148.58.10:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:43:08", "1866599", "103.148.58.18:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:43:08", "1866600", "103.148.58.18:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 09:43:08", "1866601", "103.148.58.8:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:06", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-08-01 07:59:50", "1866579", "108.165.147.244:4444", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:44", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-08-01 06:28:01", "1866374", "103.214.146.46:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 09:55:41", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-08-01 02:05:06", "1866518", "124.222.145.172:8084", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:51", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-31 23:46:44", "1866405", "185.92.190.175:8696", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 23:46:44", "1866406", "185.92.190.176:8696", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 23:46:43", "1866402", "185.182.65.34:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 23:46:43", "1866403", "185.92.190.173:8696", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 23:46:43", "1866404", "185.92.190.174:8696", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:57", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 19:46:12", "1866366", "93.152.223.242:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:28", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-31 19:46:11", "1866365", "93.115.27.97:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 19:45:26", "1866364", "38.240.37.142:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-31 08:46:26", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 19:45:21", "1866363", "31.57.38.232:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-31 08:46:17", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 19:45:14", "1866362", "23.227.196.18:43655", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:12", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-31 19:44:21", "1866361", "194.62.248.129:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:58", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 19:44:18", "1866360", "193.138.195.29:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 19:44:09", "1866359", "185.174.102.5:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:34", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 19:43:52", "1866358", "167.172.142.69:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-31 08:44:08", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-31 19:43:20", "1866357", "118.107.46.207:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:26", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 19:43:19", "1866355", "118.107.46.204:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:26", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 19:43:19", "1866356", "118.107.46.207:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:26", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 11:47:13", "1866062", "156.239.47.223:6005", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:55", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 11:47:12", "1866061", "156.224.18.21:8083", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-31 12:48:29", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-31 10:05:08", "1866034", "188.166.238.207:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:44:37", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-31 09:46:54", "1866020", "95.133.166.43:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:33", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-31 09:46:47", "1866019", "89.213.118.63:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-30 18:46:43", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:46:40", "1866018", "82.22.204.150:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-30 18:46:38", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:45:48", "1866017", "27.124.36.153:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:44:55", "1866015", "209.99.190.97:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:45:28", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-31 09:44:51", "1866014", "207.174.0.103:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-30 18:44:53", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:44:40", "1866013", "195.177.94.169:8080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-31 18:44:48", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 09:44:38", "1866011", "194.59.30.109:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-30 18:44:38", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 09:44:38", "1866012", "194.59.30.183:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:57", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:44:19", "1866010", "181.215.242.84:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-30 18:44:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:43:56", "1866009", "157.254.194.126:1447", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-30 18:43:50", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 09:43:27", "1866008", "13.205.246.212:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-31 09:43:15", "1866007", "104.243.248.63:3608", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-31 07:17:55", "1865957", "luciebalit.fr", "domain", "payload_delivery", "js.iclickfix", "None", "IClickFix", "2026-08-31 18:55:06", "100", "True", "", "ClickFix,etherhiding", "0", "varysz"
"2026-07-31 05:45:43", "1865067", "27.71.16.98:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:01", "50", "False", "None", "7552,c2,censys,cobalt strike", "0", "sojubear"
"2026-07-31 05:45:41", "1865072", "124.220.34.180:6666", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:51", "50", "False", "None", "45090,c2,censys,cobalt strike", "0", "sojubear"
"2026-07-31 05:45:40", "1865074", "111.170.148.141:113", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:45", "50", "False", "None", "151185,c2,censys,cobalt strike", "0", "sojubear"
"2026-07-31 01:05:06", "1865068", "114.132.155.197:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:24", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-30 23:46:22", "1865052", "151.244.243.42:4443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:53", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-30 19:46:08", "1864997", "51.79.209.228:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-30 08:46:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 19:46:08", "1864998", "51.79.209.228:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-30 08:46:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 19:46:08", "1864999", "51.79.209.228:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-30 08:46:44", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 19:46:00", "1864996", "46.246.14.5:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-30 08:46:39", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:45:58", "1864995", "46.149.71.165:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:49", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:45:39", "1864994", "35.72.170.195:21672", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:24", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:45:33", "1864993", "27.124.36.136:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 19:44:37", "1864992", "20.236.181.110:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:44:30", "1864988", "195.177.94.109:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-30 08:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 19:44:30", "1864989", "195.177.94.69:27220", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-30 08:44:52", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:44:30", "1864990", "195.177.94.69:27221", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-30 08:44:52", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:44:30", "1864991", "195.242.118.106:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:04", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:44:29", "1864986", "194.59.31.142:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-30 08:44:49", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:44:29", "1864987", "194.59.31.142:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-30 08:44:49", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:44:15", "1864985", "185.139.228.93:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:33", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:44:12", "1864984", "185.103.167.150:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-30 08:44:26", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:44:11", "1864983", "18.178.127.205:21672", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:30", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:44:10", "1864982", "18.139.36.190:24610", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-30 08:44:23", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:44:04", "1864981", "172.96.137.123:8443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-30 08:44:16", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:43:41", "1864980", "154.215.14.139:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-30 08:43:49", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:43:26", "1864979", "132.226.72.148:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:43:21", "1864976", "118.107.46.177:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:26", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:43:21", "1864977", "118.107.46.177:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:26", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:43:21", "1864978", "118.107.46.204:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:26", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 19:43:16", "1864975", "107.175.32.45:8761", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:19", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 19:43:12", "1864974", "104.207.90.244:2030", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-30 08:43:13", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-30 19:43:09", "1864973", "103.53.80.201:3312", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:09", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 09:46:46", "1864706", "93.152.223.221:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:28", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-30 09:46:18", "1864704", "50.114.184.63:444", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 09:46:17", "1864703", "50.114.184.63:442", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 09:46:11", "1864702", "46.151.182.16:2202", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:49", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-30 09:45:43", "1864701", "27.124.36.151:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 09:44:36", "1864698", "2.27.248.116:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:45:12", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-30 09:44:06", "1864696", "173.199.70.174:14321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:21", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-30 09:43:08", "1864693", "103.148.58.8:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-30 09:34:33", "1864673", "103.148.58.10:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:06", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-07-30 09:34:32", "1864645", "188.209.158.220:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:47", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-07-30 09:34:32", "1864649", "184.174.20.138:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:31", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-07-30 09:34:32", "1864652", "85.11.167.61:8000", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:16", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-07-30 09:34:31", "1864643", "188.209.158.220:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:47", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-07-30 09:34:31", "1864644", "188.209.158.220:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:47", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-07-29 23:46:20", "1863827", "156.224.18.21:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-30 08:47:41", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-29 19:46:24", "1863593", "91.199.133.133:8080", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-08-30 08:47:11", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-07-29 19:46:13", "1863592", "78.153.149.82:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-09-01 05:47:09", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-07-29 19:46:10", "1863590", "67.210.97.40:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 19:46:10", "1863591", "67.210.97.40:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 19:46:04", "1863589", "57.129.92.151:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:59", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-29 19:46:01", "1863587", "51.79.185.253:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-31 08:46:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:46:01", "1863588", "51.79.185.253:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-31 08:46:52", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:45:46", "1863586", "45.195.8.67:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:43", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-29 19:45:41", "1863585", "43.213.254.221:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 08:46:32", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-29 19:45:30", "1863583", "27.124.36.151:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:45:30", "1863584", "27.124.36.151:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:16", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:44:16", "1863575", "185.212.128.207:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:35", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-29 19:44:15", "1863574", "185.174.102.28:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:34", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:44:08", "1863573", "178.16.53.65:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-31 08:44:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:45", "1863570", "155.2.192.251:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:42", "1863569", "154.194.50.252:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:33", "1863567", "142.93.52.11:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:41", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-29 19:43:26", "1863566", "130.12.182.209:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:14", "1863563", "104.239.66.154:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-30 18:43:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:14", "1863564", "104.239.66.154:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-30 18:43:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:14", "1863565", "104.239.66.154:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-30 18:43:12", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 19:43:12", "1863562", "103.97.131.179:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:10", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 11:47:01", "1863378", "14.225.212.124:30005", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:52", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-29 09:46:12", "1863346", "93.152.223.222:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:28", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-29 09:46:12", "1863347", "93.152.223.224:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:28", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-29 09:46:02", "1863344", "84.201.20.74:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 09:45:54", "1863341", "67.210.97.40:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:06", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 09:45:17", "1863339", "23.94.252.80:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:46:14", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-29 09:44:01", "1863335", "178.16.53.65:1907", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:44:27", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-29 08:59:54", "1863315", "94.26.3.166:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:32", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:48", "1863311", "89.213.118.63:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:21", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:34", "1863310", "64.224.17.110:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:02", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:29", "1863309", "51.79.185.253:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:27", "1863308", "5.253.86.251:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:54", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:22", "1863305", "45.89.48.12:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:22", "1863306", "45.89.48.12:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:22", "1863307", "45.89.48.12:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:16", "1863304", "45.192.211.63:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:41", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:59:00", "1863299", "27.124.36.151:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:59", "1863298", "27.124.36.136:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:15", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:52", "1863295", "217.156.122.76:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:05", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:52", "1863296", "217.60.195.153:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:52", "1863297", "217.60.195.167:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:17", "1863294", "209.99.190.23:55012", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:27", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:05", "1863292", "194.9.6.82:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:59", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:02", "1863255", "193.164.5.4:9991", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:55", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:01", "1863241", "192.229.115.162:56004", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:00", "1863230", "192.229.115.154:56004", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:00", "1863234", "192.229.115.156:56004", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:58:00", "1863237", "192.229.115.162:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:51", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:56", "1863164", "185.247.208.91:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:39", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:56", "1863169", "185.254.99.153:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:40", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:52", "1863089", "185.174.101.235:55555", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:33", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:46", "1863050", "178.211.155.64:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:28", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:45", "1863049", "178.16.53.65:2828", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-31 18:44:18", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:44", "1863048", "176.96.136.230:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:43", "1863047", "176.96.136.230:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:24", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:36", "1863045", "163.5.210.173:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:07", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:33", "1863044", "160.119.69.21:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:03", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:32", "1863043", "158.94.210.70:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:01", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:21", "1863041", "151.242.63.129:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:48", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:21", "1863042", "151.242.97.15:56831", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:49", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:57:12", "1863040", "140.228.29.61:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:40", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 08:56:51", "1862853", "103.114.218.145:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:05", "75", "False", "None", "drb-ra,PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-07-29 07:42:09", "1861775", "176.96.136.230:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:24", "50", "False", "", "PureRat", "0", "RacWatchin8872"
"2026-07-29 07:42:09", "1861777", "45.192.211.7:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:42", "50", "False", "", "PureRat", "0", "RacWatchin8872"
"2026-07-29 07:42:08", "1861778", "103.68.109.13:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:10", "50", "False", "", "PureRat", "0", "RacWatchin8872"
"2026-07-29 07:42:08", "1861780", "176.96.136.230:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:44:24", "50", "False", "", "PureRat", "0", "RacWatchin8872"
"2026-07-29 07:42:04", "1861788", "157.20.182.21:9992", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:58", "75", "False", "", "AsynRat,Server", "0", "RacWatchin8872"
"2026-07-29 07:32:16", "1862621", "154.12.94.16:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:53", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-07-29 07:32:11", "1862620", "117.72.199.102:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-31 12:48:22", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-07-29 05:46:21", "1862523", "102.204.223.106:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:43", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-28 19:45:36", "1861818", "31.58.179.22:10140", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-30 08:46:12", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-28 19:45:34", "1861817", "31.57.184.154:2504", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:18", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 19:45:30", "1861816", "23.94.148.17:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:13", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 19:44:36", "1861814", "204.44.69.230:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:22", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 16:59:29", "1861744", "45.192.211.7:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:42", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:29", "1861745", "45.192.211.7:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:42", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:29", "1861746", "80.76.49.3:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:12", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861739", "45.192.211.19:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:40", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861740", "45.192.211.19:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:41", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861741", "45.192.211.19:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:41", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861742", "45.192.211.63:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:41", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:28", "1861743", "45.192.211.77:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:42", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:27", "1861730", "45.119.98.111:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:36", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:27", "1861731", "45.119.98.111:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:36", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:27", "1861732", "45.119.98.111:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:36", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861710", "108.187.4.116:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:20", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861711", "108.187.4.145:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:21", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861712", "108.187.4.145:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:21", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861713", "108.187.4.145:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:21", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861714", "112.121.176.2:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:23", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861715", "112.121.176.3:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:23", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861717", "112.121.176.5:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:23", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:26", "1861718", "112.121.176.6:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:24", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:25", "1861705", "103.68.109.13:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:10", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:25", "1861706", "103.68.109.13:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:10", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:25", "1861707", "104.164.46.39:8080", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-08-30 18:43:11", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:25", "1861708", "108.187.4.116:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:20", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 16:59:25", "1861709", "108.187.4.116:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:20", "100", "False", "", "censys,PureRAT", "1", "anonymous"
"2026-07-28 09:46:46", "1861522", "96.126.176.92:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:34", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-28 09:46:44", "1861521", "93.152.223.158:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:28", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-28 09:46:12", "1861520", "49.235.50.231:14486", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:46:53", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-07-28 09:46:11", "1861519", "46.246.6.7:2222", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-30 18:46:18", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 09:46:09", "1861518", "46.151.182.76:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:50", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 09:45:42", "1861516", "23.94.252.87:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:46:14", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-28 09:45:42", "1861517", "24.244.73.237:40056", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:15", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-28 09:45:41", "1861515", "23.94.252.55:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:46:14", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-28 09:44:45", "1861512", "206.189.167.120:65000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:22", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-28 09:44:40", "1861511", "2.27.63.244:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:15", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-28 09:43:56", "1861509", "158.94.210.161:2222", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-30 18:43:51", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-28 09:43:54", "1861508", "157.245.228.139:65000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:59", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-28 09:43:26", "1861507", "130.12.182.249:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:33", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 21:05:07", "1861181", "36.139.36.124:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:25", "100", "True", "None", "adaptix", "1", "anonymous"
"2026-07-27 19:45:24", "1860744", "46.151.182.76:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:50", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 19:44:20", "1860743", "204.44.69.230:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:22", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 19:43:22", "1860739", "130.12.182.249:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:33", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 19:43:21", "1860738", "130.12.182.249:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:33", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 10:51:37", "1860164", "arttv.gr", "domain", "payload_delivery", "js.clearfake", "None", "ClearFake", "2026-08-31 21:20:51", "50", "True", "", "ClearFake,ClickFix", "0", "skocherhan"
"2026-07-27 09:45:41", "1860089", "46.151.182.76:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:50", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 09:44:29", "1860087", "204.44.69.230:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:22", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-27 09:44:23", "1860086", "2.26.26.153:43216", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:11", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-27 09:44:20", "1860085", "194.233.80.96:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:56", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-26 23:45:57", "1859700", "141.255.162.234:37422", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:52", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-26 21:46:16", "1859680", "47.113.98.42:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:06", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-26 21:45:45", "1859678", "dns1.dreamls.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:38", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-26 21:45:45", "1859679", "dns2.dreamls.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:38", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-26 19:44:16", "1858980", "2.27.248.237:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:45:14", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-26 19:44:08", "1858979", "192.162.199.143:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:44:49", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-26 09:44:26", "1858180", "199.246.88.101:5432", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:10", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-07-26 09:43:12", "1858179", "103.67.163.201:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-25 23:46:33", "1857979", "54.178.100.27:8021", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-25 19:46:06", "1857725", "82.158.88.41:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:13", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-25 19:45:23", "1857722", "27.124.20.3:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:15", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 19:44:25", "1857720", "2.27.248.209:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 19:44:10", "1857719", "185.147.83.59:48321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:33", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 19:43:33", "1857717", "144.208.127.87:10443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-30 18:43:38", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 19:43:29", "1857716", "141.255.164.33:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:43:41", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-25 19:43:11", "1857715", "103.67.163.201:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-25 11:45:55", "1857362", "117.28.246.18:8067", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-31 12:48:21", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-25 09:46:00", "1857317", "74.249.84.175:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:08", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:45:51", "1857316", "51.107.74.185:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:55", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:45:30", "1857313", "31.76.96.194:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:46:21", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-25 09:45:30", "1857314", "31.76.96.195:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:46:21", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-25 09:45:27", "1857311", "27.124.20.5:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:15", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:45:27", "1857312", "27.124.20.6:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:15", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:44:42", "1857310", "207.57.123.129:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:24", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:44:36", "1857308", "2.27.28.207:42153", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:15", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:44:36", "1857309", "2.27.29.171:42216", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:15", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:44:33", "1857307", "196.251.107.131:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-25 09:43:30", "1857304", "144.172.118.84:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:43", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:43:20", "1857303", "119.28.212.86:44321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:27", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-25 09:43:10", "1857302", "103.67.163.201:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:09", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 23:46:13", "1857015", "209.200.246.194:34586", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-24 19:45:44", "1856912", "87.251.64.204:63812", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:19", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-24 19:45:13", "1856910", "45.11.59.152:43200", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-24 19:44:59", "1856908", "23.94.252.7:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:46:14", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-24 19:44:16", "1856907", "2.27.248.80:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:45:14", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-24 19:44:03", "1856905", "185.212.129.117:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:37", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-24 19:43:39", "1856897", "156.247.47.108:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:39", "1856898", "156.247.47.108:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:39", "1856899", "156.247.47.109:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:57", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:39", "1856900", "156.247.47.109:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:57", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:39", "1856901", "156.247.47.110:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:57", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:39", "1856902", "156.247.47.110:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:57", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:38", "1856895", "156.247.47.106:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:38", "1856896", "156.247.47.106:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 19:43:33", "1856894", "151.236.21.109:2096", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:48", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-24 09:45:54", "1856708", "23.94.145.121:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:46:13", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-24 09:43:55", "1856704", "157.20.182.21:4444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:58", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-24 07:25:20", "1856675", "42.193.22.177:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:03", "100", "False", "None", "CobaltStrike,cs-watermark-391144938", "0", "abuse_ch"
"2026-07-24 06:20:07", "1856638", "198.98.53.100:8443", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-08-31 17:22:42", "100", "False", "None", "Aisuru,c2", "0", "Bitsight"
"2026-07-23 19:46:19", "1856292", "93.152.224.94:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:29", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:46:18", "1856291", "93.152.223.159:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:28", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:44:28", "1856288", "2.27.248.75:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:45:14", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:44:27", "1856285", "2.27.248.232:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:45:13", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:44:27", "1856286", "2.27.248.236:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:45:13", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 19:44:27", "1856287", "2.27.248.72:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:45:14", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 15:46:18", "1856213", "www.ai2.qzz.io", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:41", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-23 09:44:27", "1855967", "2.27.160.24:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:45:12", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 09:44:27", "1855968", "2.27.248.234:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:45:13", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-23 09:43:48", "1855963", "157.20.182.22:9992", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:58", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-23 09:43:47", "1855962", "157.20.182.21:1444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:57", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-23 09:43:39", "1855961", "151.243.145.220:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:43:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-23 08:05:05", "1855923", "174.138.9.149:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:22", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-23 05:46:03", "1855877", "cdn.pixelcss.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:36", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-22 19:45:15", "1855460", "43.228.157.252:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:35", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 19:43:47", "1855456", "165.22.129.73:65000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:08", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-22 19:43:42", "1855455", "157.20.182.22:1444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:58", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 19:43:25", "1855453", "137.184.163.27:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:38", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-22 19:43:21", "1855451", "12.187.175.73:8797", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:27", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-22 17:05:52", "1855382", "43.134.38.218:4543", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:33", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-22 12:25:04", "1855287", "172.111.163.172:65070", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-09-01 03:49:24", "100", "False", "None", "RAT,RemcosRAT", "0", "abuse_ch"
"2026-07-22 09:45:30", "1855249", "45.142.141.139:443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-30 08:46:28", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-22 09:44:24", "1855246", "20.200.61.22:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:18", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-22 09:43:25", "1855239", "132.145.210.148:8443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:35", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-22 09:43:14", "1855238", "104.248.69.160:65000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:15", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-22 08:06:59", "1855202", "http://vriclactrina.cz/index.php", "url", "botnet_cc", "win.smokeloader", "Dofoil,Sharik,Smoke,Smoke Loader", "SmokeLoader", "2026-09-01 05:41:47", "100", "False", "None", "c2,SmokeLoader", "0", "Bitsight"
"2026-07-21 19:46:20", "1855047", "86.48.16.94:30100", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:18", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-21 19:46:19", "1855046", "85.208.69.45:80", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-09-01 05:47:17", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-07-21 19:45:41", "1855043", "43.213.171.100:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:35", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-21 19:45:40", "1855041", "43.213.142.102:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:35", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-21 19:45:33", "1855039", "34.106.101.107:6932", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:23", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-21 19:45:33", "1855040", "34.28.220.109:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:23", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-21 19:44:32", "1855038", "2.27.122.16:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:45:11", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-21 19:43:32", "1855035", "141.253.195.133:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:41", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-21 19:43:28", "1855034", "132.145.210.148:11235", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:35", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-21 09:44:16", "1854871", "185.33.86.141:29292", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-20 19:45:56", "1854508", "94.154.43.77:80", "ip:port", "botnet_cc", "elf.mirai", "Katana", "Mirai", "2026-09-01 05:47:30", "75", "False", "None", "drb-ra,Mirai", "0", "abuse_ch"
"2026-07-20 19:45:02", "1854504", "220.154.3.197:9443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:11", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:44:22", "1854503", "203.83.238.164:9003", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:20", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:44:19", "1854502", "2.27.248.61:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:45:14", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-20 19:43:37", "1854498", "151.243.101.44:21343", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:49", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:43:29", "1854496", "14.22.75.6:9003", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:40", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:43:29", "1854497", "14.22.75.6:9443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:40", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 19:43:22", "1854495", "12.202.180.13:6745", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:27", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-20 09:45:58", "1854201", "89.124.104.192:49999", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:20", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-20 09:45:09", "1854200", "220.154.3.197:8766", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:10", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 09:44:25", "1854198", "203.83.238.164:8766", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:20", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 09:44:25", "1854199", "203.83.238.164:9443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:21", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-20 09:44:09", "1854196", "185.212.131.28:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:38", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-20 09:44:07", "1854195", "185.212.128.155:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:35", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-20 09:43:51", "1854193", "169.58.12.228:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:11", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-20 09:43:11", "1854188", "103.185.249.13:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:07", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-19 19:44:23", "1853903", "213.160.77.221:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:45:30", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-19 19:43:26", "1853898", "14.22.75.6:8766", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:40", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-19 10:16:42", "1853729", "154.12.85.75:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:53", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-07-19 09:44:11", "1853717", "185.147.83.58:64213", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:33", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-18 23:46:07", "1853568", "38.76.169.75:870", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-18 19:45:54", "1853534", "64.89.161.190:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-18 09:46:14", "1853334", "45.55.98.175:60560", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-09-01 05:46:43", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-07-18 09:45:59", "1853333", "31.57.93.182:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:20", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-18 09:45:49", "1853331", "217.217.97.111:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:05", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-17 21:46:50", "1852991", "45.194.17.39:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-30 08:47:51", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-17 21:05:07", "1852912", "20.2.87.168:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:18", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-17 19:43:41", "1852883", "15.235.149.212:9443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:43:47", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-16 19:46:09", "1852645", "43.225.157.146:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:35", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-16 19:44:30", "1852641", "188.166.40.236:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:47", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-16 09:47:53", "1852491", "203.91.75.89:5005", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-16 09:46:46", "1852489", "64.89.161.190:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-16 09:45:04", "1852483", "209.99.189.225:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:27", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-16 07:11:05", "1851436", "64.89.161.94:2404", "ip:port", "botnet_cc", "win.remcos", "RemcosRAT,Remvio,Socmer", "Remcos", "2026-08-31 19:00:11", "75", "False", "https://bazaar.abuse.ch/sample/b19a5e35b834b52e290d4287956eaaf93e5d19a92ced03638fd7f0305c23b896/", "remcos", "0", "abuse_ch"
"2026-07-16 04:05:05", "1851397", "14.29.160.181:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:52", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-15 19:44:19", "1851283", "185.212.131.22:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:38", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-15 09:46:18", "1850971", "74.0.32.137:80", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:47:08", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-14 19:45:50", "1850710", "64.89.161.190:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-14 19:45:31", "1850708", "45.155.69.254:1488", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-14 19:43:47", "1850700", "158.94.211.63:32333", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-31 08:44:00", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-14 19:43:39", "1850698", "151.145.34.33:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:43:47", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-07-14 18:05:08", "1850666", "45.55.232.28:80", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:43", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-07-13 19:45:28", "1849979", "85.8.149.156:444", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:18", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-13 19:44:54", "1849976", "37.235.54.142:53236", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:25", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-13 19:44:48", "1849974", "23.27.52.106:28736", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-13 19:43:57", "1849967", "185.212.131.27:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:38", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-13 19:05:07", "1849957", "36.140.162.173:7777", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:02", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-13 07:03:02", "1849604", "103.214.146.46:8001", "ip:port", "botnet_cc", "elf.aisuru", "None", "Aisuru", "2026-09-01 05:32:17", "100", "False", "https://github.com/deepfield/public-research/blob/main/aisuru/README.md", "airashi,aisuru,botnet,c2,ddos,mirai", "0", "deepfield"
"2026-07-12 19:43:29", "1849088", "137.220.152.132:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-30 08:43:38", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-12 11:05:05", "1848961", "196.251.121.120:35630", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:45:05", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-07-12 09:45:25", "1848944", "38.54.8.74:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:30", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-12 09:43:23", "1848937", "118.107.45.29:50555", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-09-01 05:43:26", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-07-12 09:43:23", "1848938", "118.107.45.70:50555", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-09-01 05:43:26", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-07-12 09:43:23", "1848939", "118.107.45.73:50555", "ip:port", "botnet_cc", "apk.hook", "None", "Hook", "2026-09-01 05:43:26", "75", "False", "None", "drb-ra,Hook", "0", "abuse_ch"
"2026-07-12 09:43:18", "1848936", "107.172.90.117:4322", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 19:46:05", "1848772", "82.158.229.189:18443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 19:46:05", "1848773", "82.158.229.30:18443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 19:46:04", "1848771", "82.158.229.143:18443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 19:45:23", "1848768", "31.207.4.197:9872", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 19:44:14", "1848765", "185.244.149.240:61443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-09-01 05:44:39", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-07-11 19:43:59", "1848764", "178.104.249.136:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:25", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 19:43:43", "1848759", "156.234.43.100:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:55", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 19:43:43", "1848760", "156.234.43.101:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:55", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 19:43:43", "1848761", "156.234.43.102:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:55", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 19:43:43", "1848762", "156.234.43.98:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 19:43:43", "1848763", "156.234.43.99:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-11 19:43:03", "1848755", "1.14.234.68:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:02", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-11 11:46:37", "1848616", "123.58.64.57:50040", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:51", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-11 11:05:05", "1848599", "172.174.154.130:1024", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:44:14", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-07-11 09:46:53", "1848583", "137.220.194.15:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:51", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-11 08:52:51", "1848544", "81.70.21.248:8088", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:11", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-07-11 05:55:10", "1848480", "157.20.182.81:416", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-07-11 05:55:10", "1848481", "196.251.121.90:416", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-07-10 23:46:33", "1848358", "8.134.70.73:6111", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-10 11:46:34", "1847999", "101.42.255.92:2234", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:43", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-10 10:05:08", "1847977", "101.42.255.92:8081", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:43", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-10 09:46:14", "1847970", "74.0.32.137:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:47:08", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-10 09:45:41", "1847966", "38.207.176.218:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:28", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-10 09:44:08", "1847963", "179.43.149.253:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:29", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-10 09:43:16", "1847959", "104.250.161.126:2061", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:15", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-10 09:43:03", "1847955", "100.31.133.28:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:43:02", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-10 06:05:05", "1847905", "119.45.160.160:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:49", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-09 19:45:23", "1847753", "37.72.172.58:4212", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:26", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 19:44:37", "1847751", "213.209.159.91:22", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:30", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 19:44:36", "1847750", "212.46.38.117:4445", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:45:29", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-09 19:43:58", "1847748", "179.43.149.251:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:28", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-09 19:43:22", "1847744", "122.114.12.155:17891", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-30 08:43:29", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-09 19:43:21", "1847743", "115.42.60.122:7912", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:25", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 11:47:21", "1847068", "203.91.75.89:5006", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-09 09:46:09", "1847000", "5.230.201.242:1995", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:54", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 09:45:45", "1846995", "37.72.172.58:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:26", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-09 09:44:06", "1846988", "179.43.149.252:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:29", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-09 09:44:05", "1846987", "179.43.149.251:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:28", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-09 09:44:00", "1846984", "176.120.22.129:443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-09-01 05:44:23", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-07-09 09:43:59", "1846983", "173.249.22.152:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:22", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-09 09:43:45", "1846977", "157.173.195.214:443", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:43:57", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-09 06:02:51", "1846899", "157.20.182.81:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-07-09 06:02:51", "1846900", "196.251.121.90:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-07-09 02:05:05", "1846849", "193.29.13.44:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:56", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-08 19:44:32", "1846736", "213.209.159.91:4556", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:30", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-08 19:43:55", "1846734", "179.43.149.252:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:29", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-08 19:43:45", "1846733", "164.68.123.50:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:08", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-08 11:46:49", "1846504", "185.92.190.185:8898", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-08 11:46:49", "1846505", "185.92.190.187:8898", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-08 07:40:42", "1846419", "139.226.191.149:2082", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:52", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-07-07 23:46:32", "1846237", "185.92.190.183:8898", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-07 23:46:32", "1846238", "185.92.190.184:8898", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:58", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-07 23:46:32", "1846239", "185.92.190.186:8898", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:59", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-07 09:46:09", "1846003", "93.152.224.44:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:28", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-07 09:46:08", "1846002", "91.92.33.250:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:25", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-06 19:45:03", "1845803", "217.60.97.2:3000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:46:10", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-06 10:58:18", "1845588", "38.46.218.34:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-09-01 04:41:58", "100", "False", "None", "loader,Vo1d", "0", "Bitsight"
"2026-07-06 09:45:31", "1845505", "23.95.217.96:6745", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:14", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-06 09:45:29", "1845504", "222.167.211.55:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:46:11", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-06 09:44:36", "1845502", "203.161.57.75:8234", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:20", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-06 09:44:33", "1845499", "2.27.122.16:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:45:11", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-07-06 09:43:59", "1845497", "173.249.41.141:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:22", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-06 09:43:45", "1845496", "157.245.54.75:9000", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-30 08:43:55", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-07-06 09:43:32", "1845493", "143.198.120.167:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:42", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-07-06 04:05:04", "1845343", "134.209.41.160:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:37", "100", "True", "None", "mythic", "1", "anonymous"
"2026-07-05 19:45:18", "1845294", "31.220.93.222:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:18", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-05 19:44:18", "1845293", "194.26.192.117:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:57", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-05 18:05:04", "1845266", "141.94.121.162:8888", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-08-31 08:43:42", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-07-05 13:33:27", "1845011", "111.229.248.198:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:45", "100", "False", "None", "CobaltStrike,cs-watermark-1234567890", "0", "abuse_ch"
"2026-07-05 09:50:45", "1844960", "http://91.202.233.134/4d95d68e3fc64f3bbbf5.php", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:53:38", "75", "False", "https://bazaar.abuse.ch/sample/1095cf2951bbc8b1ecd33798afad192449a102aa1b976fb60bf566a08d693587/", "stealc", "0", "abuse_ch"
"2026-07-05 09:43:57", "1844953", "170.168.15.43:4322", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:12", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-05 09:43:36", "1844951", "144.31.62.81:56123", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:44", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-05 09:43:35", "1844949", "143.92.43.241:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:42", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-05 09:43:35", "1844950", "143.92.43.246:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:42", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-05 09:43:34", "1844948", "143.92.43.160:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:42", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-04 23:45:52", "1844861", "110.40.147.249:60010", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:45", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-04 19:45:47", "1844840", "92.4.65.88:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:47:27", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-04 19:43:50", "1844835", "179.43.149.250:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:28", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-07-04 09:43:25", "1844471", "130.12.182.95:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:35", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-02 23:45:57", "1843816", "106.13.78.105:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:43", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-02 19:43:55", "1843760", "172.94.18.103:70", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-02 19:43:31", "1843754", "143.92.43.160:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:42", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-02 19:43:31", "1843755", "143.92.43.241:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:42", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-02 19:43:31", "1843756", "143.92.43.246:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:42", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-02 12:05:06", "1843500", "82.157.78.201:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:12", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-02 11:44:21", "1843418", "220.154.3.197:9003", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:11", "75", "False", "", "Mythic,MythicC2", "0", "navneeet"
"2026-07-02 11:44:19", "1843426", "167.99.166.159:8686", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:09", "75", "False", "", "Mythic,MythicC2", "0", "navneeet"
"2026-07-02 10:05:08", "1843475", "39.106.80.126:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:03", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-02 09:45:46", "1843465", "82.165.79.60:12001", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:47:14", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-02 09:45:46", "1843466", "82.165.79.60:12002", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:47:14", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-07-02 09:45:42", "1843463", "70.34.251.19:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:47:07", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-07-02 09:43:38", "1843455", "159.65.42.43:60560", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-09-01 05:44:03", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-07-02 09:43:24", "1843453", "141.94.121.162:6060", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:41", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-07-02 08:15:52", "1843432", "121.43.181.37:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:50", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-07-01 23:46:22", "1843350", "209.200.246.194:37865", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-07-01 19:44:11", "1843292", "185.235.138.19:3000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-08-30 18:44:23", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-07-01 09:43:22", "1840740", "130.12.182.95:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:34", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-07-01 09:43:17", "1840739", "109.237.64.48:44704", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-07-01 08:05:06", "1840722", "119.91.243.238:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:50", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-07-01 07:05:06", "1840704", "43.144.19.224:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:04", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-30 19:46:09", "1840388", "91.92.43.194:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:26", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:46:09", "1840389", "91.92.43.195:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:26", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:46:09", "1840390", "91.92.43.196:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:26", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:46:08", "1840387", "91.92.43.193:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:47:26", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:44:21", "1840379", "193.24.123.25:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:44:56", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:43:26", "1840375", "138.124.240.76:443", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:43:39", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:43:26", "1840376", "138.124.240.76:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:43:39", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:43:26", "1840377", "138.124.240.77:80", "ip:port", "botnet_cc", "js.tsundere", "DinDoor", "Tsundere", "2026-09-01 05:43:39", "75", "False", "None", "DinDoor,drb-ra", "0", "abuse_ch"
"2026-06-30 19:43:15", "1840372", "107.172.22.3:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:17", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-06-30 17:45:50", "1840357", "89.110.90.71:4444", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:20", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-30 17:44:15", "1840351", "2.26.1.177:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:11", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-30 17:43:45", "1840347", "172.94.18.103:69", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:20", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-30 09:54:11", "1840271", "152.32.132.177:8899", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:53", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-06-30 09:43:50", "1840265", "170.64.130.99:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:12", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-30 09:43:27", "1840262", "141.94.121.162:6666", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:41", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-30 09:43:24", "1840261", "136.113.49.8:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:37", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-30 05:05:05", "1840203", "130.12.182.95:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:35", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-06-29 11:46:18", "1839238", "updatesrv.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:41", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-29 11:46:18", "1839239", "web-analyzer-serv32.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:41", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-29 09:45:31", "1839220", "45.92.158.150:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:48", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-28 19:44:54", "1838799", "45.150.38.95:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:39", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-28 19:05:05", "1838789", "104.248.201.191:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:43", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-28 09:43:55", "1838755", "185.212.128.231:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:36", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-27 19:45:17", "1838665", "45.141.234.47:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-30 08:46:28", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-27 19:43:32", "1838660", "155.94.163.75:8797", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:55", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-27 19:43:20", "1838659", "138.124.84.7:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:39", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-27 15:46:40", "1838629", "47.86.184.71:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-27 15:46:01", "1838628", "test.officeplustool.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-27 07:05:05", "1838532", "8.152.212.104:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:10", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-27 03:05:08", "1838492", "20.69.167.4:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:45:18", "100", "True", "None", "havoc", "1", "anonymous"
"2026-06-26 19:45:25", "1838183", "82.165.79.60:1336", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:47:14", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-06-26 12:25:15", "1838123", "https://k1h.hopesm188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:23:25", "75", "False", "None", "k5yss1,Vidar", "0", "abuse_ch"
"2026-06-26 12:25:15", "1838124", "k1h.hopesm188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:23:25", "75", "False", "None", "k5yss1,Vidar", "0", "abuse_ch"
"2026-06-26 07:18:38", "1837880", "122.51.221.207:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:51", "50", "False", "None", "45090,c2,censys,cobalt strike", "0", "sojubear"
"2026-06-25 18:54:17", "1837449", "50.114.184.63:443", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:54", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:54:02", "1837476", "45.192.211.64:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:42", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:54:02", "1837477", "45.192.211.64:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:42", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:54:02", "1837478", "45.192.211.64:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:41", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:53:44", "1837499", "216.107.139.88:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:45:31", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:53:44", "1837500", "94.26.3.104:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:31", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:53:43", "1837501", "94.26.3.104:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:32", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 18:53:43", "1837502", "94.26.3.104:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:32", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 15:17:46", "1837441", "45.192.211.59:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:41", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 15:17:45", "1837442", "45.192.211.59:56002", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:41", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 15:17:44", "1837443", "45.192.211.59:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:41", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-25 08:21:13", "1837265", "45.192.211.63:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:41", "75", "False", "", "PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-06-25 08:08:03", "1837243", "169.239.128.43:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:56", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-06-25 05:28:29", "1837199", "157.20.182.81:418", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-25 05:28:29", "1837204", "157.20.182.81:430", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-24 19:43:22", "1837080", "146.190.80.105:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:44", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-06-24 09:45:14", "1836781", "38.207.177.71:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:28", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-24 09:43:12", "1836771", "107.172.140.187:32333", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-24 07:46:37", "1836745", "45.192.211.77:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:42", "75", "False", "https://bazaar.abuse.ch/sample/d025a29613e300d7755f878eb1d23d8a8a042cb2d3eb9005d66664ab9b97c677/", "PureHVNC,PureRAT,RAT", "0", "abuse_ch"
"2026-06-24 03:45:54", "1836703", "www.rmsmarineservice.com.qwqqwq.ggff.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:41", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-23 19:43:29", "1836662", "156.239.47.147:4221", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:56", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-22 23:46:20", "1836201", "62.234.22.228:51123", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-22 09:43:56", "1835561", "185.212.128.215:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:36", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-22 09:43:03", "1835556", "102.220.160.250:7829", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-22 07:00:13", "1835387", "196.251.121.90:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-22 07:00:13", "1835390", "196.251.121.90:418", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-22 07:00:12", "1835385", "217.60.241.14:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-21 09:45:40", "1834771", "89.42.134.220:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-21 09:45:23", "1834770", "51.79.51.255:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-31 08:46:52", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-19 23:46:13", "1834187", "23.141.12.111:8899", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:01", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-19 19:45:40", "1834170", "97.74.92.237:63334", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-19 19:44:17", "1834168", "211.235.43.192:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:28", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-19 15:46:26", "1834132", "47.242.0.207:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-19 15:46:26", "1834133", "47.242.0.207:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-19 15:45:55", "1834131", "114.134.187.38:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:46", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-19 09:43:05", "1834051", "103.153.254.32:6933", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:07", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-18 19:43:11", "1833852", "115.190.108.6:54233", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-09-01 05:43:25", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-06-18 09:45:43", "1833750", "54.38.94.225:8884", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:46:57", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-06-17 17:00:15", "1833500", "20.39.60.137:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:45:18", "100", "True", "None", "havoc", "1", "anonymous"
"2026-06-16 23:46:00", "1833008", "212.14.244.222:807", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:01", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-16 23:46:00", "1833009", "212.14.244.222:809", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:01", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-16 19:43:12", "1832762", "119.59.118.75:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:27", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-16 11:00:15", "1832647", "39.106.205.6:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:03", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-16 09:45:48", "1832633", "91.132.161.21:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:22", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-16 09:44:09", "1832629", "2.26.229.254:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:11", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-15 22:24:53", "1832514", "usa.goturbo88.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "75", "False", "None", "i7sb1k,Vidar", "0", "abuse_ch"
"2026-06-15 15:46:19", "1832399", "23.95.170.223:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:01", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-15 15:45:49", "1832398", "cs.tpedu2metricstw.dpdns.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:37", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-15 13:24:49", "1832372", "gnw.goturbo88.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "75", "False", "None", "i7sb1k,Vidar", "0", "abuse_ch"
"2026-06-15 09:45:54", "1832323", "89.42.134.220:1803", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-15 09:45:46", "1832320", "8.210.84.56:8000", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:10", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-15 09:43:17", "1832313", "131.143.251.246:53921", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-15 06:13:23", "1832243", "snd.goturbo88.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-06-15 06:13:23", "1832244", "ikg.goturbo88.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:33", "100", "False", "", "Vidar", "0", "crep1x"
"2026-06-15 06:13:23", "1832245", "ggt.goturbo88.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 18:46:34", "100", "False", "", "Vidar", "0", "crep1x"
"2026-06-14 19:45:30", "1832163", "89.42.134.220:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:22", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-14 19:44:54", "1832158", "43.133.164.200:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:32", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-14 11:58:38", "1832091", "217.60.241.17:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-14 11:58:38", "1832092", "217.60.241.14:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-14 09:45:07", "1831995", "64.225.102.218:31400", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:47:02", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-14 09:43:43", "1831987", "185.207.154.11:4848", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-13 19:45:04", "1831838", "45.153.127.224:443", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:46:39", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-06-13 09:46:08", "1831732", "89.42.134.220:1991", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-13 09:43:18", "1831722", "130.185.82.117:5641", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:35", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-13 09:43:12", "1831720", "108.181.115.254:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:43:20", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-06-13 09:43:12", "1831721", "108.181.115.254:7045", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:43:20", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-06-13 09:43:02", "1831717", "101.33.202.134:9989", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:02", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-12 09:44:45", "1830843", "31.57.184.154:7008", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-30 08:46:11", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-12 09:43:11", "1830834", "114.132.238.70:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:25", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-12 09:43:10", "1830833", "110.42.34.220:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:23", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-11 19:44:02", "1830390", "209.99.188.193:43221", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:27", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-11 19:43:50", "1830387", "192.3.139.18:15221", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:53", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-11 14:00:17", "1830307", "172.94.18.103:79", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:21", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-06-11 12:42:24", "1830206", "117.72.159.215:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:47", "50", "False", "https://www.shodan.io/host/117.72.159.215#8080", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2026-06-11 09:44:07", "1830053", "206.81.21.156:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:23", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-11 06:43:05", "1830007", "45.87.53.6:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:05", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-06-11 06:43:04", "1830006", "120.55.3.157:10000", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:50", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-06-11 06:42:48", "1830004", "43.136.180.88:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:03", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-06-11 06:42:47", "1830002", "43.136.180.88:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:03", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-06-11 06:42:47", "1830003", "47.121.181.148:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:06", "100", "False", "None", "CobaltStrike,cs-watermark-666666", "0", "abuse_ch"
"2026-06-11 05:26:05", "1829957", "192.144.213.21:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:59", "50", "False", "None", "45090,c2,censys,cobalt strike", "0", "sojubear"
"2026-06-10 19:43:51", "1829899", "193.135.137.240:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:54", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-10 19:43:34", "1829893", "172.94.18.103:71", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:21", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-10 19:43:32", "1829892", "170.39.185.141:2030", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:12", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-10 09:45:40", "1825867", "64.89.162.117:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:04", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-10 09:44:00", "1825853", "192.208.12.91:3000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:50", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-10 09:43:35", "1825850", "163.245.217.48:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:07", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-06-10 09:43:10", "1825846", "107.175.87.234:65321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:19", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-10 07:18:53", "1825788", "34.92.128.98:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:02", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-06-10 06:00:25", "1825703", "8.163.59.20:8008", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:11", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-09 19:44:51", "1825613", "46.151.182.16:1011", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:49", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-09 06:21:30", "1825374", "217.60.241.14:416", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-09 06:21:29", "1825370", "217.60.241.14:418", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-09 06:21:24", "1825349", "217.60.241.17:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-07 23:45:14", "1824508", "209.200.246.194:17568", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-07 19:45:00", "1824433", "82.156.224.184:8080", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:47:13", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-06-07 19:43:30", "1824426", "172.189.57.198:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:15", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-06-07 09:44:50", "1824255", "31.57.184.154:2505", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:18", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-06-07 09:44:10", "1824254", "209.99.188.193:4323", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:27", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-06-07 09:43:16", "1824247", "137.184.163.27:5613", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:38", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-06-07 07:23:27", "1824088", "94.26.3.52:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:33", "100", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-07 07:23:22", "1824099", "77.83.39.141:56003", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:47:09", "100", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-06-06 19:44:30", "1824130", "46.151.182.243:55380", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:50", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-06 11:45:14", "1824029", "154.12.86.154:55555", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:53", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-06 11:45:14", "1824030", "154.12.86.154:8889", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:53", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-06 11:45:14", "1824031", "154.12.86.154:9004", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:53", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-06 10:32:30", "1824012", "47.101.51.235:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:05", "100", "False", "None", "CobaltStrike,cs-watermark-666666", "0", "abuse_ch"
"2026-06-06 05:24:31", "1823853", "https://pas.sm188star.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:22:12", "75", "False", "None", "ar3k0,Vidar", "0", "abuse_ch"
"2026-06-06 05:24:31", "1823854", "pas.sm188star.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:22:12", "75", "False", "None", "ar3k0,Vidar", "0", "abuse_ch"
"2026-06-06 03:44:58", "1823730", "101.43.103.154:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:43", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-05 05:14:52", "1822674", "dev.useimage.sbs", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:37", "100", "False", "", "CobaltStrike", "0", "abuse_ch"
"2026-06-04 23:45:28", "1822600", "34.202.161.96:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-04 23:45:07", "1822599", "updates.fisgloval.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:41", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-04 19:43:27", "1822526", "163.172.174.237:443", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-09-01 05:44:06", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-06-04 19:43:27", "1822527", "163.172.174.237:80", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-09-01 05:44:06", "75", "False", "None", "BruteRatel,drb-ra", "0", "abuse_ch"
"2026-06-04 14:50:35", "1822415", "120.26.208.96:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:50", "50", "False", "", "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon", "0", "whoamix302"
"2026-06-04 11:46:46", "1822346", "154.12.86.154:44444", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:53", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-06-04 09:45:35", "1822301", "82.23.246.160:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:15", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-04 09:43:29", "1822296", "156.247.40.190:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-04 05:50:13", "1822159", "217.60.241.17:416", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-06-03 15:24:07", "1821798", "13.236.153.60:8888", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:33", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-06-03 15:23:52", "1821844", "47.82.234.12:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:08", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-06-03 09:45:37", "1821716", "82.23.246.160:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:15", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-03 09:43:30", "1821713", "156.247.40.190:12159", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:56", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-06-02 14:05:08", "1821227", "198.13.51.245:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:06", "50", "False", "https://www.shodan.io/host/198.13.51.245#4321", "adaptixc2,c2,shodan", "0", "juroots"
"2026-06-02 14:04:12", "1821221", "34.61.52.162:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:24", "50", "False", "https://www.shodan.io/host/34.61.52.162#443", "c2,mythic,shodan", "0", "juroots"
"2026-06-01 19:43:43", "1820723", "178.16.54.48:443", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:44:27", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-06-01 19:43:42", "1820722", "178.16.52.47:443", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:44:26", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-06-01 06:44:52", "1820506", "165.22.225.218:5443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:56", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-05-31 15:04:22", "1820327", "64.89.160.44:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:03", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-05-31 09:45:39", "1820291", "64.176.73.125:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:47:01", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-05-31 09:44:59", "1820290", "31.57.184.154:2503", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:18", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-31 06:48:28", "1820214", "64.89.160.44:1000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:03", "50", "False", "None", "205759,asyncrat,c2,censys", "0", "sojubear"
"2026-05-30 09:45:23", "1820043", "38.54.63.135:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:30", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-30 09:43:14", "1820039", "114.132.190.121:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:24", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-29 19:45:33", "1819906", "43.140.219.30:7112", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:46:34", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-29 19:44:12", "1819901", "192.162.199.25:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:50", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-29 19:43:42", "1819895", "162.248.224.236:7492", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:05", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-29 19:43:42", "1819896", "162.248.225.165:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:05", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-29 19:43:42", "1819897", "162.248.225.165:8603", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:05", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-29 19:43:41", "1819894", "162.248.224.236:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:05", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-29 15:30:50", "1819842", "mub.depansm188.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 00:21:46", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-29 15:30:50", "1819843", "https://mub.depansm188.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-31 00:21:46", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-29 11:46:33", "1819786", "118.89.79.131:6528", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:49", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-29 09:43:47", "1819753", "168.144.36.228:9000", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-30 18:43:58", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-05-28 19:44:44", "1819593", "31.57.184.154:7005", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-28 09:46:09", "1819406", "91.215.85.212:45423", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:23", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-28 09:46:05", "1819405", "85.209.90.132:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-28 09:45:23", "1819402", "43.133.165.151:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:33", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-28 09:44:19", "1819396", "202.95.8.97:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:19", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-28 09:44:19", "1819397", "202.95.8.98:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:20", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-28 09:44:10", "1819394", "193.5.65.169:4348", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:56", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-28 09:44:10", "1819395", "193.5.65.169:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:56", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-28 09:43:13", "1819387", "113.31.106.85:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:24", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-27 19:45:55", "1819225", "91.200.84.198:8515", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:23", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-27 19:45:12", "1819222", "43.106.14.139:8085", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-08-31 18:46:16", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-05-27 19:43:47", "1819220", "18.162.155.202:3350", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:44:29", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-27 15:46:43", "1819146", "8.134.70.73:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-27 07:09:22", "1818956", "8.163.49.50:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:11", "50", "False", "None", "c2,censys,cobalt strike", "0", "sojubear"
"2026-05-26 19:43:28", "1818872", "155.102.136.60:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:43:54", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-26 09:44:02", "1818696", "193.24.123.160:45631", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:55", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-26 08:35:13", "1818588", "31.57.184.154:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:46:19", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-05-26 08:35:01", "1818605", "103.17.38.43:56001", "ip:port", "botnet_cc", "win.pure_rat", "PureHVNC,ResolverRAT", "PureRAT", "2026-09-01 05:43:07", "75", "False", "", "PureHVNC,PureRAT,ResolverRAT", "0", "whoamix302"
"2026-05-25 22:46:18", "1818480", "47.108.25.113:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:06", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-25 19:44:52", "1818434", "37.77.150.174:4333", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:46:27", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-05-25 19:44:51", "1818433", "37.77.150.174:4332", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:46:27", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-05-25 19:44:05", "1818431", "202.95.8.92:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:19", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-25 14:00:07", "1818346", "45.153.127.224:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:46:39", "50", "False", "https://tracker.viriback.com/index.php?q=45.153.127.224", "Chaos,ViriBack", "0", "abuse_ch"
"2026-05-24 14:46:49", "1818053", "45.154.12.150:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:05", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-24 11:05:15", "1817829", "172.94.18.103:75", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:21", "100", "True", "None", "asyncrat", "1", "anonymous"
"2026-05-23 22:00:09", "1817758", "https://cyy.turbo88ml.top/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:21:31", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-23 22:00:08", "1817757", "cyy.turbo88ml.top", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:21:31", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-23 19:43:35", "1817704", "151.236.20.3:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:48", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-23 14:56:56", "1817663", "101.126.10.34:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:42", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2026-05-22 09:45:08", "1817238", "54.187.35.128:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:57", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-22 08:11:29", "1817159", "143.14.9.56:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:42", "90", "False", "None", "adaptix_v1.2,adaptixc2,c2,panel", "0", "Lenny_3BO"
"2026-05-21 19:45:14", "1817055", "42.121.150.29:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:46:32", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-21 19:45:07", "1817054", "34.61.52.162:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:24", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-21 06:29:28", "1816847", "217.60.241.17:418", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-05-20 19:44:32", "1816737", "221.207.101.175:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:46:11", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-20 19:43:30", "1816735", "167.17.47.118:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:08", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-20 09:45:05", "1816585", "51.15.8.6:9998", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:46:55", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-05-20 09:43:39", "1816581", "178.212.13.29:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:28", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-20 05:25:02", "1816481", "114.134.187.38:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:46", "100", "True", "None", "cobaltstrike", "1", "anonymous"
"2026-05-19 20:46:09", "1816445", "43.142.137.169:18443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:04", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-19 19:45:18", "1816431", "91.202.233.214:44123", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:23", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-19 19:44:36", "1816427", "31.57.184.154:2502", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:18", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-19 09:43:37", "1816296", "176.120.22.127:443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-09-01 05:44:23", "75", "False", "None", "drb-ra,PoshC2", "0", "abuse_ch"
"2026-05-19 09:43:19", "1816294", "142.93.165.129:3334", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:43:41", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-19 05:16:08", "1816167", "48.202.58.22:2055", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:53", "50", "False", "None", "8075,asyncrat,c2,censys", "0", "sojubear"
"2026-05-18 19:45:01", "1816106", "89.125.255.29:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:20", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-18 19:44:31", "1816100", "38.147.189.199:9001", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:46:28", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-05-18 09:43:30", "1815927", "163.181.46.56:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:44:07", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-16 19:45:35", "1815397", "45.155.69.153:43345", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-16 19:43:06", "1815392", "103.219.153.200:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-16 19:43:06", "1815393", "103.219.153.200:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-16 19:43:05", "1815391", "103.219.153.200:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:08", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-15 19:44:50", "1815137", "95.231.168.143:4483", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:47:34", "75", "False", "None", "drb-ra,NetSupport,RAT", "0", "abuse_ch"
"2026-05-15 19:44:19", "1815133", "34.69.130.10:80", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:46:24", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-15 16:00:12", "1815073", "pgo.fatherchrismas.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:21:10", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-15 16:00:12", "1815074", "https://pgo.fatherchrismas.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:21:10", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-14 12:34:22", "1812073", "87.120.107.68:7777", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:47:18", "100", "True", "None", "dcrat", "1", "anonymous"
"2026-05-14 09:51:34", "1812126", "84.46.251.62:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:16", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-11 23:00:12", "1811187", "mpd.pegasus-77.biz.id", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:20:49", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-11 23:00:12", "1811188", "https://mpd.pegasus-77.biz.id/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:20:49", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-11 22:45:16", "1811186", "117.50.184.221:10080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:47", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-11 19:45:07", "1811129", "64.199.252.59:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:47:01", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-11 19:45:01", "1811128", "51.77.54.76:6769", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:55", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-11 19:44:49", "1811126", "45.77.89.29:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:47", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-11 19:43:08", "1811118", "109.73.193.242:10140", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:23", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-11 09:45:15", "1810965", "89.42.134.220:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:22", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-11 09:44:29", "1810959", "31.57.184.154:7007", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-11 09:43:35", "1810955", "185.242.245.27:44875", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:39", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-10 19:44:31", "1810414", "31.57.184.154:443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-10 19:43:45", "1810410", "195.123.240.236:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:59", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-10 19:43:45", "1810411", "195.123.240.236:8274", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:59", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-10 19:43:39", "1810408", "189.34.188.6:5406", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:44:48", "75", "False", "None", "drb-ra,NetSupport,RAT", "0", "abuse_ch"
"2026-05-10 19:43:39", "1810409", "189.34.188.6:5407", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:44:48", "75", "False", "None", "drb-ra,NetSupport,RAT", "0", "abuse_ch"
"2026-05-10 09:44:56", "1810170", "57.158.27.132:8080", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:46:59", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-05-09 19:43:46", "1809754", "213.130.25.141:44333", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:45:29", "75", "False", "None", "drb-ra,NetSupport,RAT", "0", "abuse_ch"
"2026-05-09 19:43:24", "1809750", "168.144.89.48:8443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:10", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-08 19:43:36", "1809038", "193.42.24.165:4848", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:56", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-08 19:43:28", "1809033", "180.97.214.70:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:44:30", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-08 08:43:45", "1808650", "45.56.91.55:2005", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:44", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-05-08 08:43:13", "1808637", "178.104.186.90:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:25", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-08 08:43:05", "1808628", "113.31.118.180:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:24", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-08 08:43:04", "1808623", "104.243.248.63:1802", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-30 18:43:13", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-07 20:44:32", "1808286", "101.33.225.32:8011", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:42", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-06 20:45:39", "1807906", "45.207.192.190:30078", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:05", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-06 18:43:14", "1807842", "154.18.238.18:8848", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:51", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-05-06 08:43:54", "1807538", "31.57.184.154:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-04 20:44:43", "1806228", "154.219.115.123:61443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:53", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-04 20:44:36", "1806227", "119.29.198.193:8555", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:49", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-04 10:43:59", "1805815", "45.66.248.82:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:46:46", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-04 10:43:59", "1805816", "45.66.248.82:53802", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:46:46", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-04 08:44:13", "1805766", "82.165.79.60:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:47:14", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-05-04 08:44:12", "1805765", "82.165.79.60:1337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:47:14", "75", "False", "None", "drb-ra,Sliver", "0", "abuse_ch"
"2026-05-04 08:43:16", "1805757", "163.181.45.55:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:44:07", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-02 20:44:31", "1804968", "203.160.54.22:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:00", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-02 20:44:06", "1804965", "h67as5d5x.m6p3wca1.cc", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:38", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-05-02 18:43:44", "1804928", "38.147.173.24:8562", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:27", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-02 08:43:53", "1804732", "8.160.216.91:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:47:10", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-02 08:43:06", "1804719", "124.95.172.200:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:43:29", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-02 05:24:17", "1803956", "https://arsimonopa.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 06:00:45", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-05-02 05:24:15", "1803960", "https://lemonimonakio.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:52:35", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-05-01 18:43:53", "1803894", "59.152.212.164:443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-09-01 05:46:59", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-05-01 18:43:45", "1803881", "45.10.164.177:45123", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:36", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2026-05-01 18:43:41", "1803874", "31.57.184.154:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 18:43:24", "1803866", "195.88.191.41:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:45:04", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-01 18:43:24", "1803867", "195.88.191.41:7666", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:45:04", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-05-01 18:43:19", "1803858", "185.212.128.80:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:36", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-01 18:43:03", "1803841", "103.79.79.105:9001", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:43:10", "75", "False", "None", "drb-ra,PupyRAT,RAT", "0", "abuse_ch"
"2026-05-01 14:30:24", "1803670", "frr.ambil-disini.web.id", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:20:27", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-01 14:30:24", "1803671", "https://frr.ambil-disini.web.id/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:20:27", "100", "True", "None", "vidar", "0", "crep1x"
"2026-05-01 08:43:48", "1803513", "64.89.163.114:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:05", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 08:43:44", "1803500", "47.103.106.26:2333", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:52", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 08:43:23", "1803486", "20.2.83.254:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:45:17", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-01 07:08:49", "1803387", "203.160.54.22:8080", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:00", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-05-01 02:43:31", "1803279", "91.202.233.153:43555", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:23", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:30", "1803276", "85.155.186.2:3821", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:17", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:28", "1803262", "79.135.160.20:9999", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:10", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:25", "1803246", "46.101.77.223:3333", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:46:49", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-01 02:43:24", "1803239", "45.155.69.175:42455", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:40", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:24", "1803240", "45.56.91.55:2003", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:44", "75", "False", "None", "Covenant,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:23", "1803235", "45.125.67.171:8443", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:36", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:22", "1803232", "43.142.77.170:443", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:46:34", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:22", "1803233", "43.142.77.170:80", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:46:34", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:22", "1803234", "43.160.225.40:39001", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:34", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:20", "1803218", "222.255.100.119:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:46:11", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:20", "1803219", "23.227.203.6:42235", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:13", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:20", "1803222", "31.57.184.154:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:19", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:19", "1803211", "216.107.208.250:10444", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-09-01 05:45:31", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:19", "1803215", "219.142.15.101:4353", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:46:10", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:19", "1803216", "220.231.47.163:4353", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:46:11", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:19", "1803217", "221.130.42.19:4353", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-09-01 05:46:11", "75", "False", "None", "DanBot,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:18", "1803205", "208.249.244.20:443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-09-01 05:45:25", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:18", "1803206", "209.151.145.164:8443", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:45:25", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:17", "1803202", "202.95.17.188:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:19", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:17", "1803203", "206.189.40.107:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:45:22", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-05-01 02:43:13", "1803173", "185.212.128.81:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:36", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-01 02:43:13", "1803174", "185.212.129.23:9000", "ip:port", "botnet_cc", "elf.evilginx", "None", "Evilginx", "2026-09-01 05:44:37", "75", "False", "None", "drb-ra,Evilginx,EvilGoPhish", "0", "abuse_ch"
"2026-05-01 02:43:13", "1803178", "185.213.20.250:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:38", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:13", "1803179", "185.242.245.120:42534", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:39", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:12", "1803166", "180.184.29.135:8080", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:30", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:12", "1803167", "182.255.45.114:4848", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:31", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:11", "1803162", "178.16.52.22:8396", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:26", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:09", "1803153", "172.9.165.216:8096", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:44:20", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:08", "1803141", "154.219.115.123:60001", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:52", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:08", "1803145", "161.248.179.92:1111", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:08", "1803146", "161.248.179.92:9999", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:04", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:08", "1803147", "162.14.124.25:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:05", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:07", "1803134", "149.104.28.204:3656", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:46", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:06", "1803127", "142.93.88.220:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:41", "75", "False", "None", "drb-ra,Havoc", "0", "abuse_ch"
"2026-05-01 02:43:05", "1803124", "138.124.113.131:4211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:38", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:04", "1803114", "115.42.60.122:5440", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:25", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:04", "1803115", "117.72.101.55:9520", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:43:25", "75", "False", "None", "CHAOS,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:03", "1803109", "103.75.190.47:54630", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:10", "75", "False", "None", "DCRat,drb-ra,RAT", "0", "abuse_ch"
"2026-05-01 02:43:03", "1803110", "104.234.174.93:57712", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:12", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-05-01 02:43:03", "1803113", "115.190.247.97:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:25", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2026-04-30 18:43:45", "1802897", "82.156.219.31:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-26 19:14:08", "1800528", "http://pillow.riverbridge.site", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:20:06", "75", "False", "None", "ipocalur,Vidar", "0", "abuse_ch"
"2026-04-26 18:36:03", "1800513", "91.92.242.236:80", "ip:port", "botnet_cc", "win.amadey", "None", "Amadey", "2026-09-01 05:53:37", "50", "False", "https://tracker.viriback.com/index.php?q=91.92.242.236", "Amadey,ViriBack", "0", "abuse_ch"
"2026-04-26 18:19:19", "1800509", "pillow.riverbridge.site", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:20:06", "100", "False", "https://bazaar.abuse.ch/sample/2199baf11d50dd10555f8aec122178e03b62570fc0d4614a8e928978dc547154/", "ipocalur,Vidar", "0", "abuse_ch"
"2026-04-26 18:11:00", "1800411", "http://91.92.242.236/oPvjr94jfe/index.php", "url", "botnet_cc", "win.amadey", "None", "Amadey", "2026-09-01 06:00:50", "100", "False", "None", "54e64e,amadey,c2", "0", "Bitsight"
"2026-04-24 15:18:06", "1797248", "psy.flise-mesteren.dk", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:19:43", "75", "False", "None", "r88vry,Vidar", "0", "abuse_ch"
"2026-04-24 15:18:01", "1797247", "https://psy.flise-mesteren.dk/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:19:43", "75", "False", "None", "r88vry,Vidar", "0", "abuse_ch"
"2026-04-23 04:45:34", "1796426", "http://196.251.107.248/kont2rt/index.php", "url", "botnet_cc", "win.amadey", "None", "Amadey", "2026-09-01 05:52:20", "100", "False", "None", "Amadey", "0", "abuse_ch"
"2026-04-22 11:17:13", "1796068", "wrath.bottlevacuum.shop", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:19:54", "75", "False", "None", "opiusra,Vidar", "0", "abuse_ch"
"2026-04-22 11:17:09", "1796067", "http://wrath.bottlevacuum.shop", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:19:54", "75", "False", "None", "opiusra,Vidar", "0", "abuse_ch"
"2026-04-19 18:25:29", "1794638", "http://213.5.130.87", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:12", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-04-17 18:15:06", "1793645", "http://213.5.130.147", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:12", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-04-17 17:13:27", "1793617", "ask.shurimaster.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:18:59", "75", "False", "None", "a10fsw,Vidar", "0", "abuse_ch"
"2026-04-17 17:13:25", "1793616", "https://ask.shurimaster.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:18:59", "75", "False", "None", "a10fsw,Vidar", "0", "abuse_ch"
"2026-04-16 16:13:58", "1792850", "pir.rapidphonebuyer.co.uk", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:16:42", "75", "False", "None", "d0b0p,Vidar", "0", "abuse_ch"
"2026-04-16 16:13:56", "1792849", "https://pir.rapidphonebuyer.co.uk/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:16:42", "75", "False", "None", "d0b0p,Vidar", "0", "abuse_ch"
"2026-04-16 11:16:20", "1792719", "gusto.brothbridge.space", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:19:22", "75", "False", "None", "odiznrio,Vidar", "0", "abuse_ch"
"2026-04-16 11:16:17", "1792718", "http://gusto.brothbridge.space", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:19:22", "75", "False", "None", "odiznrio,Vidar", "0", "abuse_ch"
"2026-04-16 10:56:58", "1792707", "43.167.177.224:7778", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:04", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-16 02:43:39", "1792532", "bxx2rghe05kng.cfc-execute.bj.baidubce.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:36", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-15 11:43:19", "1791747", "http://107.189.24.190:80", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:13:57", "75", "False", "None", "gr00n1,Vidar", "0", "abuse_ch"
"2026-04-15 11:39:45", "1791738", "139.224.23.63:8866", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:52", "100", "False", "", "Agentemis,BEACON,Cobalt Strike,CobaltStrike,cobeacon", "0", "whoamix302"
"2026-04-15 08:15:17", "1791688", "venom.summertunnel.shop", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:19:11", "75", "False", "None", "ozpifus,Vidar", "0", "abuse_ch"
"2026-04-15 08:15:13", "1791687", "http://venom.summertunnel.shop", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:19:11", "75", "False", "None", "ozpifus,Vidar", "0", "abuse_ch"
"2026-04-14 14:11:23", "1790171", "dzodu.sparklingideas.space", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:18:28", "75", "False", "None", "odzdkzo,Vidar", "0", "abuse_ch"
"2026-04-14 14:11:18", "1790170", "http://dzodu.sparklingideas.space", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:18:28", "75", "False", "None", "odzdkzo,Vidar", "0", "abuse_ch"
"2026-04-14 14:10:11", "1790169", "http://kdije.weirdthings.site", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:15:38", "75", "False", "None", "okfueh,Vidar", "0", "abuse_ch"
"2026-04-14 05:40:17", "1785513", "46.151.182.19:416", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:25", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-04-13 07:47:21", "1785064", "pre.hifive.net.au", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:18:07", "100", "False", "", "Vidar", "0", "crep1x"
"2026-04-13 07:46:34", "1785049", "https://pre.hifive.net.au/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:18:07", "100", "False", "", "Vidar", "0", "crep1x"
"2026-04-12 06:34:43", "1784558", "47.104.248.7:8884", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:05", "100", "False", "", "Agentemis,BEACON,C2,Cobalt Strike,CobaltStrike,cobeacon", "0", "whoamix302"
"2026-04-09 14:48:47", "1783375", "39.102.125.11:4435", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-07 23:06:40", "1782524", "82.165.179.9:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:14", "75", "False", "https://bazaar.abuse.ch/sample/4c3b97c157d08ee298edb5d30fa86a3b90b04fedfbe517e7e0307b6013eacbf0/", "asyncrat", "0", "abuse_ch"
"2026-04-07 23:00:12", "1782522", "82.165.179.9:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:14", "100", "False", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2026-04-07 07:46:05", "1782182", "dzdi.serendipityhub.space", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:17:56", "100", "False", "", "Vidar", "0", "crep1x"
"2026-04-07 07:43:55", "1782152", "http://dzdi.serendipityhub.space/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:17:56", "100", "False", "", "Vidar", "0", "crep1x"
"2026-04-07 07:17:26", "1782124", "1.15.76.39:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:42", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-04-06 18:49:49", "1781907", "43.139.108.161:8192", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:04", "100", "False", "", "Agentemis,BEACON,C2,Cobalt Strike,CobaltStrike,cobeacon", "0", "whoamix302"
"2026-04-06 09:39:41", "1781669", "130.12.182.175:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-04-06 09:39:41", "1781670", "46.151.182.19:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:25", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-04-06 09:39:41", "1781672", "31.57.216.27:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:25", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-04-06 09:39:41", "1781673", "31.57.216.28:419", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:25", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-04-04 20:44:05", "1781225", "111.230.217.36:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:45", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-04 20:44:01", "1781224", "109.244.130.113:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:45", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-04-03 16:13:22", "1780720", "hor.kaitorinihon.jp", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:17:04", "100", "False", "", "Vidar", "0", "crep1x"
"2026-04-03 16:12:59", "1780716", "https://hor.kaitorinihon.jp/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:17:04", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-31 05:38:40", "1779401", "31.57.216.28:418", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:25", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-31 05:38:39", "1779396", "130.12.182.175:418", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-31 05:38:39", "1779397", "46.151.182.19:418", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:25", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-31 05:38:39", "1779399", "31.57.216.27:418", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:25", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-27 21:24:29", "1777607", "pn2.skfilmsint.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:15:49", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:29", "1777609", "gre.syslicense.net", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:15:17", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:29", "1777611", "fefeo.iknowthat.space", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:16:10", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:17", "1777601", "https://pn2.skfilmsint.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:15:49", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:17", "1777603", "https://gre.syslicense.net/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:15:17", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-27 21:24:17", "1777605", "http://fefeo.iknowthat.space/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:16:10", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-24 12:01:13", "1774903", "37.72.172.58:7707", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:26", "100", "False", "https://search.censys.io/hosts/37.72.172.58", "AS29802,AsyncRAT,C2,censys,HVC-AS,RAT", "0", "DonPasci"
"2026-03-24 12:00:35", "1774898", "47.92.208.27:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:08", "100", "False", "https://search.censys.io/hosts/47.92.208.27", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2026-03-23 21:06:09", "1774595", "154.83.12.132:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:54", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-03-23 13:42:00", "1774355", "kdije.weirdthings.site", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:15:39", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-23 08:02:27", "1774216", "msi.swadeshcomputer.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:14:39", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-23 08:01:55", "1774200", "https://msi.swadeshcomputer.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:14:39", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-23 04:01:28", "1774088", "23.227.199.67:42215", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:13", "100", "False", "https://search.censys.io/hosts/23.227.199.67", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2026-03-22 18:02:20", "1773536", "156.239.252.191:448", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:55", "100", "False", "", "BEACON,C2,CobaltStrike,Shodan", "0", "whoamix302"
"2026-03-22 12:01:29", "1773754", "138.226.236.52:13212", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:39", "100", "False", "https://search.censys.io/hosts/138.226.236.52", "AdaptixC2,AS205775,C2,censys,NEONCORENETWORKS", "0", "DonPasci"
"2026-03-21 10:09:16", "1773196", "31.57.216.27:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-21 10:09:16", "1773198", "31.57.216.28:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:25", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-21 10:09:16", "1773199", "46.151.182.19:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:25", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-21 10:09:16", "1773200", "130.12.182.175:417", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-20 13:59:59", "1772372", "pr2.codetohaven.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:14:28", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-20 13:59:49", "1772370", "https://pr2.codetohaven.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:14:28", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-20 04:19:09", "1771846", "51.222.87.16:433", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:08", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-03-20 04:08:17", "1771843", "cdn.sys-update.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:36", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-03-20 00:02:12", "1771791", "8.136.13.87:7001", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:47:10", "100", "False", "https://search.censys.io/hosts/8.136.13.87", "AdaptixC2,ALIBABA-CN-NET,AS37963,C2,censys", "0", "DonPasci"
"2026-03-19 20:02:47", "1771713", "167.17.47.121:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:09", "100", "False", "https://search.censys.io/hosts/167.17.47.121", "AdaptixC2,AS43180,C2,censys,TRUNKNETWORKS-AS", "0", "DonPasci"
"2026-03-19 13:11:25", "1771456", "dhzuadd.hellothere.sbs", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:15:06", "75", "False", "None", "drkfiz,Vidar", "0", "abuse_ch"
"2026-03-19 13:11:20", "1771455", "https://dhzuadd.hellothere.sbs", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:15:06", "75", "False", "None", "drkfiz,Vidar", "0", "abuse_ch"
"2026-03-16 20:01:10", "1768644", "35.179.229.71:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:24", "100", "False", "https://search.censys.io/hosts/35.179.229.71", "AMAZON-02,AS16509,C2,censys,Havoc", "0", "DonPasci"
"2026-03-16 20:01:02", "1768638", "64.227.105.70:8080", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:02", "100", "False", "https://search.censys.io/hosts/64.227.105.70", "AS14061,C2,censys,DIGITALOCEAN-ASN,Mythic", "0", "DonPasci"
"2026-03-16 12:00:11", "1767990", "43.155.169.245:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:04", "100", "False", "https://search.censys.io/hosts/43.155.169.245", "AS132203,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP-CN", "0", "DonPasci"
"2026-03-15 16:00:41", "1767077", "185.242.3.83:5505", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:39", "100", "False", "https://search.censys.io/hosts/185.242.3.83", "AS60223,AsyncRAT,C2,censys,NETIFACE-AS,RAT", "0", "DonPasci"
"2026-03-15 04:01:14", "1766764", "202.191.67.71:50003", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:19", "100", "False", "https://search.censys.io/hosts/202.191.67.71", "AdaptixC2,AS131262,C2,censys,KELNET-AS-AP", "0", "DonPasci"
"2026-03-13 15:06:16", "1765444", "pan.paihost.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:13:46", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-13 15:05:58", "1765442", "https://pan.paihost.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:13:46", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-13 04:01:11", "1764276", "46.151.182.205:6606", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:49", "100", "False", "https://search.censys.io/hosts/46.151.182.205", "AS205759,AsyncRAT,C2,censys,GHOSTYNETWORKS,RAT", "0", "DonPasci"
"2026-03-11 23:00:21", "1763737", "130.12.182.209:9456", "ip:port", "botnet_cc", "win.quasar_rat", "CinaRAT,QuasarRAT,Yggdrasil", "Quasar RAT", "2026-09-01 05:43:33", "100", "False", "https://tria.ge/260311-zw3w6adw5k", "quasar", "0", "dyingbreeds_"
"2026-03-11 07:03:38", "1763170", "60.247.206.23:7443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:09", "100", "False", "None", "CobaltStrike,cs-watermark-391144938", "0", "abuse_ch"
"2026-03-11 04:00:36", "1763116", "118.25.10.65:65010", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:48", "100", "False", "https://search.censys.io/hosts/118.25.10.65", "AS45090,C2,censys,CobaltStrike,cs-watermark-666666666,TENCENT-NET-AP", "0", "DonPasci"
"2026-03-10 18:04:42", "1762899", "https://nonobody123.com", "url", "botnet_cc", "win.stealc", "None", "Stealc", "2026-09-01 05:04:04", "100", "False", "https://tria.ge/260310-t5ja8aew7y", "C2,stealc,stealer,triage", "0", "DonPasci"
"2026-03-10 00:01:13", "1762492", "107.172.3.15:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:18", "100", "False", "https://search.censys.io/hosts/107.172.3.15", "AS-COLOCROSSING,AS36352,C2,censys,Mythic", "0", "DonPasci"
"2026-03-09 12:52:15", "1762251", "130.12.182.175:416", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:23", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-09 12:52:14", "1762247", "31.57.216.28:416", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:25", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-09 12:52:14", "1762248", "31.57.216.27:416", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:24", "75", "False", "", "Tofsee", "0", "abuse_ch"
"2026-03-09 09:29:37", "1762153", "ooe.myserver.com.bd", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:13:35", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-09 09:29:17", "1762131", "https://ooe.myserver.com.bd/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:13:35", "100", "False", "", "Vidar", "0", "crep1x"
"2026-03-06 00:01:40", "1759331", "194.36.178.53:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:57", "100", "False", "https://search.censys.io/hosts/194.36.178.53", "AdaptixC2,AS200740,C2,censys,FIRST-SERVER-EU-AS", "0", "DonPasci"
"2026-03-05 06:17:58", "1758456", "http://213.5.130.197", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:11", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:57", "1758457", "http://213.5.130.154", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:11", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:56", "1758458", "http://213.5.130.200", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:11", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:55", "1758459", "http://213.5.130.131", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:12", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:54", "1758460", "http://213.5.130.179", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:14", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-05 06:17:54", "1758461", "http://213.5.130.189", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:13", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-03-04 04:01:12", "1758006", "70.153.18.45:10002", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:07", "100", "False", "https://search.censys.io/hosts/70.153.18.45", "AS8075,censys,EvilGoPhish,MICROSOFT-CORP-MSN-AS-BLOCK,panel,Phishing", "0", "DonPasci"
"2026-03-02 15:30:09", "1756955", "104.243.248.63:1801", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:13", "100", "False", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2026-02-25 20:02:24", "1754813", "47.120.20.86:8888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:06", "100", "False", "https://search.censys.io/hosts/47.120.20.86", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2026-02-25 19:01:08", "1754671", "115.190.250.28:5521", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:46", "100", "False", "https://search.censys.io/hosts/115.190.250.28", "AS137718,C2,censys", "0", "dyingbreeds_"
"2026-02-24 23:00:43", "1754344", "23.88.110.42:8443", "ip:port", "botnet_cc", "win.poshc2", "None", "PoshC2", "2026-09-01 05:46:13", "100", "False", "https://search.censys.io/hosts/23.88.110.42", "AS24940,C2,censys,HETZNER-AS", "0", "dyingbreeds_"
"2026-02-24 12:02:30", "1754178", "169.40.135.36:8888", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:11", "100", "False", "https://search.censys.io/hosts/169.40.135.36", "AdaptixC2,AS209274,C2,censys,KRAKEN-NETWORK-ISP", "0", "DonPasci"
"2026-02-23 23:00:09", "1753847", "49.232.135.25:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:46:53", "100", "False", "https://search.censys.io/hosts/49.232.135.25", "AS45090,C2,censys", "0", "dyingbreeds_"
"2026-02-23 23:00:07", "1753846", "64.89.161.183:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:09", "100", "False", "https://search.censys.io/hosts/64.89.161.183", "AS205759,C2,censys,GHOSTYNETWORKS", "0", "dyingbreeds_"
"2026-02-20 11:00:06", "1751104", "107.172.217.220:12096", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:44", "100", "False", "https://search.censys.io/hosts/107.172.217.220", "AS36352,C2,censys", "0", "dyingbreeds_"
"2026-02-20 08:47:26", "1751083", "185.180.198.3:2025", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:34", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-02-20 08:47:26", "1751084", "185.180.198.3:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:34", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-02-20 08:46:17", "1751080", "163.181.208.79:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:44:06", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-02-16 09:05:30", "1749217", "111.228.4.54:4455", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:45", "50", "False", "https://www.shodan.io/host/111.228.4.54#4455", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2026-02-14 15:11:17", "1748256", "101.200.193.211:8086", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:42", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2026-02-13 14:01:35", "1747540", "gor.emiraride.com", "domain", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:13:03", "100", "False", "", "Vidar", "0", "crep1x"
"2026-02-13 14:01:02", "1747538", "https://gor.emiraride.com/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:13:03", "100", "False", "", "Vidar", "0", "crep1x"
"2026-02-13 06:59:13", "1747121", "117.72.191.140:8028", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:48", "50", "False", "https://www.shodan.io/host/117.72.191.140#8028", "c2,cobaltstrike,cs-watermark-391144938,shodan", "0", "juroots"
"2026-02-12 16:01:27", "1746911", "175.192.75.105:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:44:22", "100", "False", "https://search.censys.io/hosts/175.192.75.105", "AS4766,C2,censys,KIXS-AS-KR,Netsupport,RAT", "0", "DonPasci"
"2026-02-09 11:00:33", "1743594", "15.204.14.143:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:47", "100", "False", "https://search.censys.io/hosts/15.204.14.143", "AS16276,C2,censys,OVH", "0", "dyingbreeds_"
"2026-02-08 15:42:41", "1743395", "1.15.25.148:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:35", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:40", "1743391", "106.52.208.143:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:40", "1743392", "106.13.137.229:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:40", "1743393", "101.43.2.116:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:40", "1743394", "101.133.148.66:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:39", "1743388", "115.190.178.249:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:39", "1743389", "114.132.150.96:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:39", "1743390", "110.40.176.194:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:37", "1743386", "120.48.50.33:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:37", "1743387", "117.72.214.50:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:36", "1743381", "124.223.199.39:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:36", "1743382", "124.221.32.87:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:36", "1743383", "124.220.48.168:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:36", "1743384", "124.220.164.98:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:36", "1743385", "121.41.167.80:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:35", "1743378", "152.136.139.105:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:35", "1743379", "129.204.103.151:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:35", "1743380", "124.223.47.219:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:34", "1743374", "172.245.215.43:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:34", "1743375", "165.154.125.212:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:34", "1743376", "156.233.233.134:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:34", "1743377", "154.201.91.224:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:33", "1743370", "38.190.224.63:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:33", "1743371", "222.255.214.236:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:33", "1743372", "192.252.187.60:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:33", "1743373", "178.16.52.194:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:32", "1743365", "43.139.146.100:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:32", "1743366", "43.133.41.106:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:32", "1743367", "42.192.49.72:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:32", "1743368", "39.107.85.83:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:32", "1743369", "39.106.144.162:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:31", "1743363", "47.100.168.4:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:31", "1743364", "43.139.169.60:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:30", "1743362", "47.111.146.110:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:29", "1743358", "47.243.175.24:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:29", "1743359", "47.239.188.48:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:29", "1743360", "47.122.30.177:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:29", "1743361", "47.122.1.243:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:28", "1743356", "61.166.154.109:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:28", "1743357", "49.235.177.231:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:27", "1743353", "81.70.255.195:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:27", "1743354", "81.69.98.230:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:27", "1743355", "8.210.78.137:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:26", "1743351", "83.229.126.65:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:26", "1743352", "81.71.159.99:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:15", "1743349", "83.229.123.61:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:15", "1743350", "83.229.126.183:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:14", "1743348", "8.153.205.30:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:13", "1743347", "8.137.149.67:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:12", "1743344", "47.93.28.103:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:12", "1743345", "60.205.139.210:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:12", "1743346", "lcowpowerlite.italynorth.cloudapp.azure.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:11", "1743340", "47.109.198.8:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:11", "1743341", "47.120.70.161:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:11", "1743342", "47.121.137.8:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:11", "1743343", "47.121.29.60:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:10", "1743336", "45.115.236.152:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:10", "1743338", "47.107.136.106:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:10", "1743339", "47.109.145.121:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:09", "1743333", "192.140.176.79:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:09", "1743334", "36.140.162.173:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:09", "1743335", "39.105.165.37:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:08", "1743330", "152.32.251.78:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:08", "1743331", "154.201.74.112:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:08", "1743332", "179.43.186.214:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:07", "1743326", "139.196.41.201:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:17", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:07", "1743327", "139.224.16.185:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:07", "1743328", "14.103.175.50:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:07", "1743329", "150.187.25.242:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:06", "1743322", "120.48.168.57:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:06", "1743323", "121.40.18.128:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:06", "1743324", "122.51.93.94:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:06", "1743325", "134.122.140.185:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:05", "1743320", "117.72.102.110:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:05", "1743321", "117.72.242.9:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:04", "1743318", "113.44.67.52:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:04", "1743319", "115.190.161.178:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:03", "1743314", "106.38.201.95:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:03", "1743315", "106.75.162.108:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:03", "1743316", "106.75.215.96:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:03", "1743317", "106.75.224.31:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:09", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:02", "1743312", "106.12.219.245:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 15:42:02", "1743313", "106.13.29.104:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2026-02-08 04:00:55", "1743209", "15.204.95.228:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:47", "100", "False", "https://search.censys.io/hosts/15.204.95.228", "AS16276,C2,censys,Havoc,OVH", "0", "DonPasci"
"2026-02-07 03:00:18", "1742595", "174.138.86.141:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:22", "100", "False", "https://search.censys.io/hosts/174.138.86.141", "AS14061,C2,censys,Mythic", "0", "dyingbreeds_"
"2026-02-05 13:01:59", "1741587", "57.158.27.132:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:46:59", "50", "False", "https://www.shodan.io/host/57.158.27.132#31337", "c2,shodan,sliver", "0", "juroots"
"2026-02-05 06:34:38", "1741376", "104.243.248.63:85", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:14", "75", "False", "", "AS3223,asyncrat,c2,fofa,RAT,VOXILITY", "0", "oxygen28"
"2026-02-05 06:34:37", "1741375", "37.72.172.58:6066", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:26", "75", "False", "", "AS29802,asyncrat,c2,fofa,RAT", "0", "oxygen28"
"2026-02-04 15:54:23", "1741222", "3.121.234.29:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:16", "100", "False", "https://search.censys.io/hosts/3.121.234.29", "AS16509,C2,censys,Mythic", "0", "dyingbreeds_"
"2026-02-04 11:00:54", "1741132", "172.174.234.34:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:14", "100", "False", "https://search.censys.io/hosts/172.174.234.34", "AS8075,C2,censys,Mythic", "0", "dyingbreeds_"
"2026-02-04 00:02:27", "1740953", "188.166.244.201:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:44:47", "100", "False", "https://search.censys.io/hosts/188.166.244.201", "AdaptixC2,AS14061,C2,censys,DIGITALOCEAN-ASN", "0", "DonPasci"
"2026-02-02 18:00:52", "1740000", "146.70.49.42:7080", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:45", "100", "False", "https://tria.ge/260202-r1f9ysbx8f", "AS9009,asyncrat,C2,rat,triage", "0", "DonPasci"
"2026-01-31 04:00:10", "1739277", "101.37.236.20:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:42", "100", "False", "https://search.censys.io/hosts/101.37.236.20", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-100000", "0", "DonPasci"
"2026-01-30 18:54:11", "1739209", "47.115.193.52:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:46:52", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2026-01-30 16:04:48", "1739163", "107.150.105.91:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:10", "100", "False", "https://search.censys.io/hosts/107.150.105.91", "AS135377,C2,censys,CobaltStrike,cs-watermark-666666666,UCLOUD-HK-AS-AP", "0", "DonPasci"
"2026-01-30 08:04:49", "1739009", "111.92.243.40:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:11", "100", "False", "https://search.censys.io/hosts/111.92.243.40", "AS401696,C2,censys,CobaltStrike,COGNETCLOUD,cs-watermark-666666666", "0", "DonPasci"
"2026-01-30 02:55:25", "1738921", "45.82.85.50:13063", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:46:47", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2026-01-29 18:55:17", "1738855", "209.145.63.3:33330", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:45:25", "75", "False", "None", "AsyncRAT,drb-ra,RAT", "0", "abuse_ch"
"2026-01-26 23:00:09", "1737790", "47.120.46.230:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:25", "100", "False", "https://search.censys.io/hosts/47.120.46.230", "AS37963,C2,censys", "0", "dyingbreeds_"
"2026-01-26 13:57:13", "1737664", "https://fluraresto.me/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:46:14", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-01-26 13:57:13", "1737665", "https://mastralakkot.live/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:54:18", "100", "False", "None", "c2,Latrodectus", "0", "Bitsight"
"2026-01-23 08:45:57", "1736034", "158.158.8.193:443", "ip:port", "botnet_cc", "win.bianlian", "None", "BianLian", "2026-09-01 05:43:59", "75", "False", "None", "Bianlian,drb-ra", "0", "abuse_ch"
"2026-01-23 08:04:06", "1736014", "47.120.32.72:8075", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:06", "100", "False", "https://search.censys.io/hosts/47.120.32.72", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2026-01-23 00:04:39", "1735921", "104.243.248.63:103", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:13", "100", "False", "https://search.censys.io/hosts/104.243.248.63", "AS3223,AsyncRAT,C2,censys,RAT,VOXILITY", "0", "DonPasci"
"2026-01-22 12:04:41", "1735523", "104.243.248.63:81", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:14", "100", "False", "https://search.censys.io/hosts/104.243.248.63", "AS3223,AsyncRAT,C2,censys,RAT,VOXILITY", "0", "DonPasci"
"2026-01-22 12:04:28", "1735522", "176.31.71.168:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:44:23", "100", "False", "https://search.censys.io/hosts/176.31.71.168", "AS16276,C2,censys,OVH,Pupy,RAT", "0", "DonPasci"
"2026-01-22 04:04:19", "1735412", "34.64.98.201:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:46:24", "100", "False", "https://search.censys.io/hosts/34.64.98.201", "AS396982,C2,censys,GOOGLE-CLOUD-PLATFORM,Pupy,RAT", "0", "DonPasci"
"2026-01-22 00:04:16", "1735387", "34.64.98.201:8443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:46:24", "100", "False", "https://search.censys.io/hosts/34.64.98.201", "AS396982,C2,censys,GOOGLE-CLOUD-PLATFORM,Pupy,RAT", "0", "DonPasci"
"2026-01-21 20:04:36", "1735342", "54.145.56.188:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:56", "100", "False", "https://search.censys.io/hosts/54.145.56.188", "AMAZON-AES,AS14618,C2,censys,Mythic", "0", "DonPasci"
"2026-01-20 20:05:01", "1734935", "37.72.168.189:42334", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:26", "100", "False", "https://search.censys.io/hosts/37.72.168.189", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2026-01-20 16:04:24", "1734893", "136.24.173.249:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:38", "100", "False", "https://search.censys.io/hosts/136.24.173.249", "AS19165,C2,censys,Mythic,WEBPASS", "0", "DonPasci"
"2026-01-20 08:04:17", "1734787", "104.243.248.63:83", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:14", "100", "False", "https://search.censys.io/hosts/104.243.248.63", "AS3223,AsyncRAT,C2,censys,RAT,VOXILITY", "0", "DonPasci"
"2026-01-20 08:04:17", "1734788", "104.243.248.63:102", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:43:13", "100", "False", "https://search.censys.io/hosts/104.243.248.63", "AS3223,AsyncRAT,C2,censys,RAT,VOXILITY", "0", "DonPasci"
"2026-01-18 00:03:59", "1734081", "103.79.79.105:8444", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:43:10", "100", "False", "https://search.censys.io/hosts/103.79.79.105", "AS199959,C2,censys,CROWNCLOUD,Pupy,RAT", "0", "DonPasci"
"2026-01-16 14:56:41", "1733584", "101.37.236.20:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:42", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-01-16 14:56:19", "1733583", "test.dnslogger.site", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2026-01-13 08:52:00", "1731532", "54.38.94.225:8881", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:46:57", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2026-01-11 11:00:48", "1700820", "102.117.170.125:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:04", "100", "False", "https://search.censys.io/hosts/102.117.170.125", "AS23889,C2,censys,MauritiusTelecom,Mythic", "0", "dyingbreeds_"
"2026-01-08 23:00:12", "1693365", "117.72.178.246:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:14", "100", "False", "https://search.censys.io/hosts/117.72.178.246", "AS141679,C2,censys", "0", "dyingbreeds_"
"2026-01-08 22:50:04", "1693357", "172.94.18.103:191", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:20", "100", "False", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2026-01-07 20:02:36", "1692743", "38.49.57.15:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:22", "100", "False", "https://search.censys.io/hosts/38.49.57.15", "AS8796,C2,censys,CobaltStrike,cs-watermark-666666666,FD-298-8796", "0", "DonPasci"
"2026-01-06 08:02:23", "1691952", "115.190.233.79:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:13", "100", "False", "https://search.censys.io/hosts/115.190.233.79", "AS137718,C2,censys,CobaltStrike,cs-watermark-987654321,VOLCANO-ENGINE", "0", "DonPasci"
"2026-01-05 13:21:42", "1691605", "http://213.5.130.122", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:12", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-01-05 13:21:41", "1691603", "http://213.5.130.151", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:11", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-01-05 13:21:40", "1691604", "http://213.5.130.124", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:13", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-01-05 13:21:40", "1691606", "http://213.5.130.187", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:13", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2026-01-02 04:03:37", "1689798", "157.245.54.75:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-08-30 18:43:50", "100", "False", "https://search.censys.io/hosts/157.245.54.75", "AS14061,C2,censys,DIGITALOCEAN-ASN,Pupy,RAT", "0", "DonPasci"
"2026-01-01 07:01:03", "1689290", "182.92.117.223:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:57", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2025-12-30 16:21:16", "1688739", "101.34.205.214:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:15", "1688738", "103.171.35.66:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:51", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:14", "1688737", "107.149.192.54:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:51", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:13", "1688734", "124.222.218.20:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:49", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:13", "1688735", "124.221.255.78:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:49", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:13", "1688736", "123.56.78.220:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:49", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:12", "1688732", "152.32.202.240:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:48", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:12", "1688733", "150.158.119.242:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:48", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:11", "1688730", "165.154.244.73:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:47", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:11", "1688731", "156.225.20.77:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:47", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:10", "1688729", "182.92.239.94:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:46", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:08", "1688726", "39.105.160.175:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:43", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:08", "1688727", "38.38.250.99:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:44", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:08", "1688728", "211.184.175.246:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:44", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:07", "1688725", "45.58.56.34:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:40", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:05", "1688723", "8.130.80.145:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:36", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:05", "1688724", "8.130.26.216:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:36", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:03", "1688721", "94.74.164.177:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:21:03", "1688722", "87.251.67.85:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2025-12-30 16:04:05", "1688694", "16.171.13.191:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:03", "100", "False", "https://search.censys.io/hosts/16.171.13.191", "AMAZON-02,AS16509,C2,censys,Covenant", "0", "DonPasci"
"2025-12-29 08:46:57", "1687948", "222.186.17.103:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:46:11", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-12-28 20:01:34", "1687817", "118.89.88.183:56781", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:49", "100", "False", "https://search.censys.io/hosts/118.89.88.183", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2025-12-28 18:44:20", "1687807", "163.181.213.114:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:44:07", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-12-28 07:41:32", "1687327", "37.72.172.58:8088", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:26", "100", "False", "https://search.censys.io/hosts/37.72.172.58", "AS29802,C2,censys,HVC-AS,RAT", "0", "dyingbreeds_"
"2025-12-27 16:02:33", "1687170", "37.72.172.58:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:26", "100", "False", "https://search.censys.io/hosts/37.72.172.58", "AS29802,AsyncRAT,C2,censys,HVC-AS,RAT", "0", "DonPasci"
"2025-12-25 18:44:15", "1686405", "155.102.62.60:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:43:54", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-12-25 07:52:31", "1686010", "139.196.223.82:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:17", "100", "False", "https://search.censys.io/hosts/139.196.223.82", "AS37963,C2,censys", "0", "dyingbreeds_"
"2025-12-24 12:48:51", "1685856", "helpremote.cc", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:33", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-12-23 22:45:05", "1685596", "172.94.18.103:190", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:20", "100", "False", "None", "AsyncRAT,RAT", "0", "abuse_ch"
"2025-12-23 20:01:06", "1685256", "115.190.160.206:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:12", "100", "False", "https://search.censys.io/hosts/115.190.160.206", "AS137718,C2,censys,CobaltStrike,cs-watermark-987654321,VOLCANO-ENGINE", "0", "DonPasci"
"2025-12-23 03:00:34", "1684938", "8.159.146.72:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:32", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-12-23 02:54:49", "1684936", "missmovie.lol", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:38", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-12-22 20:01:00", "1684826", "179.43.186.214:7889", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:56", "100", "False", "https://search.censys.io/hosts/179.43.186.214", "AS51852,C2,censys,CobaltStrike,cs-watermark-987654321,PLI-AS", "0", "DonPasci"
"2025-12-18 18:44:36", "1682522", "155.102.133.61:4506", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:43:54", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-12-16 06:49:03", "1680395", "119.45.160.160:8889", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:49", "50", "False", "https://www.shodan.io/host/119.45.160.160#8889", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2025-12-15 20:00:23", "1680210", "39.105.200.188:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:03", "100", "False", "https://search.censys.io/hosts/39.105.200.188", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-12-12 02:50:28", "1676363", "67.219.102.244:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-12-09 20:01:49", "1673817", "106.14.16.18:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:44", "100", "False", "https://search.censys.io/hosts/106.14.16.18", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-12-08 14:58:40", "1670887", "20.157.116.151:8000", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:45:17", "100", "False", "https://search.censys.io/hosts/20.157.116.151", "AdaptixC2,AS8069,C2,censys,MICROSOFT-CORP-MSN-AS-BLOCK", "0", "DonPasci"
"2025-12-07 16:01:37", "1668967", "180.76.141.175:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:21", "100", "False", "https://search.censys.io/hosts/180.76.141.175", "AS38365,BAIDU,C2,censys,CobaltStrike,cs-watermark-391144938", "0", "DonPasci"
"2025-12-04 00:03:19", "1667182", "216.238.89.173:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:05", "100", "False", "https://search.censys.io/hosts/216.238.89.173", "AdaptixC2,AS-VULTR,AS20473,C2,censys", "0", "DonPasci"
"2025-12-03 20:01:15", "1667105", "115.190.161.178:1234", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:46", "100", "False", "https://search.censys.io/hosts/115.190.161.178", "AS137718,C2,censys,CobaltStrike,cs-watermark-987654321,VOLCANO-ENGINE", "0", "DonPasci"
"2025-12-02 12:51:03", "1666137", "8.137.149.67:8091", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:10", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-12-01 14:57:52", "1665523", "http://213.5.130.104", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:10", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:52", "1665524", "http://213.5.130.180", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:12", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:50", "1665525", "http://213.5.130.106", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:13", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:49", "1665527", "http://213.5.130.152", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:11", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:49", "1665528", "http://213.5.130.107", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:11", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:49", "1665529", "http://213.5.130.153", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:10", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:48", "1665530", "http://213.5.130.100", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:11", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-12-01 14:57:48", "1665531", "http://213.5.130.182", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:12", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-29 12:00:52", "1663012", "47.236.56.15:4445", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:07", "100", "False", "https://search.censys.io/hosts/47.236.56.15", "ALIBABA-CN-NET,AS45102,C2,censys,CobaltStrike,cs-watermark-0", "0", "DonPasci"
"2025-11-26 12:50:54", "1650889", "job.itechno.cc", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:38", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-11-25 10:49:55", "1650040", "156.245.248.173:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:29", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-11-25 06:01:37", "1649775", "http://213.5.130.84", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:13", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-25 06:01:36", "1649776", "http://213.5.130.96", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:13", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-25 06:01:36", "1649777", "http://213.5.130.98", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:11", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-25 06:01:35", "1649778", "http://213.5.130.160", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:14", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-21 00:02:05", "1647575", "123.58.64.57:34567", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:51", "100", "False", "https://search.censys.io/hosts/123.58.64.57", "AS17623,C2,censys,CNCGROUP-SZ,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-11-17 23:00:18", "1645785", "47.236.149.142:46832", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:07", "100", "False", "https://search.censys.io/hosts/47.236.149.142", "AS45102,C2,censys", "0", "dyingbreeds_"
"2025-11-17 13:58:09", "1645519", "http://185.132.133.127", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:14", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-17 13:58:09", "1645520", "http://185.132.133.140", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:13", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-11-15 08:48:18", "1641582", "62.4.0.66:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:00", "75", "False", "None", "drb-ra,Mythic", "0", "abuse_ch"
"2025-11-13 04:54:17", "1639703", "62.60.226.183:483", "ip:port", "botnet_cc", "win.tofsee", "Gheg", "Tofsee", "2026-09-01 05:41:54", "100", "False", "None", "c2,Tofsee", "0", "Bitsight"
"2025-11-13 04:54:12", "1639719", "45.76.190.68:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:47", "100", "False", "https://search.censys.io/hosts/45.76.190.68", "AS-VULTR,AS20473,C2,censys,Mythic", "0", "dyingbreeds_"
"2025-11-12 16:02:00", "1639434", "62.4.0.66:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:00", "100", "False", "https://search.censys.io/hosts/62.4.0.66", "AS12876,C2,censys,Mythic,Online", "0", "DonPasci"
"2025-11-12 04:02:31", "1638854", "54.165.230.182:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:57", "100", "False", "https://search.censys.io/hosts/54.165.230.182", "AMAZON-AES,AS14618,C2,censys,Covenant", "0", "DonPasci"
"2025-11-11 12:01:51", "1638662", "208.87.129.112:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:25", "100", "False", "https://search.censys.io/hosts/208.87.129.112", "AS29802,C2,censys,HVC-AS,Mythic", "0", "DonPasci"
"2025-11-11 08:02:54", "1638590", "45.76.190.68:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:46", "100", "False", "https://search.censys.io/hosts/45.76.190.68", "AS-VULTR,AS20473,C2,censys,Mythic", "0", "DonPasci"
"2025-11-10 18:47:41", "1638274", "38.242.212.5:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:29", "75", "False", "None", "AdaptixC2,drb-ra", "0", "abuse_ch"
"2025-11-10 16:02:55", "1638236", "154.205.145.109:2096", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:52", "100", "False", "https://search.censys.io/hosts/154.205.145.109", "AS138915,C2,censys,Havoc,KAOPU-HK", "0", "DonPasci"
"2025-11-07 23:00:12", "1636099", "111.228.55.96:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:10", "100", "False", "https://search.censys.io/hosts/111.228.55.96", "AS141679,C2,censys", "0", "dyingbreeds_"
"2025-11-07 02:49:37", "1634744", "165.154.225.239:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:55", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-11-06 07:26:25", "1634389", "139.196.111.118:8088", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:51", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2025-11-04 20:01:04", "1633501", "59.110.28.230:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:27", "100", "False", "https://search.censys.io/hosts/59.110.28.230", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-11-04 08:00:54", "1633194", "51.15.8.6:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:46:55", "100", "False", "https://search.censys.io/hosts/51.15.8.6", "AS12876,C2,censys,Online,Sliver", "0", "DonPasci"
"2025-11-04 02:49:22", "1633063", "192.253.227.88:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:46", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-11-04 02:49:14", "1633061", "167.88.168.76:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:47", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-11-03 12:08:57", "1631753", "117.72.175.125:443", "ip:port", "botnet_cc", "win.vshell", "None", "VShell", "2026-09-01 05:42:32", "100", "False", "https://www.nviso.eu/blog", "C2,NVISO,VShell", "0", "0xThiebaut"
"2025-11-03 09:03:04", "1631367", "117.72.242.9:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:48", "100", "False", "https://search.censys.io/hosts/117.72.242.9", "AS141679,C2,censys", "0", "dyingbreeds_"
"2025-11-03 07:01:12", "1631471", "119.42.148.186:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:50", "50", "False", "https://www.shodan.io/host/119.42.148.186#443", "c2,cobaltstrike,cs-watermark-666666666,shodan", "0", "juroots"
"2025-10-30 04:00:42", "1629384", "103.149.93.146:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:52", "100", "False", "https://search.censys.io/hosts/103.149.93.146", "AS401696,C2,censys,CobaltStrike,COGNETCLOUD,cs-watermark-666666666", "0", "DonPasci"
"2025-10-29 09:23:45", "1628814", "179.43.186.214:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:56", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2025-10-29 02:49:59", "1628691", "8.17.56.128:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-28 12:28:01", "1628076", "8.137.149.67:8060", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:10", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2025-10-28 04:00:27", "1627925", "182.254.155.23:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:46", "100", "False", "https://search.censys.io/hosts/182.254.155.23", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2025-10-28 02:49:21", "1627719", "182.16.98.83:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:46", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-27 20:50:01", "1627659", "182.16.98.84:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:28", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-26 07:39:14", "1626705", "196.251.83.89:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:45", "100", "False", "https://search.censys.io/hosts/196.251.83.89", "AS401120,C2,censys,CHEAPY-HOST", "0", "dyingbreeds_"
"2025-10-25 04:02:07", "1626312", "173.212.216.226:8080", "ip:port", "botnet_cc", "win.chaos", "FakeRyuk,RyukJoke,Yashma", "Chaos", "2026-09-01 05:44:22", "100", "False", "https://search.censys.io/hosts/173.212.216.226", "AS51167,censys,Chaos,CONTABO,panel", "0", "DonPasci"
"2025-10-25 04:00:11", "1626300", "47.121.135.201:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:37", "100", "False", "https://search.censys.io/hosts/47.121.135.201", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-10-24 16:00:08", "1626112", "140.143.194.253:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:48", "100", "False", "https://search.censys.io/hosts/140.143.194.253", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2025-10-23 16:48:58", "1625642", "maelootp.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:22", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-23 12:50:22", "1625564", "evil.ritademo.io.vn", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:23", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-23 04:02:14", "1625277", "91.92.240.57:443", "ip:port", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:47:24", "100", "False", "https://search.censys.io/hosts/91.92.240.57", "AS214943,C2,censys,Latrodectus,RAILNET", "0", "DonPasci"
"2025-10-22 15:43:44", "1624905", "116.62.226.163:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:33", "50", "False", "None", "c2,censys,cobalt strike", "0", "sojubear"
"2025-10-21 20:01:59", "1624300", "47.110.67.64:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:39", "100", "False", "https://search.censys.io/hosts/47.110.67.64", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-10-21 13:19:24", "1624166", "http://213.5.130.75", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:12", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-10-21 13:19:23", "1624167", "http://213.5.130.10", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:12", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-10-21 13:19:22", "1624169", "http://213.5.130.90", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:10", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-10-21 13:19:22", "1624170", "http://213.5.130.89", "url", "botnet_cc", "unknown", "None", "Unknown malware", "2026-08-31 18:02:12", "100", "False", "None", "c2,REMPROXY", "0", "BlackLotusLabs"
"2025-10-21 02:49:57", "1618877", "115.29.202.62:92", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:46", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-21 02:49:37", "1618876", "www.salesf0rce.club", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:33", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-17 12:02:17", "1617285", "5.152.16.189:8443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:46:53", "100", "False", "https://search.censys.io/hosts/5.152.16.189", "AS35805,C2,censys,Netsupport,RAT,SILKNET-AS", "0", "DonPasci"
"2025-10-16 22:50:54", "1616729", "47.129.2.130:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-16 22:49:04", "1616728", "ns1.gygiuh.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:39", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-10-14 20:02:48", "1615761", "89.58.30.49:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:22", "100", "False", "https://search.censys.io/hosts/89.58.30.49", "AS197540,C2,censys,Covenant,NETCUP-AS", "0", "DonPasci"
"2025-10-07 20:02:30", "1608986", "45.138.16.162:4321", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-31 18:46:20", "100", "False", "https://search.censys.io/hosts/45.138.16.162", "AdaptixC2,AS210558,C2,censys,SERVICES-1337-GMBH", "0", "DonPasci"
"2025-09-30 00:02:15", "1604499", "149.50.135.215:49152", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:43:47", "100", "False", "https://search.censys.io/hosts/149.50.135.215", "AdaptixC2,AS27823,C2,censys,Dattatec.com", "0", "DonPasci"
"2025-09-28 15:48:32", "1603281", "154.92.15.229:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:47", "50", "False", "None", "c2,censys,cobalt strike", "0", "sojubear"
"2025-09-27 05:44:59", "1602679", "43.166.246.26:8001", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-08-31 12:48:40", "100", "False", "None", "CobaltStrike,cs-watermark-426352781", "0", "abuse_ch"
"2025-09-25 20:00:39", "1601556", "115.120.245.134:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:12", "100", "False", "https://search.censys.io/hosts/115.120.245.134", "AS55990,C2,censys,CobaltStrike,cs-watermark-987654321,HWCSNET", "0", "DonPasci"
"2025-09-25 12:51:01", "1601359", "196.251.69.253:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:45", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-24 20:00:10", "1599651", "47.113.186.138:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:38", "100", "False", "https://search.censys.io/hosts/47.113.186.138", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-09-24 08:02:13", "1599442", "43.162.114.240:4000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:35", "100", "False", "https://search.censys.io/hosts/43.162.114.240", "AS132203,censys,EvilGinx,panel,Phishing,TENCENT-NET-AP-CN", "0", "DonPasci"
"2025-09-24 08:00:08", "1599436", "113.44.89.172:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:45", "100", "False", "https://search.censys.io/hosts/113.44.89.172", "AS55990,C2,censys,CobaltStrike,cs-watermark-987654321,HWCSNET", "0", "DonPasci"
"2025-09-23 20:01:59", "1599091", "46.21.153.146:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:50", "100", "False", "https://search.censys.io/hosts/46.21.153.146", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2025-09-23 04:00:59", "1598300", "43.162.114.107:4000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:34", "100", "False", "https://search.censys.io/hosts/43.162.114.107", "AS132203,censys,EvilGinx,Phishing", "0", "dyingbreeds_"
"2025-09-22 14:51:05", "1598102", "159.75.211.248:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:55", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-22 14:49:30", "1598100", "cstest.mucfc.store", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:37", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-22 08:49:38", "1597898", "ns2.cryptwechat.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-22 08:49:35", "1597894", "ns1.cryptwechat.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:39", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-21 16:01:22", "1596535", "43.162.108.133:4000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:34", "100", "False", "https://search.censys.io/hosts/43.162.108.133", "AS132203,censys,EvilGinx,panel,Phishing,TENCENT-NET-AP-CN", "0", "DonPasci"
"2025-09-13 04:01:58", "1589068", "18.167.174.198:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:44:29", "100", "False", "https://search.censys.io/hosts/18.167.174.198", "AMAZON-02,AS16509,C2,censys,Pupy,RAT", "0", "DonPasci"
"2025-09-11 20:01:36", "1588133", "195.178.110.135:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:45", "100", "False", "https://search.censys.io/hosts/195.178.110.135", "AS48090,C2,censys,CobaltStrike,cs-watermark-426352781,DMZHOST", "0", "DonPasci"
"2025-09-11 20:01:30", "1588128", "150.158.170.241:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:48", "100", "False", "https://search.censys.io/hosts/150.158.170.241", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2025-09-11 06:43:14", "1587773", "106.12.111.209:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:51", "100", "False", "None", "CobaltStrike,cs-watermark-1234567890", "0", "abuse_ch"
"2025-09-10 20:01:24", "1587441", "101.32.109.112:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:53", "100", "False", "https://search.censys.io/hosts/101.32.109.112", "AS132203,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP-CN", "0", "DonPasci"
"2025-09-07 20:02:05", "1583496", "43.225.157.146:8808", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:46:35", "100", "False", "https://search.censys.io/hosts/43.225.157.146", "AS142403,AsyncRAT,C2,censys,RAT,YISUCLOUDLTD-HK", "0", "DonPasci"
"2025-09-06 20:01:18", "1582910", "8.138.222.215:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:35", "100", "False", "https://search.censys.io/hosts/8.138.222.215", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2025-09-06 12:01:48", "1582784", "103.236.70.158:8000", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:43:08", "100", "False", "https://search.censys.io/hosts/103.236.70.158", "AS134768,C2,censys,CHINANET-SHAANXI-CLOUD-BASE,DcRAT,RAT", "0", "DonPasci"
"2025-09-04 07:40:17", "1581557", "8.148.194.157:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:35", "50", "False", "https://www.shodan.io/host/8.148.194.157#443", "c2,cobaltstrike,cs-watermark-666666666,shodan", "0", "juroots"
"2025-09-02 18:52:55", "1580723", "47.236.159.248:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-02 18:50:45", "1580721", "ns2.microoosoft.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-02 18:50:42", "1580720", "ns1.microoosoft.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:39", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-09-02 05:43:42", "1580257", "47.121.137.8:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:06", "50", "False", "https://www.shodan.io/host/47.121.137.8#80", "c2,cobaltstrike,cs-watermark-666666666,shodan", "0", "juroots"
"2025-09-02 04:01:38", "1580237", "47.99.196.178:7001", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:53", "100", "False", "https://search.censys.io/hosts/47.99.196.178", "AdaptixC2,ALIBABA-CN-NET,AS37963,C2,censys", "0", "DonPasci"
"2025-09-01 00:01:11", "1578921", "109.205.181.248:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:22", "100", "False", "https://search.censys.io/hosts/109.205.181.248", "AS51167,C2,censys,CONTABO,Mythic", "0", "DonPasci"
"2025-08-31 20:50:07", "1578899", "103.73.66.43:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:34", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-31 04:00:27", "1578379", "109.205.181.248:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:22", "100", "False", "https://search.censys.io/hosts/109.205.181.248", "AS51167,C2,censys,CONTABO,Mythic", "0", "dyingbreeds_"
"2025-08-29 22:50:45", "1577783", "43.199.78.142:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:04", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-29 22:49:03", "1577775", "n1.google-analytcis.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:39", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-29 22:49:03", "1577776", "n2.google-analytcis.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:39", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-29 22:49:03", "1577777", "n3.google-analytcis.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:39", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-29 22:49:01", "1577774", "lab.google-analytcis.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:38", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-28 20:01:21", "1576432", "46.246.82.10:2003", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:51", "100", "False", "https://search.censys.io/hosts/46.246.82.10", "AS42708,C2,censys,DcRAT,GLESYS,RAT", "0", "DonPasci"
"2025-08-25 08:14:17", "1574099", "89.216.98.17:3085", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:47:21", "50", "False", "https://www.shodan.io/host/89.216.98.17#3085", "c2,netsupport,shodan", "0", "juroots"
"2025-08-25 00:00:27", "1573705", "43.163.112.217:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:41", "100", "False", "https://search.censys.io/hosts/43.163.112.217", "AS132203,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP-CN", "0", "DonPasci"
"2025-08-23 16:00:59", "1573112", "3.24.114.211:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:17", "100", "False", "https://search.censys.io/hosts/3.24.114.211", "AMAZON-02,AS16509,C2,censys,Mythic", "0", "DonPasci"
"2025-08-20 08:02:12", "1571607", "178.16.55.53:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:46", "100", "False", "https://search.censys.io/hosts/178.16.55.53", "C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2025-08-18 20:01:59", "1570775", "116.203.31.207:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:47", "100", "False", "https://search.censys.io/hosts/116.203.31.207", "AS24940,C2,censys,CobaltStrike,cs-watermark-987654321,HETZNER-AS", "0", "DonPasci"
"2025-08-17 20:01:54", "1570558", "150.187.25.242:9999", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:52", "100", "False", "https://search.censys.io/hosts/150.187.25.242", "AS20312,C2,censys,CobaltStrike,cs-watermark-987654321,Fundacion", "0", "DonPasci"
"2025-08-16 15:22:26", "1569825", "8.138.167.123:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:35", "50", "False", "https://www.shodan.io/host/8.138.167.123#443", "c2,cobaltstrike,shodan", "0", "juroots"
"2025-08-16 08:01:47", "1569780", "119.29.231.118:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:50", "100", "False", "https://search.censys.io/hosts/119.29.231.118", "AS45090,C2,censys,CobaltStrike,cs-watermark-666666666,TENCENT-NET-AP", "0", "DonPasci"
"2025-08-15 21:57:45", "1569167", "116.198.233.179:6666", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:46", "50", "False", "https://www.shodan.io/host/116.198.233.179#6666", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2025-08-15 06:21:34", "1568713", "117.72.184.172:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:50", "100", "False", "https://search.censys.io/hosts/117.72.184.172", "AS141679,C2,censys", "0", "dyingbreeds_"
"2025-08-12 20:01:25", "1567756", "116.198.233.179:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:13", "100", "False", "https://search.censys.io/hosts/116.198.233.179", "AS137699,C2,censys,CHINATELECOM-JIANGSU-SUQIAN-IDC,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-08-12 12:01:59", "1567668", "62.117.98.115:8001", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:00", "100", "False", "https://search.censys.io/hosts/62.117.98.115", "AS8732,C2,censys,COMCOR-AS,Mythic", "0", "DonPasci"
"2025-08-12 10:50:19", "1567648", "107.174.115.43:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:44", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-11 20:01:43", "1567316", "209.250.227.127:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:45:25", "100", "False", "https://search.censys.io/hosts/209.250.227.127", "AS-VULTR,AS20473,C2,censys,Pupy,RAT", "0", "DonPasci"
"2025-08-11 08:01:15", "1567234", "45.204.216.24:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:41", "100", "False", "https://search.censys.io/hosts/45.204.216.24", "AS62468,C2,censys,CobaltStrike,cs-watermark-987654321,HKCLOUDX", "0", "DonPasci"
"2025-08-06 12:54:26", "1565164", "8.219.76.168:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:32", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-06 12:51:48", "1565159", "101.133.229.117:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:42", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-05 12:51:41", "1564535", "www.chinagasholdings.space", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:41", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-05 08:53:36", "1564496", "47.105.36.109:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-08-04 20:45:44", "1564345", "185.233.166.124:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:39", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-08-04 20:45:44", "1564346", "185.233.166.124:9702", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:39", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-08-01 20:01:06", "1563211", "89.197.168.150:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:20", "100", "False", "https://search.censys.io/hosts/89.197.168.150", "AS47474,C2,censys,Mythic,VIRTUAL1", "0", "DonPasci"
"2025-07-30 20:01:06", "1562605", "172.233.97.159:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:15", "100", "False", "https://search.censys.io/hosts/172.233.97.159", "AKAMAI-LINODE-AP,AS63949,C2,censys,Mythic", "0", "DonPasci"
"2025-07-27 16:00:55", "1561181", "117.72.181.104:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:51", "100", "False", "https://search.censys.io/hosts/117.72.181.104", "AS141679,C2,censys,CHINATELECOM-IDC-BTHBD-AP,CobaltStrike,cs-watermark-666666", "0", "DonPasci"
"2025-07-25 10:51:18", "1560617", "47.236.130.154:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-22 20:44:22", "1559594", "158.255.213.22:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:00", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-07-22 20:44:22", "1559595", "158.255.213.22:63421", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:00", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-07-19 12:49:30", "1558329", "103.125.248.109:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:52", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-18 12:51:20", "1558066", "193.112.84.248:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:45", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-16 22:49:04", "1557619", "ns3.nsebseshop.cloud", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-16 22:49:03", "1557618", "ns2.nsebseshop.cloud", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-16 22:49:02", "1557617", "ns1.nsebseshop.cloud", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:39", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-07-14 20:45:17", "1556749", "118.31.18.77:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:49", "100", "False", "https://search.censys.io/hosts/118.31.18.77", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-07-12 00:01:36", "1556099", "51.81.171.234:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:55", "100", "False", "https://search.censys.io/hosts/51.81.171.234", "AS16276,C2,censys,Havoc,OVH", "0", "DonPasci"
"2025-07-07 20:54:20", "1554340", "88.129.147.201:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:47:19", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-07-06 20:00:32", "1554064", "8.152.99.85:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:34", "100", "False", "https://search.censys.io/hosts/8.152.99.85", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2025-07-03 20:00:15", "1553070", "112.125.19.107:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:45", "100", "False", "https://search.censys.io/hosts/112.125.19.107", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-1234567890", "0", "DonPasci"
"2025-07-02 04:02:12", "1552208", "146.70.87.96:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-08-31 08:43:46", "100", "False", "https://search.censys.io/hosts/146.70.87.96", "AdaptixC2,AS9009,C2,censys,M247", "0", "DonPasci"
"2025-07-01 04:02:16", "1551843", "38.132.122.141:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:27", "100", "False", "https://search.censys.io/hosts/38.132.122.141", "AdaptixC2,AS9009,C2,censys,M247", "0", "DonPasci"
"2025-06-28 10:54:22", "1550784", "116.205.143.204:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:47", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-06-28 10:53:12", "1550783", "dns1.globalcdn.autos", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:38", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-06-28 08:51:18", "1550284", "54.38.94.225:8886", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:46:58", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-06-25 04:00:19", "1549030", "156.227.233.153:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:47", "100", "False", "https://search.censys.io/hosts/156.227.233.153", "AS138152,C2,censys", "0", "dyingbreeds_"
"2025-06-20 20:02:50", "1548104", "158.158.0.196:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:59", "100", "False", "https://search.censys.io/hosts/158.158.0.196", "AS8075,C2,censys,MICROSOFT-CORP-MSN-AS-BLOCK,Mythic", "0", "DonPasci"
"2025-06-20 06:01:32", "1547925", "82.156.156.160:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:34", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2025-06-19 00:02:44", "1546420", "158.158.0.196:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:59", "100", "False", "https://search.censys.io/hosts/158.158.0.196", "AS8075,C2,censys,MICROSOFT-CORP-MSN-AS-BLOCK,Mythic", "0", "DonPasci"
"2025-06-18 08:02:37", "1546246", "191.93.118.254:9000", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:48", "75", "False", "https://bazaar.abuse.ch/sample/9265a6e0b26a240f1f8bffddf3b36d0e533919d0c894bd66839a90e351961464/", "AsyncRAT,RAT", "0", "abuse_ch"
"2025-06-18 07:58:54", "1546232", "191.93.118.254:8848", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:44:48", "75", "False", "https://bazaar.abuse.ch/sample/6ecbf71d231e9b9e7459b97c97d94aed467481b5b4f22af288bbaea5945c1af4/", "AsyncRAT,RAT", "0", "abuse_ch"
"2025-06-17 03:12:25", "1545615", "8.147.128.54:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:35", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-06-16 12:01:46", "1545348", "8.137.149.67:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:10", "100", "False", "https://search.censys.io/hosts/8.137.149.67", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-06-13 20:01:30", "1544612", "47.109.48.57:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:40", "100", "False", "https://search.censys.io/hosts/47.109.48.57", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-06-12 08:56:19", "1544039", "39.104.78.25:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:44", "100", "False", "https://search.censys.io/hosts/39.104.78.25", "AS37963,C2,censys", "0", "dyingbreeds_"
"2025-06-10 16:01:13", "1543390", "8.155.0.238:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:34", "100", "False", "https://search.censys.io/hosts/8.155.0.238", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2025-06-08 21:18:37", "1542804", "23.227.203.191:43211", "ip:port", "botnet_cc", "win.adaptix_c2", "None", "AdaptixC2", "2026-09-01 05:46:13", "100", "False", "https://search.censys.io/hosts/23.227.203.191", "AdaptixC2,AS29802,C2,censys,HVC-AS", "0", "DonPasci"
"2025-06-08 20:45:49", "1542784", "162.248.224.223:7882", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:05", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-06-08 20:45:48", "1542783", "162.248.224.223:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:05", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-06-08 20:01:01", "1542759", "119.45.29.172:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:32", "100", "False", "https://search.censys.io/hosts/119.45.29.172", "AS45090,C2,censys,CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP", "0", "DonPasci"
"2025-06-06 16:00:50", "1541652", "68.64.176.42:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:37", "100", "False", "https://search.censys.io/hosts/68.64.176.42", "AS139659,C2,censys,CobaltStrike,cs-watermark-391144938,LUCID-AS-AP", "0", "DonPasci"
"2025-06-02 12:01:04", "1538881", "193.239.85.15:2083", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:55", "100", "False", "https://search.censys.io/hosts/193.239.85.15", "AS9009,C2,censys,Havoc,M247", "0", "DonPasci"
"2025-06-02 05:47:28", "1538799", "47.109.198.8:6000", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:06", "50", "False", "https://www.shodan.io/host/47.109.198.8#6000", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2025-06-01 08:52:56", "1538358", "54.38.94.225:8885", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:46:58", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-05-31 07:45:39", "1537676", "101.43.91.156:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:34", "75", "False", "https://x.com/abodovic1", "c2,censys,CobaltStrike", "0", "Abodovic"
"2025-05-31 07:45:38", "1537678", "59.110.7.32:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:24", "75", "False", "https://x.com/abodovic1", "c2,censys,CobaltStrike", "0", "Abodovic"
"2025-05-30 08:53:21", "1536850", "99.112.198.249:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:47:35", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-05-30 08:00:11", "1536831", "129.28.85.210:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:49", "100", "False", "https://search.censys.io/hosts/129.28.85.210", "AS45090,C2,censys,CobaltStrike,cs-watermark-666666666,TENCENT-NET-AP", "0", "DonPasci"
"2025-05-30 02:55:17", "1536730", "111.229.4.108:2096", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:45", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-05-29 22:26:34", "1536683", "161.35.176.231:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:04", "100", "False", "https://search.censys.io/hosts/161.35.176.231", "AS14061,C2,censys,DIGITALOCEAN-ASN,Havoc", "0", "DonPasci"
"2025-05-26 06:29:51", "1534703", "38.54.23.241:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:46:30", "100", "False", "https://search.censys.io/hosts/38.54.23.241", "AS138915,C2,censys,KAOPU-HK,Pupy,RAT", "0", "DonPasci"
"2025-05-24 20:01:31", "1533613", "221.132.29.137:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:11", "100", "False", "https://search.censys.io/hosts/221.132.29.137", "AS45899,C2,censys,Mythic,VNPT-AS-VN", "0", "DonPasci"
"2025-05-24 11:13:44", "1533071", "1.15.174.189:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:22", "75", "False", "https://x.com/abodovic1", "c2,censys,CobaltStrike", "0", "Abodovic"
"2025-05-23 05:34:51", "1532332", "8.140.239.162:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:24", "75", "False", "https://x.com/abodovic1", "c2,censys,CobaltStrike", "0", "Abodovic"
"2025-05-21 08:00:35", "1527752", "117.72.206.39:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:32", "100", "False", "https://search.censys.io/hosts/117.72.206.39", "AS141679,C2,censys,CHINATELECOM-IDC-BTHBD-AP,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2025-05-20 06:37:42", "1526357", "106.54.61.188:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:51", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2025-05-18 15:34:22", "1525250", "124.223.114.203:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:49", "100", "False", "https://intelinsights.substack.com/p/from-939-to-85-hunting-cobalt-strike", "censys,cobaltstrike", "0", "orlof_v"
"2025-05-17 14:42:08", "1524773", "167.99.51.2:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:44:09", "50", "False", "https://www.shodan.io/host/167.99.51.2#31337", "c2,shodan,sliver", "0", "juroots"
"2025-05-17 08:00:32", "1524641", "167.99.51.2:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:44:10", "100", "False", "https://search.censys.io/hosts/167.99.51.2", "AS14061,C2,censys,DIGITALOCEAN-ASN,Sliver", "0", "DonPasci"
"2025-05-17 06:26:23", "1524319", "101.35.109.246:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:52", "50", "False", "https://www.shodan.io/host/101.35.109.246#443", "c2,cobaltstrike,cs-watermark-987654321,shodan", "0", "juroots"
"2025-05-15 21:14:57", "1523466", "103.171.35.26:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:52", "75", "False", "https://x.com/abodovic1", "c2,censys,cobalt_strike", "0", "Abodovic"
"2025-05-15 21:14:47", "1523462", "60.204.169.16:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:24", "75", "False", "https://x.com/abodovic1", "c2,censys,cobalt_strike", "0", "Abodovic"
"2025-05-15 21:13:56", "1523434", "179.43.186.223:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:46", "75", "False", "https://x.com/abodovic1", "c2,censys,cobalt_strike", "0", "Abodovic"
"2025-05-15 06:10:52", "1523280", "45.133.180.138:6432", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-08-31 08:46:34", "75", "False", "https://bazaar.abuse.ch/sample/b6185d4054c5a08141db4c3fb5e43369ea21af5892d8ba47628e23f37f79250d/", "asyncrat", "0", "abuse_ch"
"2025-05-12 20:58:42", "1520343", "38.54.112.234:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:02", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-05-12 20:55:40", "1520342", "asusupdateserver.asuscomm.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:36", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-05-11 06:11:06", "1519438", "47.109.190.151:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:52", "100", "False", "https://search.censys.io/hosts/47.109.190.151", "AS37963,censys,Viper", "0", "dyingbreeds_"
"2025-05-11 05:00:18", "1519451", "https://lofiramegi.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:43:59", "100", "False", "", "None", "0", "Rony"
"2025-05-11 05:00:17", "1519450", "https://topguningit.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:54:02", "100", "False", "", "None", "0", "Rony"
"2025-05-09 05:36:03", "1518529", "47.108.140.10:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:52", "100", "False", "https://search.censys.io/hosts/47.108.140.10", "AS37963,censys,Viper", "0", "dyingbreeds_"
"2025-05-07 13:00:19", "1518023", "106.52.207.50:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:44", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-04-29 08:53:29", "1513590", "54.38.94.225:8882", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:46:57", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-04-29 08:43:42", "1513585", "107.143.144.154:8080", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:43:17", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-04-26 20:01:51", "1511917", "181.206.158.190:1000", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:44:30", "100", "False", "https://search.censys.io/hosts/181.206.158.190", "AS27831,C2,censys,Colombia,DcRAT,RAT", "0", "DonPasci"
"2025-04-22 12:21:47", "1509966", "167.71.13.103:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:44:09", "50", "False", "https://www.shodan.io/host/167.71.13.103#31337", "c2,shodan,sliver", "0", "juroots"
"2025-04-18 08:02:32", "1493521", "77.73.129.82:443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:09", "100", "False", "https://search.censys.io/hosts/77.73.129.82", "AS201814,C2,censys,MEVSPACE,Mythic", "0", "DonPasci"
"2025-04-16 16:01:35", "1492480", "113.45.253.80:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:46", "100", "False", "https://search.censys.io/hosts/113.45.253.80", "AS55990,C2,censys,CobaltStrike,cs-watermark-666666666,HWCSNET", "0", "DonPasci"
"2025-04-15 16:02:30", "1492012", "47.83.134.97:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:52", "100", "False", "https://search.censys.io/hosts/47.83.134.97", "ALIBABA-CN-NET,AS45102,C2,censys,Havoc", "0", "DonPasci"
"2025-04-10 05:55:49", "1486437", "167.71.13.103:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:44:09", "90", "False", "https://search.censys.io/hosts/167.71.13.103", "AS14061,C2,censys,DIGITALOCEAN-ASN", "0", "dyingbreeds_"
"2025-04-02 10:08:14", "1463173", "38.46.218.36:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-09-01 01:39:24", "100", "False", "None", "Vo1d", "0", "Bitsight"
"2025-04-02 10:08:13", "1463174", "38.46.218.38:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-09-01 02:40:27", "100", "False", "None", "Vo1d", "0", "Bitsight"
"2025-04-02 10:08:12", "1463176", "38.46.218.39:9999", "ip:port", "botnet_cc", "apk.vo1d", "None", "vo1d", "2026-08-31 23:03:30", "100", "False", "None", "Vo1d", "0", "Bitsight"
"2025-04-02 08:01:26", "1463152", "200.107.126.227:3085", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:45:19", "100", "False", "https://search.censys.io/hosts/200.107.126.227", "AS14754,C2,censys,Netsupport,RAT,TELECOMUNICACIONES", "0", "DonPasci"
"2025-04-01 10:24:30", "1462468", "43.143.229.126:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:42", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2025-03-25 22:53:24", "1458716", "ehchq7m7rpvdr.cfc-execute.bj.baidubce.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:33", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-03-24 06:29:33", "1457513", "103.142.147.17:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:05", "100", "False", "https://search.censys.io/hosts/103.142.147.17", "AS135581,censys,Viper", "0", "dyingbreeds_"
"2025-03-22 20:43:16", "1454148", "103.142.147.18:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:06", "75", "False", "None", "drb-ra,RAT", "0", "abuse_ch"
"2025-03-22 20:43:16", "1454149", "103.142.147.19:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:06", "75", "False", "None", "drb-ra,RAT", "0", "abuse_ch"
"2025-03-20 12:01:27", "1452404", "47.116.208.81:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:38", "100", "False", "https://search.censys.io/hosts/47.116.208.81", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-666666666", "0", "DonPasci"
"2025-03-12 02:47:28", "1446559", "www.dyshop.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:41", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-03-11 12:01:13", "1446149", "210.2.169.213:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:45:28", "100", "False", "https://search.censys.io/hosts/210.2.169.213", "AS23966,C2,censys,Havoc,LDN-AS-PK", "0", "DonPasci"
"2025-03-09 04:00:17", "1444156", "47.100.16.83:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:05", "100", "False", "https://search.censys.io/hosts/47.100.16.83", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-391144938", "0", "DonPasci"
"2025-03-06 04:01:35", "1441769", "51.81.171.234:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:56", "100", "False", "https://search.censys.io/hosts/51.81.171.234", "AS16276,C2,censys,Havoc,OVH", "0", "DonPasci"
"2025-03-03 12:01:16", "1440087", "15.204.95.228:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:43:47", "100", "False", "https://search.censys.io/hosts/15.204.95.228", "AS16276,C2,censys,Havoc,OVH", "0", "DonPasci"
"2025-03-02 20:01:03", "1439776", "150.5.174.231:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:47", "100", "False", "https://search.censys.io/hosts/150.5.174.231", "AS150436,BYTEPLUS-AS-AP,C2,censys,Mythic", "0", "DonPasci"
"2025-03-02 08:46:23", "1439368", "54.38.94.225:8887", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:46:58", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-03-01 20:47:46", "1439168", "47.129.171.26:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:07", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-03-01 20:46:51", "1439166", "ns.1.3.0o0.foo", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:39", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-03-01 20:46:51", "1439167", "ns.1.4.0o0.foo", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:39", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-02-19 04:01:34", "1414853", "54.95.208.190:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:58", "100", "False", "https://search.censys.io/hosts/54.95.208.190", "AMAZON-02,AS16509,C2,censys,Havoc", "0", "DonPasci"
"2025-02-14 00:01:07", "1411885", "192.52.167.140:80", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:44:53", "100", "False", "https://search.censys.io/hosts/192.52.167.140", "AS199959,C2,censys,CROWNCLOUD,Netsupport,RAT", "0", "DonPasci"
"2025-02-10 20:43:10", "1409420", "103.215.81.156:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:08", "75", "False", "None", "drb-ra,RAT", "0", "abuse_ch"
"2025-02-06 13:54:51", "1405307", "https://apworsindos.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:50:04", "100", "False", "", "None", "0", "Rony"
"2025-02-06 13:54:51", "1405308", "https://reminasolirol.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:59:21", "100", "False", "", "None", "0", "Rony"
"2025-02-05 22:51:06", "1404178", "20.74.209.192:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:45", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-02-02 12:49:35", "1402480", "service-rchqbzvz-1301033415.sh.tencentapigw.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:33", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-02-01 20:47:38", "1402273", "https://vivaforevew.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:49:52", "100", "False", "", "None", "0", "Rony"
"2025-02-01 20:47:38", "1402274", "https://wersogkiwgow.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:57:55", "100", "False", "", "None", "0", "Rony"
"2025-01-31 13:44:30", "1398820", "162.252.173.12:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:06", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-31 12:01:38", "1398810", "162.252.173.12:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:06", "100", "False", "https://search.censys.io/hosts/162.252.173.12", "AS9009,backdoor,C2,censys,M247,Ransomhub", "0", "DonPasci"
"2025-01-31 07:01:30", "1398657", "8.134.108.73:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:10", "100", "False", "https://search.censys.io/hosts/8.134.108.73", "AS37963,censys,Viper", "0", "dyingbreeds_"
"2025-01-30 08:47:19", "1396136", "38.146.28.93:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:46:27", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-30 08:45:48", "1396135", "185.33.86.15:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:40", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-30 08:01:38", "1396130", "38.146.28.93:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:46:27", "100", "False", "https://search.censys.io/hosts/38.146.28.93", "AS174,backdoor,C2,censys,COGENT-174,Ransomhub", "0", "DonPasci"
"2025-01-30 04:01:31", "1396102", "185.33.86.15:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:40", "100", "False", "https://search.censys.io/hosts/185.33.86.15", "AS202015,backdoor,C2,censys,HZ-US-AS,Ransomhub", "0", "DonPasci"
"2025-01-26 08:46:00", "1394408", "54.38.94.225:8883", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:46:57", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-01-25 20:47:04", "1394158", "54.38.94.225:8880", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:46:57", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-01-22 17:46:05", "1391610", "45.82.85.50:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:46:47", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-18 16:10:00", "1386236", "https://135.181.31.18", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:10:38", "100", "False", "", "None", "0", "Gi7w0rm"
"2025-01-17 09:14:13", "1384921", "167.99.139.231:8004", "ip:port", "botnet_cc", "win.eye_pyramid", "None", "Eye Pyramid", "2026-09-01 05:44:09", "75", "False", "None", "drb-ra,EyePyramid", "0", "abuse_ch"
"2025-01-17 09:13:19", "1384912", "185.174.101.240:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:33", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:13:19", "1384913", "185.174.101.240:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:33", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:13:19", "1384914", "185.174.101.69:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:33", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:13:19", "1384915", "185.174.101.69:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:44:34", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:12:27", "1384910", "108.181.182.143:443", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:43:20", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 09:12:27", "1384911", "108.181.182.143:8000", "ip:port", "botnet_cc", "win.ransomhub", "None", "RansomHub", "2026-09-01 05:43:20", "75", "False", "None", "drb-ra,RansomHub", "0", "abuse_ch"
"2025-01-17 07:45:55", "1384790", "at1.227api.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:36", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-17 07:45:55", "1384791", "at2.227api.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:36", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-17 07:45:55", "1384792", "at3.227api.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:36", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 13:55:47", "1381420", "77.238.236.123:18300", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:47:09", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-01-10 13:43:51", "1381067", "112.5.58.181:7001", "ip:port", "botnet_cc", "win.deimos_c2", "None", "DeimosC2", "2026-09-01 05:43:24", "75", "False", "None", "Deimos,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:38", "1380875", "update.mloadspring.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:38", "1380878", "upgrade.mloadspring.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:41", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:30", "1380837", "ns3.akawowfast.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:27", "1380818", "ns2.cmbchina.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:40", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:26", "1380815", "ns2.akawowfast.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:39", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:20", "1380783", "ns1.akawowfast.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:39", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 09:14:20", "1380787", "ns1.cmbchina.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:39", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:18:57", "1380635", "8.219.78.159:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:11", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:18:43", "1380629", "70.34.196.238:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:09", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:18:28", "1380607", "47.98.134.252:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:37", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:16:21", "1380446", "139.180.189.95:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:51", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:15:44", "1380421", "118.25.91.151:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:50", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-10 08:15:43", "1380420", "117.72.39.83:43872", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:48", "75", "False", "None", "CobaltStrike,drb-ra", "0", "abuse_ch"
"2025-01-01 04:03:19", "1376919", "86.124.168.255:443", "ip:port", "botnet_cc", "js.fakeupdates", "FakeUpdate,GhoLoader,SocGholish", "FAKEUPDATES", "2026-09-01 05:47:18", "100", "False", "https://search.censys.io/hosts/86.124.168.255", "AS8708,c2,censys,RCS-RDS,SocGholish", "0", "DonPasci"
"2024-12-25 14:55:36", "1359629", "https://95.217.241.133/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:11:20", "100", "False", "", "Vidar", "0", "crep1x"
"2024-12-24 08:00:43", "1359401", "8.153.97.202:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:32", "100", "False", "https://search.censys.io/hosts/8.153.97.202", "ALIBABA-CN-NET,AS37963,C2,censys,CobaltStrike,cs-watermark-987654321", "0", "DonPasci"
"2024-12-24 04:01:34", "1359309", "91.199.154.103:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:47:23", "100", "False", "https://search.censys.io/hosts/91.199.154.103", "AS62212,C2,censys,Sliver", "0", "DonPasci"
"2024-12-24 00:02:17", "1359295", "54.95.208.190:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:46:58", "100", "False", "https://search.censys.io/hosts/54.95.208.190", "AMAZON-02,AS16509,C2,censys,Havoc", "0", "DonPasci"
"2024-12-20 16:01:53", "1358842", "149.28.61.158:8773", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:46", "100", "False", "https://search.censys.io/hosts/149.28.61.158", "AS-VULTR,AS20473,C2,censys,Mythic", "0", "DonPasci"
"2024-12-18 07:45:25", "1357646", "https://t.me/k04ael", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 14:40:21", "100", "False", "", "Vidar", "0", "crep1x"
"2024-12-18 07:45:23", "1357645", "https://steamcommunity.com/profiles/76561199809363512", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-08-30 14:40:20", "100", "False", "", "Vidar", "0", "crep1x"
"2024-12-16 16:01:41", "1357389", "45.56.69.210:3333", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:46:44", "100", "False", "https://search.censys.io/hosts/45.56.69.210", "AKAMAI-LINODE-AP,AS63949,censys,EvilGoPhish,panel,Phishing", "0", "DonPasci"
"2024-12-15 08:01:25", "1357028", "102.117.172.98:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:04", "100", "False", "https://search.censys.io/hosts/102.117.172.98", "AS23889,C2,censys,MauritiusTelecom,Mythic", "0", "DonPasci"
"2024-12-12 06:21:40", "1356002", "113.44.90.0:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:24", "100", "False", "https://search.censys.io/hosts/113.44.90.0", "AS55990,censys,Viper", "0", "dyingbreeds_"
"2024-12-06 07:36:52", "1352876", "139.196.126.161:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:30", "100", "False", "None", "CobaltStrike,cs-watermark-987654321", "0", "abuse_ch"
"2024-12-02 21:01:15", "1350210", "117.72.39.83:4433", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:48", "100", "False", "https://search.censys.io/hosts/117.72.39.83", "AS141679,C2,censys", "0", "dyingbreeds_"
"2024-12-01 07:43:42", "1349957", "117.72.39.83:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:48", "100", "False", "None", "CobaltStrike,cs-watermark-391144938", "0", "abuse_ch"
"2024-11-30 20:06:19", "1349567", "216.118.101.24:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:52", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-30 20:06:11", "1349531", "216.118.101.132:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:36", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-30 20:06:08", "1349510", "216.118.101.199:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:46", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-30 20:06:04", "1349492", "216.118.101.216:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:49", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-30 20:05:53", "1349445", "113.44.89.87:60000", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:43:24", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-30 20:05:51", "1349438", "216.118.101.54:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:58", "100", "False", "", "censys,panel,Viper", "0", "NDA0E"
"2024-11-29 13:56:30", "1348902", "216.118.101.108:80", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:45:32", "100", "False", "", "Viper", "0", "dyingbreeds_"
"2024-11-27 19:47:54", "1348295", "47.90.142.15:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:25", "100", "False", "", "censys,CobaltStrike", "0", "NDA0E"
"2024-11-27 19:47:07", "1348026", "8.137.114.210:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:36", "100", "False", "", "censys,CobaltStrike", "0", "NDA0E"
"2024-11-19 18:00:05", "1346058", "servicioremotoempresas.info", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:35", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-10-30 17:53:55", "1340201", "146.70.158.198:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:43:44", "75", "False", "https://github.com/TheRavenFile/Daily-Hunt/blob/main/Sliver%20C2", "c2,sliver,sliverc2", "0", "TheRavenFile"
"2024-10-22 13:56:41", "1338675", "https://stripplasst.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:53:47", "100", "False", "https://www.vmray.com/latrodectus-a-year-in-the-making/", "c2,latrodectus,vmray", "0", "DonPasci"
"2024-10-22 13:56:39", "1338673", "https://skinnyjeanso.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:52:53", "100", "False", "https://www.vmray.com/latrodectus-a-year-in-the-making/", "c2,latrodectus,vmray", "0", "DonPasci"
"2024-10-22 13:56:34", "1338670", "https://coolarition.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:43:43", "100", "False", "https://www.vmray.com/latrodectus-a-year-in-the-making/", "c2,latrodectus,vmray", "0", "DonPasci"
"2024-10-22 13:56:32", "1338668", "https://aytobusesre.com/live/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:52:16", "100", "False", "https://www.vmray.com/latrodectus-a-year-in-the-making/", "c2,latrodectus,vmray", "0", "DonPasci"
"2024-10-02 06:31:45", "1332624", "154.221.17.44:2888", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:54", "100", "False", "None", "CobaltStrike,cs-watermark-666666666", "0", "abuse_ch"
"2024-10-01 16:02:09", "1332328", "195.100.198.220:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:59", "100", "False", "https://search.censys.io/hosts/195.100.198.220", "AS5400,BT,C2,censys,Mythic", "0", "DonPasci"
"2024-09-27 16:02:26", "1330880", "45.74.34.32:1995", "ip:port", "botnet_cc", "win.dcrat", "DarkCrystal RAT", "DCRat", "2026-09-01 05:46:46", "100", "False", "https://search.censys.io/hosts/45.74.34.32", "AS9009,C2,censys,DcRAT,M247,RAT", "0", "DonPasci"
"2024-09-25 08:00:47", "1329042", "118.25.148.25:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:50", "100", "False", "https://search.censys.io/hosts/118.25.148.25", "AS45090,C2,censys,CobaltStrike,cs-watermark-391144938,TENCENT-NET-AP", "0", "DonPasci"
"2024-09-20 08:01:06", "1326604", "206.210.123.104:8889", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:45:23", "100", "False", "https://search.censys.io/hosts/206.210.123.104", "AS33130,C2,censys,IASL,RAT", "0", "DonPasci"
"2024-09-19 14:07:53", "1326049", "https://pomaspoteraka.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:46:27", "50", "False", "None", "1.5,Delta", "0", "spamhaus"
"2024-09-19 14:07:52", "1326050", "https://finilamedima.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:54:31", "50", "False", "None", "1.5,Delta", "0", "spamhaus"
"2024-09-19 14:07:51", "1326051", "https://isomicrotich.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:45:04", "50", "False", "None", "1.7,Alpha", "0", "spamhaus"
"2024-09-19 14:07:50", "1326052", "https://rilomenifis.com/test/", "url", "botnet_cc", "win.latrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:53:08", "50", "False", "None", "1.7,Alpha", "0", "spamhaus"
"2024-08-30 07:05:10", "1317376", "https://pikchestop.com/test/", "url", "botnet_cc", "win.lactrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:47:19", "49", "False", "https://www.netskope.com/jp/blog/latrodectus-rapid-evolution-continues-with-latest-new-payload-features", "None", "0", "johannes"
"2024-08-30 07:05:10", "1317377", "https://indepahote.com/test/", "url", "botnet_cc", "win.lactrodectus", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Latrodectus", "2026-09-01 05:55:46", "49", "False", "https://www.netskope.com/jp/blog/latrodectus-rapid-evolution-continues-with-latest-new-payload-features", "None", "0", "johannes"
"2024-08-29 00:01:11", "1317070", "86.53.241.21:447", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:47:18", "100", "False", "https://search.censys.io/hosts/86.53.241.21", "AS3257,C2,censys,GTT-BACKBONE,RAT", "0", "DonPasci"
"2024-08-27 04:00:34", "1316522", "107.22.165.49:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:43:19", "100", "False", "https://search.censys.io/hosts/107.22.165.49", "AMAZON-AES,AS14618,C2,censys,RAT", "0", "DonPasci"
"2024-08-22 10:04:33", "1314694", "83.229.120.73:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:47:15", "100", "False", "https://search.censys.io/hosts/83.229.120.73", "AS139659,C2,censys,Mythic", "0", "DonPasci"
"2024-08-19 19:55:59", "1313657", "193.19.242.55:1443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:44:55", "100", "False", "https://search.censys.io/hosts/193.19.242.55", "AS35319,AS48964,C2,censys,RAT", "0", "DonPasci"
"2024-08-18 14:04:40", "1313194", "110.13.35.37:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:43:23", "100", "False", "https://search.censys.io/hosts/110.13.35.37", "AS9318,C2,censys,RAT,SKB-AS", "0", "DonPasci"
"2024-08-17 14:04:20", "1312402", "20.188.119.195:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:45:17", "100", "False", "https://search.censys.io/hosts/20.188.119.195", "AS8075,C2,censys,MICROSOFT-CORP-MSN-AS-BLOCK", "0", "DonPasci"
"2024-08-17 02:04:24", "1312338", "210.249.114.154:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:45:28", "100", "False", "https://search.censys.io/hosts/210.249.114.154", "AS2516,C2,censys,RAT", "0", "DonPasci"
"2024-08-16 14:02:33", "1312117", "20.188.119.195:80", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:45:17", "100", "False", "https://search.censys.io/hosts/20.188.119.195", "AS8075,C2,censys,MICROSOFT-CORP-MSN-AS-BLOCK", "0", "DonPasci"
"2024-08-15 22:40:43", "1311619", "23.24.178.35:3085", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:46:13", "100", "False", "https://search.censys.io/hosts/23.24.178.35", "AS20214,C2,censys,COMCAST-20214,RAT", "0", "DonPasci"
"2024-08-15 22:40:39", "1311614", "120.25.239.36:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:43:27", "100", "False", "https://search.censys.io/hosts/120.25.239.36", "ALIBABA-CN-NET,AS37963,C2,censys,RAT", "0", "DonPasci"
"2024-08-15 04:02:49", "1310952", "47.100.16.83:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:05", "100", "False", "None", "CobaltStrike,cs-watermark-391144938", "0", "abuse_ch"
"2024-08-11 21:50:57", "1309755", "146.70.158.198:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:43:45", "100", "False", "https://search.censys.io/hosts/146.70.158.198", "AS9009,C2,censys,M247", "0", "DonPasci"
"2024-07-09 19:05:36", "1296480", "43.138.0.179:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:43", "100", "False", "None", "CobaltStrike,cs-watermark-0,TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2024-07-09 06:51:58", "1296006", "213.149.181.121:469", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:45:29", "50", "False", "https://search.censys.io/hosts/213.149.181.121", "CYTA-NETWORK Internet Services,NetSupportRAT", "0", "drb_ra"
"2024-07-09 06:51:48", "1296003", "20.105.139.205:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:45:16", "50", "False", "https://search.censys.io/hosts/20.105.139.205", "MICROSOFT-CORP-MSN-AS-BLOCK,NetSupportRAT", "0", "drb_ra"
"2024-07-08 06:51:14", "1295752", "210.249.114.153:80", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:45:28", "50", "False", "https://search.censys.io/hosts/210.249.114.153", "KDDI KDDI CORPORATION,NetSupportRAT", "0", "drb_ra"
"2024-07-07 03:48:38", "1295405", "23.24.178.33:3085", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:46:13", "50", "False", "https://search.censys.io/hosts/23.24.178.33", "COMCAST-7922,NetSupportRAT", "0", "drb_ra"
"2024-07-03 06:52:14", "1292877", "210.249.114.154:80", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:45:28", "50", "False", "https://search.censys.io/hosts/210.249.114.154", "KDDI KDDI CORPORATION,NetSupportRAT", "0", "drb_ra"
"2024-07-01 10:05:40", "1291417", "198.244.197.118:9443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:45:09", "50", "False", "https://search.censys.io/hosts/198.244.197.118", "NetSupportRAT,OVH", "0", "drb_ra"
"2024-07-01 10:05:30", "1291414", "206.210.123.104:8888", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:45:22", "50", "False", "https://search.censys.io/hosts/206.210.123.104", "IASL,NetSupportRAT", "0", "drb_ra"
"2024-07-01 10:05:19", "1291411", "61.96.204.117:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:47:00", "50", "False", "https://search.censys.io/hosts/61.96.204.117", "DREAMX-AS DREAMLINE CO.,NetSupportRAT", "0", "drb_ra"
"2024-07-01 10:05:15", "1291410", "185.23.192.33:444", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:44:38", "50", "False", "https://search.censys.io/hosts/185.23.192.33", "NetSupportRAT,WINET", "0", "drb_ra"
"2024-07-01 10:05:10", "1291409", "2.136.235.200:3085", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:45:11", "50", "False", "https://search.censys.io/hosts/2.136.235.200", "NetSupportRAT,TELEFONICA_DE_ESPANA", "0", "drb_ra"
"2024-07-01 10:04:31", "1291397", "210.249.114.153:443", "ip:port", "botnet_cc", "win.netsupportmanager_rat", "NetSupport", "NetSupportManager RAT", "2026-09-01 05:45:28", "50", "False", "https://search.censys.io/hosts/210.249.114.153", "KDDI KDDI CORPORATION,NetSupportRAT", "0", "drb_ra"
"2024-06-30 21:00:04", "1291297", "londopas.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:35", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-06-30 21:00:03", "1291296", "berjimek.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:35", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-06-30 10:13:19", "1291010", "www.qianxinnbplus.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:35", "100", "False", "None", "CobaltStrike,cs-watermark-666666666,HKLNIL Landui Cloud ComputingHK Limited", "0", "drb_ra"
"2024-06-26 17:07:43", "1289423", "152.32.202.240:8443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:53", "100", "False", "None", "CobaltStrike,cs-watermark-666666", "0", "abuse_ch"
"2024-06-22 06:45:48", "1287670", "91.199.154.103:34211", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:47:22", "50", "False", "https://search.censys.io/hosts/91.199.154.103", "Sliver", "0", "drb_ra"
"2024-06-16 14:42:03", "1285430", "ieee-ecce.info", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:35", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-06-16 14:42:03", "1285431", "kauzalvip.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:35", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-06-16 14:42:03", "1285432", "nakit-yok.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:35", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-06-16 14:42:03", "1285433", "nathanhr.services", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:35", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-06-10 09:26:05", "1283657", "support.whatsappsignup.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:36", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,PEG TECH INC", "0", "drb_ra"
"2024-06-02 19:42:15", "1278385", "static.nvidiadrives.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:41", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-06-02 08:38:33", "1278172", "119.91.208.190:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:38", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2024-06-01 13:08:25", "1277937", "47.109.69.135:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:40", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Hangzhou Alibaba Advertising Co.Ltd.", "0", "drb_ra"
"2024-05-31 12:57:33", "1277588", "101.43.32.212:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:36", "100", "False", "None", "CobaltStrike,cs-watermark-100000,Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2024-05-29 12:53:46", "1276810", "asterchildrenshoes.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:41", "100", "False", "None", "BL Networks,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-05-29 12:52:55", "1276802", "124.223.41.181:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:38", "100", "False", "None", "CobaltStrike,cs-watermark-666666666,Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2024-05-29 10:17:04", "1276786", "8.210.9.201:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:41", "100", "False", "None", "ALIBABA-CN-NET Alibaba US Technology Co. Ltd.,CobaltStrike,cs-watermark-0", "0", "drb_ra"
"2024-05-25 22:18:29", "1275630", "pt-security.ru", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:36", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,MTW-AS", "0", "drb_ra"
"2024-05-24 16:54:06", "1274905", "158.220.115.82:31337", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:43:59", "50", "False", "", "sliver", "0", "Syndikalist"
"2024-05-24 13:15:35", "1274726", "47.92.127.53:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:40", "100", "False", "None", "CobaltStrike,cs-watermark-391144938,Hangzhou Alibaba Advertising Co.Ltd.", "0", "drb_ra"
"2024-05-22 11:06:58", "1273973", "119.28.83.149:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:37", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2024-05-21 18:51:48", "1273882", "51.15.16.116:443", "ip:port", "botnet_cc", "js.fakeupdates", "FakeUpdate,GhoLoader,SocGholish", "FAKEUPDATES", "2026-09-01 05:46:55", "50", "False", "https://search.censys.io/hosts/51.15.16.116", "Online SAS,SocGholish", "0", "drb_ra"
"2024-05-21 12:53:29", "1273456", "139.159.203.44:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:39", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,HWCSNET Huawei Cloud Service data center", "0", "drb_ra"
"2024-05-19 07:56:13", "1272788", "123.58.198.236:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:38", "100", "False", "None", "CobaltStrike,cs-watermark-391144938,UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED", "0", "drb_ra"
"2024-05-16 07:53:43", "1271699", "vip8806.mom", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:36", "100", "False", "None", "CNSERVERS LLC,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-05-15 22:13:26", "1271605", "blmdiscount.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:35", "100", "False", "None", "CobaltStrike,cs-watermark-674054486,FBWNETWORKS", "0", "drb_ra"
"2024-05-15 22:13:26", "1271606", "91.238.181.235:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:41", "100", "False", "None", "CobaltStrike,cs-watermark-674054486,FBWNETWORKS", "0", "drb_ra"
"2024-05-15 15:33:07", "1271347", "118.25.85.198:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:32", "100", "False", "https://search.censys.io/hosts/118.25.85.198", "AS45090,c2,censys,CobaltStrike,cs-watermark-305419896,TENCENT-NET-AP", "0", "DonPasci"
"2024-05-14 10:14:21", "1270684", "64.7.198.58:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:41", "100", "False", "None", "BLNWX,CobaltStrike,cs-watermark-426352781", "0", "drb_ra"
"2024-05-11 22:47:31", "1269727", "113.31.105.33:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:37", "100", "False", "None", "China Telecom (Group),CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-05-11 22:47:10", "1269724", "185.196.8.18:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:39", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Simple Carrier LLC", "0", "drb_ra"
"2024-05-11 22:47:09", "1269723", "action-winds.cfd", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:42", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Simple Carrier LLC", "0", "drb_ra"
"2024-05-11 22:47:08", "1269721", "microstar.cfd", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:42", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Simple Carrier LLC", "0", "drb_ra"
"2024-05-07 10:14:57", "1267565", "113.31.106.106:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:37", "100", "False", "None", "CHINANET-SHANGHAI-MAN China Telecom Group,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-05-07 07:48:08", "1267486", "111.230.12.238:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:37", "100", "False", "https://search.censys.io/hosts/111.230.12.238", "AS45090,c2,censys,CobaltStrike,cs-watermark-391144938,TENCENT-NET-AP", "0", "DonPasci"
"2024-05-06 12:49:25", "1266959", "134.122.130.186:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:38", "100", "False", "None", "BGPNET Global ASN,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-04-29 12:51:26", "1263972", "134.122.130.181:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:38", "100", "False", "None", "BGPNET Global ASN,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-04-28 17:59:06", "1263319", "124.71.106.234:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:38", "100", "False", "None", "CobaltStrike,cs-watermark-666666666,Huawei Cloud Service data center", "0", "drb_ra"
"2024-04-26 12:59:31", "1262666", "118.31.116.9:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:37", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Hangzhou Alibaba Advertising Co.Ltd.", "0", "drb_ra"
"2024-04-25 22:12:56", "1262568", "8.134.11.7:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:41", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-04-24 13:08:20", "1261845", "165.227.108.186:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:39", "100", "False", "None", "CobaltStrike,cs-watermark-970865301,DigitalOcean LLC", "0", "drb_ra"
"2024-04-23 18:05:49", "1260893", "80.66.75.9:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:41", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,GRIZ-INET-SERVICE", "0", "drb_ra"
"2024-04-23 18:05:43", "1260890", "101.201.54.74:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:36", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,Hangzhou Alibaba Advertising Co.Ltd.", "0", "drb_ra"
"2024-04-21 15:09:17", "1259796", "62.204.41.11:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:40", "100", "False", "https://search.censys.io/hosts/62.204.41.11", "AS59425,c2,censys,CobaltStrike,cs-watermark-1580103824,HORIZONMSK-AS", "0", "DonPasci"
"2024-04-02 10:17:26", "1252542", "185.196.10.121:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:39", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,SIMPLECARRIER", "0", "drb_ra"
"2024-03-27 14:42:02", "1250157", "soneypaly.club", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:42", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2024-03-27 07:57:29", "1249815", "47.105.69.34:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:40", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-03-22 19:47:18", "1248363", "https://titnovacrion.top/live/", "url", "botnet_cc", "win.unidentified_111", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Unidentified 111 (Latrodectus)", "2026-09-01 05:54:16", "100", "False", "", "None", "0", "Cryptolaemus1"
"2024-03-11 18:05:31", "1245707", "https://scifimond.com/live/", "url", "botnet_cc", "win.unidentified_111", "BLACKWIDOW,IceNova,Latrodectus,Lotus", "Unidentified 111 (Latrodectus)", "2026-09-01 05:25:13", "100", "False", "", "latrodectus", "0", "Cryptolaemus1"
"2024-03-09 20:54:40", "1245476", "47.100.87.177:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:40", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-03-06 20:55:37", "1244781", "194.165.16.55:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:39", "100", "False", "None", "CobaltStrike,cs-watermark-674054486,FLYSERVERS-ENDCLIENTS", "0", "drb_ra"
"2024-03-06 10:12:56", "1244726", "googlesupportacc.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:42", "100", "False", "None", "ASSEFLOW,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2024-02-21 22:13:19", "1241656", "121.43.55.149:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:38", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike,cs-watermark-391144938", "0", "drb_ra"
"2024-02-07 10:12:21", "1237621", "qw.regcssv.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:44", "100", "False", "None", "CobaltStrike,cs-watermark-1580103824,FLYSERVERS-ASN", "0", "drb_ra"
"2024-02-03 19:38:15", "1236577", "ec2-3-22-66-152.us-east-2.compute.amazonaws.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:44", "100", "False", "https://search.censys.io/hosts/3.22.66.152+ec2-3-22-66-152.us-east-2.compute.amazonaws.com", "AMAZON-02,AS16509,C2,censys", "0", "thehappydinoa"
"2024-02-02 06:00:13", "1236276", "20.56.70.245:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:39", "80", "False", "None", "None", "0", "malpulse"
"2024-01-30 06:20:34", "1235332", "www.louangelwolf.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:46", "100", "False", "", "cobaltstrike,cs-watermark-1551089073", "0", "myceliumbroker"
"2024-01-28 06:22:18", "1234854", "kkudndkwatnfevcaqeefytqnh.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:44", "100", "False", "", "cobaltstrike,cs-watermark-987654321", "0", "myceliumbroker"
"2024-01-28 06:22:17", "1234859", "whxzqkbbtzvdyxdeseoiyujzs.co", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:45", "100", "False", "", "cobaltstrike,cs-watermark-987654321", "0", "myceliumbroker"
"2024-01-28 06:22:17", "1234860", "uohhunkmnfhbimtagizqgwpmv.to", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:45", "100", "False", "", "cobaltstrike,cs-watermark-987654321", "0", "myceliumbroker"
"2024-01-27 14:31:40", "1234928", "114.55.133.151:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:37", "100", "False", "https://search.censys.io/hosts/114.55.133.151", "AS37963,C2,censys", "0", "thehappydinoa"
"2024-01-27 14:31:20", "1234909", "117.72.39.83:30005", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:48", "100", "False", "https://search.censys.io/hosts/117.72.39.83", "AS141679,C2,censys", "0", "thehappydinoa"
"2024-01-24 18:49:24", "1234304", "38.147.189.199:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:46:28", "50", "False", "https://search.censys.io/hosts/38.147.189.199", "Pupy RAT,XNNET", "0", "drb_ra"
"2024-01-23 13:53:21", "1233919", "www.idn15r69vh3fwhzclfoeuaoy.today", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:46", "100", "False", "https://search.censys.io/hosts/8.219.229.99+www.idn15r69vh3fwhzclfoeuaoy.today", "AS45102,C2,censys", "0", "thehappydinoa"
"2024-01-18 13:44:13", "1231802", "164-90-169-184.cprapid.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:46", "100", "False", "https://search.censys.io/hosts/164.90.169.184+164-90-169-184.cprapid.com", "C2,censys,DIGITALOCEAN-ASN", "0", "thehappydinoa"
"2024-01-16 08:13:32", "1230963", "https://65.21.187.53/", "url", "botnet_cc", "win.vidar", "None", "Vidar", "2026-09-01 05:10:17", "100", "False", "", "Vidar", "0", "crep1x"
"2024-01-15 16:27:00", "1230909", "lz4.tiktok123.life", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:45", "100", "False", "", "cobaltstrike,cs-watermark-987654321", "0", "myceliumbroker"
"2024-01-13 06:47:25", "1230478", "164.92.79.49:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:08", "50", "False", "https://search.censys.io/hosts/164.92.79.49", "DIGITALOCEAN-ASN,Havoc", "0", "drb_ra"
"2024-01-12 18:36:24", "1230429", "site.dev.hutechweb.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:45", "100", "False", "", "cobaltstrike,cs-watermark-987654321", "0", "myceliumbroker"
"2024-01-11 13:33:38", "1230163", "158.220.115.82:443", "ip:port", "botnet_cc", "win.sliver", "None", "Sliver", "2026-09-01 05:43:59", "90", "False", "https://search.censys.io/hosts/158.220.115.82", "C2,censys,CONTABO", "0", "thehappydinoa"
"2024-01-11 06:54:21", "1230076", "ns1.fiducaire.lu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:45", "100", "False", "", "cobaltstrike,cs-watermark-1263551644", "0", "myceliumbroker"
"2024-01-11 06:54:21", "1230077", "ns1.asurances.lu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:45", "100", "False", "", "cobaltstrike,cs-watermark-1263551644", "0", "myceliumbroker"
"2024-01-11 06:54:20", "1230078", "sagsblog.telinduslab.lu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:45", "100", "False", "", "cobaltstrike,cs-watermark-1263551644", "0", "myceliumbroker"
"2024-01-11 06:54:20", "1230079", "ns1.jocelynhealth.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:45", "100", "False", "", "cobaltstrike,cs-watermark-1590258876", "0", "myceliumbroker"
"2024-01-10 10:50:13", "1229840", "ns.emaratalyoum.me", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:45", "100", "False", "", "cobaltstrike,cs-watermark-1727139162", "0", "myceliumbroker"
"2024-01-10 06:48:44", "1229818", "130.51.20.64:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:43:35", "50", "False", "https://search.censys.io/hosts/130.51.20.64", "Pupy RAT,TZULO", "0", "drb_ra"
"2024-01-10 06:48:20", "1229817", "161.35.239.147:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:44:04", "50", "False", "https://search.censys.io/hosts/161.35.239.147", "DIGITALOCEAN-ASN,Havoc", "0", "drb_ra"
"2024-01-09 14:55:19", "1229694", "emailmigration.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:44", "100", "False", "", "cobaltstrike,cs-watermark-1892870985", "0", "myceliumbroker"
"2024-01-09 14:55:17", "1229695", "ns1.emailmigration.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:45", "100", "False", "", "cobaltstrike,cs-watermark-1892870985", "0", "myceliumbroker"
"2024-01-09 08:45:29", "1229661", "111.92.243.236:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:37", "100", "False", "None", "CobaltStrike,cs-watermark-666666666,HFTCL-AS-AP High Family Technology Co. Limited", "0", "drb_ra"
"2024-01-09 05:30:32", "1229599", "82.65.19.134:4443", "ip:port", "botnet_cc", "win.asyncrat", "None", "AsyncRAT", "2026-09-01 05:47:15", "100", "False", "https://search.censys.io/hosts/82.65.19.134", "C2,censys,PROXAD,RAT", "0", "thehappydinoa"
"2024-01-05 21:31:13", "1228458", "139.9.62.19:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:39", "100", "False", "https://search.censys.io/hosts/139.9.62.19", "C2,censys", "0", "thehappydinoa"
"2024-01-02 14:31:12", "1227297", "106.54.209.36:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:36", "100", "False", "https://search.censys.io/hosts/106.54.209.36", "C2,censys", "0", "thehappydinoa"
"2023-12-30 11:33:25", "1226488", "astra4512.startdedicated.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:46", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,GD-EMEA-DC-SXB1", "0", "drb_ra"
"2023-12-30 06:48:38", "1226427", "38.147.188.61:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:46:28", "50", "False", "https://search.censys.io/hosts/38.147.188.61", "Pupy RAT,XNNET", "0", "drb_ra"
"2023-12-29 18:48:19", "1226314", "38.147.188.28:443", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:46:27", "50", "False", "https://search.censys.io/hosts/38.147.188.28", "Pupy RAT,XNNET", "0", "drb_ra"
"2023-12-27 22:15:29", "1224105", "cs.xcb.one", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:46", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,MICROSOFT-CORP-MSN-AS-BLOCK", "0", "drb_ra"
"2023-12-26 06:46:27", "1223678", "8.140.203.92:7817", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-09-01 05:47:10", "50", "False", "https://search.censys.io/hosts/8.140.203.92", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,Deimos", "0", "drb_ra"
"2023-12-18 05:00:11", "1221451", "62.234.27.204:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:40", "80", "False", "None", "None", "0", "malpulse"
"2023-12-16 22:12:14", "1213636", "MicrosoftSyst3m.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:47", "100", "False", "None", "CobaltStrike,cs-watermark-674054486,GLOBALLAYER", "0", "drb_ra"
"2023-12-15 18:59:31", "1213211", "117.72.39.83:33333", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:48", "100", "False", "https://search.censys.io/hosts/117.72.39.83", "C2,censys", "0", "thehappydinoa"
"2023-12-04 08:45:50", "1209246", "unzip2.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:47", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP-CN Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2023-11-28 13:32:35", "1207072", "60.205.115.92:60000", "ip:port", "botnet_cc", "apk.viper_rat", "None", "Viper RAT", "2026-09-01 05:47:00", "100", "False", "https://search.censys.io/hosts/60.205.115.92", "C2,censys,RAT", "0", "thehappydinoa"
"2023-11-24 08:21:04", "1205166", "techsyscloud.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:48", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-11-24 08:21:04", "1205167", "yify88.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:48", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-11-24 08:21:02", "1205164", "americcorp.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:47", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-11-22 20:04:09", "1204685", "tech-guard.vguard.tech", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:48", "100", "False", "https://search.censys.io/hosts/44.204.120.159+tech-guard.vguard.tech", "AMAZON-AES,C2,censys", "0", "thehappydinoa"
"2023-11-15 20:24:37", "1202628", "ns.manager.moonlighter.space", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:48", "100", "False", "None", "CobaltStrike,cs-watermark-1893164628,DIGITALOCEAN-ASN", "0", "drb_ra"
"2023-11-09 17:50:07", "1201144", "101.34.222.38:60000", "ip:port", "botnet_cc", "apk.viper_rat", "None", "Viper RAT", "2026-09-01 05:43:03", "100", "False", "https://search.censys.io/hosts/101.34.222.38", "C2,censys,RAT", "0", "thehappydinoa"
"2023-11-09 04:06:44", "1200343", "dev.theokanegroup.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:48", "100", "False", "https://search.censys.io/hosts/134.209.164.110+dev.theokanegroup.com", "C2,censys,DIGITALOCEAN-ASN", "0", "thehappydinoa"
"2023-11-06 18:07:30", "1199506", "bwyb.love", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:47", "100", "False", "https://search.censys.io/hosts/47.242.158.114+bwyb.love", "C2,censys", "0", "thehappydinoa"
"2023-11-05 15:00:42", "1199160", "www.sunwu.world", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:48", "100", "False", "https://search.censys.io/hosts/82.157.149.194+www.sunwu.world", "C2,censys", "0", "thehappydinoa"
"2023-10-24 10:39:59", "1192255", "139.155.148.131:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:39", "100", "False", "https://search.censys.io/hosts/139.155.148.131", "C2,censys", "0", "thehappydinoa"
"2023-10-20 21:57:56", "1191379", "www.goocoinorg.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:48", "100", "False", "https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=INCLUDE&q=name%3A+www.goocoinorg.com&ref=threatfox", "C2,censys", "0", "thehappydinoa"
"2023-10-16 08:49:32", "1189545", "airlinesapp.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:47", "100", "False", "None", "CobaltStrike,cs-watermark-587247372,DigitalOcean LLC", "0", "drb_ra"
"2023-10-13 19:49:34", "1188605", "lectricelfuel.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:48", "100", "False", "https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=INCLUDE&q=name%3A+lectricelfuel.com&ref=threatfox", "C2,censys,DIGITALOCEAN-ASN", "0", "thehappydinoa"
"2023-10-11 12:59:56", "1187462", "117.72.8.192:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:37", "100", "False", "https://search.censys.io/hosts/117.72.8.192", "C2,censys", "0", "thehappydinoa"
"2023-09-30 16:12:13", "1180378", "111.229.187.212:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:36", "80", "False", "None", "None", "0", "malpulse"
"2023-09-21 09:29:08", "1165497", "igo0gle.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:46", "100", "False", "None", "AS-ALVIVA,CobaltStrike,cs-watermark-674054486", "0", "drb_ra"
"2023-09-20 18:47:20", "1165172", "8.217.217.243:8082", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-09-01 05:47:10", "50", "False", "https://search.censys.io/hosts/8.217.217.243", "ALIBABA-CN-NET Alibaba US Technology Co. Ltd.,Deimos", "0", "drb_ra"
"2023-09-09 20:06:55", "1155921", "csxv.sec.cm", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:47", "100", "False", "None", "CHANGWAY-AS,CobaltStrike,cs-watermark-987654321", "0", "drb_ra"
"2023-09-05 21:52:59", "1155319", "43.136.38.59:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:40", "100", "False", "None", "CobaltStrike,cs-watermark-1580103824,Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2023-08-26 18:42:05", "1152278", "withoutedge.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:51", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-26 18:42:04", "1152277", "thconnewfoot.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:51", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-26 18:42:03", "1152274", "caixas.link", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:49", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-26 18:42:03", "1152275", "ddllsearch.site", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:50", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-26 18:42:03", "1152276", "gepcash.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:50", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-26 18:42:02", "1152272", "amazonclouds.link", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:49", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-26 18:42:02", "1152273", "amur-city.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:49", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-25 06:48:54", "1151932", "77.74.208.123:443", "ip:port", "botnet_cc", "win.havoc", "Havokiz", "Havoc", "2026-09-01 05:47:09", "50", "False", "https://search.censys.io/hosts/77.74.208.123", "BRETAGNETELECOM,Havoc", "0", "drb_ra"
"2023-08-23 11:56:21", "1151693", "43.153.222.28:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:42", "100", "False", "None", "CobaltStrike,cs-watermark-100000,Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2023-08-14 18:46:43", "1149951", "164.92.145.128:7810", "ip:port", "botnet_cc", "win.brute_ratel_c4", "BOLDBADGER,BruteRatel", "Brute Ratel C4", "2026-09-01 05:44:08", "50", "False", "https://search.censys.io/hosts/164.92.145.128", "Brute Ratel C4,DIGITALOCEAN-ASN", "0", "drb_ra"
"2023-08-14 16:00:05", "1149946", "pctor.link", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-14 16:00:04", "1149945", "tehomics.link", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-14 16:00:03", "1149944", "instant-healthonline.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:51", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-08-05 14:38:23", "1148731", "stratpringl.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:51", "100", "False", "None", "CobaltStrike,cs-watermark-1580103824,PINDC-AS", "0", "drb_ra"
"2023-08-04 11:01:52", "1148487", "onlinetechdesk.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:52", "100", "False", "None", "AS-COLOCROSSING,CobaltStrike,cs-watermark-587247372", "0", "drb_ra"
"2023-08-03 10:25:44", "1146843", "harmonyshoused.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:52", "100", "False", "None", "CobaltStrike,cs-watermark-206546002,HVC-AS", "0", "drb_ra"
"2023-08-03 10:24:41", "1146834", "api.office-updates.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:47", "100", "False", "None", "CobaltStrike,cs-watermark-494165167,DIGITALOCEAN-ASN", "0", "drb_ra"
"2023-08-02 10:24:58", "1146619", "mkbkygbgwcdc.buzz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:50", "100", "False", "None", "CobaltStrike,cs-watermark-391144938,KAOPU-HK Kaopu Cloud HK Limited", "0", "drb_ra"
"2023-07-25 10:17:22", "1140114", "tcessolution.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:48", "100", "False", "None", "AS202973,CobaltStrike,cs-watermark-587247372", "0", "drb_ra"
"2023-07-15 12:48:31", "1138196", "rw1.sentrysource.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:45", "100", "False", "None", "CobaltStrike,cs-watermark-93937751,ROGERS-COMMUNICATIONS", "0", "drb_ra"
"2023-07-07 19:56:07", "1136628", "198.13.42.85:53", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:59", "100", "False", "None", "CobaltStrike,cs-watermark-100000,The Constant Company LLC", "0", "drb_ra"
"2023-07-07 19:56:05", "1136627", "aaa.ad4min.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:35", "100", "False", "None", "CobaltStrike,cs-watermark-100000,The Constant Company LLC", "0", "drb_ra"
"2023-07-03 15:42:02", "1135804", "pedagogists.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-07-03 15:42:01", "1135803", "cdnsupply.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-06-28 22:51:22", "1134787", "1.15.248.225:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:36", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited", "0", "drb_ra"
"2023-06-26 08:12:17", "1134128", "check1.judicical.ml", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:37", "100", "False", "None", "CNSERVERS,CobaltStrike,cs-watermark-100000000", "0", "drb_ra"
"2023-06-26 08:11:33", "1134127", "check.judicical.ml", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:37", "100", "False", "None", "CNSERVERS,CobaltStrike,cs-watermark-100000000", "0", "drb_ra"
"2023-06-22 17:12:29", "1133505", "usadevgroup.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:53", "100", "False", "None", "CobaltStrike,cs-watermark-587247372,WAICORE-TRANSIT", "0", "drb_ra"
"2023-06-11 22:26:06", "1128165", "heastings.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:52", "100", "False", "None", "CobaltStrike,cs-watermark-206546002,M247", "0", "drb_ra"
"2023-06-09 20:00:05", "1127715", "unitechdb.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-06-09 20:00:04", "1127713", "cornptia.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-06-09 20:00:04", "1127714", "eyefinancemonitor.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-06-08 16:27:41", "1127447", "surplusofer.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:53", "100", "False", "None", "CobaltStrike,cs-watermark-206546002,HVC-AS", "0", "drb_ra"
"2023-05-25 15:42:02", "1122048", "dianqi2.dianqi1.jiayongdianqi.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:38", "100", "False", "None", "CobaltStrike,cs-watermark-492498911,XNNET LLC", "0", "drb_ra"
"2023-05-25 15:41:46", "1122047", "dianqi1.dianqi2.jiayongdianqi.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:37", "100", "False", "None", "CobaltStrike,cs-watermark-492498911,XNNET LLC", "0", "drb_ra"
"2023-05-25 15:41:31", "1122046", "dianqi2.jiayongdianqi.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:38", "100", "False", "None", "CobaltStrike,cs-watermark-492498911,XNNET LLC", "0", "drb_ra"
"2023-05-25 15:41:10", "1122045", "dianqi1.jiayongdianqi.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:38", "100", "False", "None", "CobaltStrike,cs-watermark-492498911,XNNET LLC", "0", "drb_ra"
"2023-05-24 19:36:26", "1121462", "skynet-i.asuscomm.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:47:40", "100", "False", "None", "CobaltStrike,cs-watermark-987654321,STC-AS PJSC Rostelecom Krasnodar", "0", "drb_ra"
"2023-05-23 12:37:36", "1120772", "australiansuper.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:53", "100", "False", "None", "Amazon.com Inc.,CobaltStrike,cs-watermark-348901740", "0", "drb_ra"
"2023-05-16 10:00:03", "1116637", "sheersdesigns.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-05-16 10:00:02", "1116636", "artmicrodesign.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-05-06 16:13:31", "1112839", "situotech.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:53", "100", "False", "None", "CobaltStrike,cs-watermark-587247372,HARMONYHOSTING-AS", "0", "drb_ra"
"2023-05-05 12:42:12", "1111492", "157.245.155.179:9000", "ip:port", "botnet_cc", "win.pupy", "Patpoopy", "pupy", "2026-09-01 05:43:58", "50", "False", "https://search.censys.io/hosts/157.245.155.179", "DIGITALOCEAN-ASN,Pupy RAT", "0", "drb_ra"
"2023-05-04 06:46:43", "1110863", "39.106.36.96:443", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-09-01 05:46:32", "50", "False", "https://search.censys.io/hosts/39.106.36.96", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,Deimos", "0", "drb_ra"
"2023-05-04 06:46:41", "1110862", "36.95.131.171:9091", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-09-01 05:46:25", "50", "False", "https://search.censys.io/hosts/36.95.131.171", "Deimos,TELKOMNET-AS-AP PT Telekomunikasi Indonesia", "0", "drb_ra"
"2023-05-04 06:46:35", "1110860", "18.162.155.202:443", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-09-01 05:44:29", "50", "False", "https://search.censys.io/hosts/18.162.155.202", "AMAZON-02,Deimos", "0", "drb_ra"
"2023-05-04 06:46:33", "1110859", "8.218.26.114:443", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-09-01 05:47:10", "50", "False", "https://search.censys.io/hosts/8.218.26.114", "ALIBABA-CN-NET Alibaba US Technology Co. Ltd.,Deimos", "0", "drb_ra"
"2023-05-04 06:46:30", "1110858", "3.209.12.178:3060", "ip:port", "botnet_cc", "win.deimos", "None", "Deimos", "2026-08-31 08:46:14", "50", "False", "https://search.censys.io/hosts/3.209.12.178", "AMAZON-AES,Deimos", "0", "drb_ra"
"2023-04-22 18:00:03", "1106335", "maboloud.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-04-22 18:00:03", "1106336", "matong.buzz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-04-21 10:20:17", "1105988", "qw.sveexec.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:54", "100", "False", "None", "CobaltStrike,cs-watermark-1580103824,GLOBALLAYER", "0", "drb_ra"
"2023-04-15 12:28:52", "1103771", "77.242.250.36:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:41", "100", "False", "None", "CobaltStrike,cs-watermark-1416875320", "0", "drb_ra"
"2023-04-12 09:02:56", "1102558", "lls-rs.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:54", "100", "False", "None", "CobaltStrike,cs-watermark-0,PROSPERO-AS", "0", "drb_ra"
"2023-04-03 07:21:03", "1096685", "iony.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-04-03 07:21:03", "1096686", "office36o.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-04-03 07:21:02", "1096683", "feyrijavac.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-04-03 07:21:02", "1096684", "fidelyus.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-03-29 22:27:30", "1095276", "jacketsupport.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:54", "100", "False", "None", "CobaltStrike,cs-watermark-587247372,GLOBALLAYER", "0", "drb_ra"
"2023-03-29 04:51:21", "1095042", "duckducklive.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:54", "100", "False", "https://www.virustotal.com/gui/file/b5da1db6d69f2f872e603beb0f121c68f3320ed33a0c9835bfc1a931d177c947", "391144938,Beacon,Cobalt Strike,CobaltStrike", "0", "AndreGironda"
"2023-03-28 15:52:23", "1094484", "louvree.abudhabe.info", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:52", "100", "False", "None", "CobaltStrike,cs-watermark-1826426664,EMIRATES-INTERNET Emirates Internet", "0", "drb_ra"
"2023-03-20 17:21:02", "1092077", "jquerymaingame.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:55", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-03-20 17:21:02", "1092078", "mail-my-account.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:55", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-03-20 17:21:02", "1092079", "my-accounts-gooogle.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:55", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-03-20 17:21:02", "1092080", "pegistrationads.site", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:55", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-03-20 17:21:01", "1092075", "eaglehardwares.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:55", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-03-20 17:21:01", "1092076", "information.baby", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:55", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-03-20 13:36:29", "1092009", "moviegallerys.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:54", "100", "False", "None", "CobaltStrike,cs-watermark-206546002,UAB Cherry Servers", "0", "drb_ra"
"2023-03-17 22:40:17", "1091575", "acroserver.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:54", "100", "False", "None", "CobaltStrike,cs-watermark-674054486,Flyservers S.A.", "0", "drb_ra"
"2023-03-17 19:45:49", "1091535", "atechniques.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:54", "100", "False", "None", "AEZA-AS,CobaltStrike,cs-watermark-674054486", "0", "drb_ra"
"2023-03-17 13:33:15", "1091454", "winsatoom.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:55", "100", "False", "None", "AS-CHOOPA,CobaltStrike,cs-watermark-668694132", "0", "drb_ra"
"2023-03-13 04:47:12", "1087542", "devoinnanote.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:55", "100", "False", "None", "CobaltStrike,cs-watermark-2130772225,SHARKTECH", "0", "drb_ra"
"2023-02-26 09:03:09", "1082976", "ponzinivek.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-26 09:03:09", "1082977", "ruplearben.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-26 09:03:09", "1082978", "talonbilling.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-26 09:03:09", "1082979", "gorillagaz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-26 09:03:09", "1082980", "chanimoblie.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-25 14:42:02", "1082871", "kbnexc.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-25 14:42:01", "1082870", "jquerysslx.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-25 13:15:07", "1082838", "e-servicesolutions.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:55", "100", "False", "None", "AEZA GROUP Ltd,CobaltStrike,cs-watermark-674054486", "0", "drb_ra"
"2023-02-24 02:30:56", "1082591", "devsecurityservices.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:55", "100", "False", "None", "CobaltStrike,cs-watermark-674054486,Flyservers S.A.", "0", "drb_ra"
"2023-02-23 13:06:07", "1082417", "www.vmware.rest", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:57", "100", "False", "None", "AS-CHOOPA,CobaltStrike,cs-watermark-1234567890", "0", "drb_ra"
"2023-02-17 18:25:01", "1081018", "galspost.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:56", "100", "False", "None", "CobaltStrike,cs-watermark-1101991775,Microsoft Corporation", "0", "drb_ra"
"2023-02-16 14:54:22", "1080735", "imvcatool.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:56", "100", "False", "None", "AEZA-AS,CobaltStrike,cs-watermark-674054486", "0", "drb_ra"
"2023-02-04 19:39:46", "1078198", "aspnetcenter.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:57", "100", "False", "None", "CobaltStrike,Web Gostaran Bandar Company PJS", "0", "drb_ra"
"2023-02-04 18:42:02", "1078172", "audelr.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-04 18:42:02", "1078173", "csou.link", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-04 18:42:02", "1078174", "integrated-security.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-04 18:42:02", "1078175", "uranustechsolution.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-02-03 17:24:39", "1078062", "getsafeblog.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:57", "100", "False", "None", "CobaltStrike,PLI-AS", "0", "drb_ra"
"2023-02-02 19:40:26", "1076907", "qw.svcshosvt.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:56", "100", "False", "None", "CHERRYSERVERS2-AS,CobaltStrike", "0", "drb_ra"
"2023-02-02 19:39:18", "1076896", "nxsimdevelop.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:56", "100", "False", "None", "AEZA-AS,CobaltStrike", "0", "drb_ra"
"2023-02-01 02:21:19", "1075651", "appdevtechnology.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:55", "100", "False", "None", "AEZA-AS,CobaltStrike", "0", "drb_ra"
"2023-01-31 15:09:13", "1075540", "dbx.formsift.io", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:55", "100", "False", "None", "Amazon.com Inc.,CobaltStrike", "0", "drb_ra"
"2023-01-29 11:29:55", "1075020", "devcloudpro.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:58", "100", "False", "None", "CobaltStrike,FLYSERVERS-ENDCLIENTS", "0", "drb_ra"
"2023-01-28 09:40:24", "1074894", "164.90.158.199:7443", "ip:port", "botnet_cc", "unknown", "None", "Unknown malware", "2026-09-01 05:44:08", "50", "False", "https://search.censys.io/hosts/164.90.158.199", "DIGITALOCEAN-ASN,Mythic", "0", "drb_ra"
"2023-01-25 19:42:03", "1074144", "support-wellsfargovis.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-25 19:42:02", "1074141", "recoverporta1.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-25 19:42:02", "1074142", "recoverportal2.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-25 19:42:02", "1074143", "recoveryweb2.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-23 20:33:42", "1073670", "vd-ntds.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:57", "100", "False", "None", "CobaltStrike,PROSPERO-AS", "0", "drb_ra"
"2023-01-20 14:21:02", "1070164", "hnsxpharm.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-20 14:21:02", "1070165", "myjqueryss.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-20 14:21:02", "1070167", "telusmobility-billed.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-20 14:21:02", "1070168", "thenbkgroup.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2023-01-20 11:23:14", "1070137", "avdev.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:58", "100", "False", "None", "CobaltStrike,Flyservers S.A.", "0", "drb_ra"
"2023-01-19 19:53:20", "1069980", "qw.execsvct.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:58", "100", "False", "None", "CHERRYSERVERS2-AS,CobaltStrike", "0", "drb_ra"
"2023-01-19 14:15:53", "1069895", "azurecloudfire.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:58", "100", "False", "None", "CobaltStrike,ITRESHENIYA-AS", "0", "drb_ra"
"2023-01-19 11:23:42", "1069868", "goupdatemic.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:59", "100", "False", "None", "CobaltStrike,GOOGLE", "0", "drb_ra"
"2023-01-18 02:29:29", "1069579", "mwg-update.cloud", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:59", "100", "False", "None", "CobaltStrike,HVC-AS", "0", "drb_ra"
"2023-01-13 17:37:32", "1068206", "goodsport2023.win", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:59", "100", "False", "None", "CobaltStrike,VOM", "0", "drb_ra"
"2023-01-12 21:56:23", "1068079", "blackandwhiteshoose.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:59", "100", "False", "None", "CHERRYSERVERS3-AS,CobaltStrike", "0", "drb_ra"
"2023-01-12 20:55:06", "1068045", "qw.svcrencst.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:59", "100", "False", "None", "CHERRYSERVERS2-AS,CobaltStrike", "0", "drb_ra"
"2023-01-12 14:45:18", "1067954", "realsecuritystore.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:59", "100", "False", "None", "CobaltStrike,Private Layer INC", "0", "drb_ra"
"2023-01-12 13:04:56", "1067924", "fixx.sbs", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:56", "100", "False", "None", "CobaltStrike,SNEL", "0", "drb_ra"
"2023-01-11 10:59:45", "1067646", "allowedcloud.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:57", "100", "False", "None", "CobaltStrike,HIVELOCITY Inc.", "0", "drb_ra"
"2022-12-31 19:48:39", "1064196", "freegaysnews.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:00", "100", "False", "None", "CHERRYSERVERS2-AS,CobaltStrike", "0", "drb_ra"
"2022-12-31 18:58:09", "1064176", "topgamenetwork.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:00", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-12-31 16:21:02", "1064173", "zfuxwvouqvnttpsrxe.tech", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:52", "1064075", "cloudyspaces.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:44:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:52", "1064076", "666621.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:44:00", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:51", "1064069", "144.217.207.19:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:51", "1064070", "allsdone.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:51", "1064071", "ipsandwich.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:51", "1064072", "cookieholder.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:51", "1064073", "pingcheker.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:51", "1064074", "wagonovk.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:59", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:50", "1064062", "microsoftupdateassist.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:50", "1064063", "qvibova.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:50", "1064064", "cloudwebpictures.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:50", "1064065", "metalkost.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:50", "1064066", "m7r4r2i2.stackpathcdn.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:50", "1064067", "online.cloudwebpictures.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:58", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:49", "1064057", "bartiba.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:49", "1064058", "varnart.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:49", "1064059", "nsfdfdfdf.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:49", "1064060", "micorsoft.cloud", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:49", "1064061", "aigouing.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064046", "ksplsoft.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:55", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064047", "lastinsuranceteam.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064048", "msdnsservice.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064049", "securequoteme.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064050", "techdevcorp.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064051", "syncorporation.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:55", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064052", "visualstudioapp.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:55", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064053", "altreeservicellc.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:55", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064054", "discountshadesdirect.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:55", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064055", "setechnowork.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:55", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:48", "1064056", "technicollit.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:55", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064038", "shiyicaster.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064039", "cdn-top.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:56", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064040", "onesecondservice.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064041", "vpnupdaters.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064042", "rodinscoldly.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064043", "antariscapital.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064044", "ftwealthmgt.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:47", "1064045", "iconiq-capitel.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:54", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:46", "1064031", "asset-trades.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:46", "1064032", "telemetrin.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:46", "1064033", "secupdate4win.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:46", "1064034", "cdn-start.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:46", "1064035", "capitalmanagementdata.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:46", "1064036", "lawsolutions.cloud", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:45", "1064024", "diegomaster.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:51", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:45", "1064025", "dp-test1.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:51", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:45", "1064026", "cloudkey.digital", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:51", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:45", "1064027", "updatevpncitrix.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:51", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:45", "1064028", "classgum.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:51", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:45", "1064029", "edgeupdater.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:51", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:45", "1064030", "gfcbm.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064016", "barmnava.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:49", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064017", "firewallwithadvancedserurity.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:49", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064018", "lgbtqplusfriendlydomain.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:50", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064019", "market-stats.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:50", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064020", "apabfs.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:50", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064021", "fziomerof.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:50", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064022", "fserd.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:50", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:44", "1064023", "verofes.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:50", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:43", "1064015", "postofficeltdc.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:47", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064006", "jarvcza.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:46", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064007", "teystyjeem.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:53", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064008", "faceupfinder.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:46", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064009", "costacancordia.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:52", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064010", "lapsusareskids.world", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:47", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064011", "msupdater.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:47", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064012", "dwordname.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:47", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064013", "trademot.finance", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:47", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:42", "1064014", "agreminj.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:47", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1063998", "exchangeallltd.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:45", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1063999", "guggenheimpartners-survey.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:45", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1064000", "caresalonservices.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:45", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1064001", "just-findncall.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:45", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1064002", "fluoxi.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:45", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1064003", "buynet.digital", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:45", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1064004", "everythingchecker.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:46", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:41", "1064005", "dezword.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:46", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:40", "1063995", "goksearch.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:44", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:40", "1063996", "polyhaz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:45", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:40", "1063997", "data-protection-test.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:45", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:39", "1063992", "update04.microsoft-essentials.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:43", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:38", "1063991", "akaluij.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:45", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:36", "1063989", "43.129.7.189:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:38", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:36", "1063990", "82.156.241.148:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:43", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:33", "1063985", "donormix.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:33", "1063986", "hardicki.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:50", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:33", "1063987", "stfconnect.onthewifi.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:45", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:33", "1063988", "agsdef.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:41", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:32", "1063978", "observerinfo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:32", "1063979", "dehikz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:32", "1063980", "cocanewline.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:32", "1063981", "rainqor.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:32", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:32", "1063982", "axelkim.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:47", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:32", "1063983", "azimurs.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:45", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:32", "1063984", "innovativesitecreations.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:31", "1063972", "creditscore.usbankcreditcards.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:31", "1063975", "megumin.tech", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:31", "1063976", "loanhelp.support", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:31", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:31", "1063977", "volsecure.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:30", "1063966", "domtern.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:30", "1063968", "drakr.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:30", "1063969", "devcisco.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:29", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:30", "1063971", "web-news-blog.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:30", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:29", "1063963", "bankafrika.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:29", "1063964", "mssfr.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:29", "1063965", "edgekey.tech", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:28", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:28", "1063955", "webyoutubeshop.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:28", "1063956", "extic.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:28", "1063957", "reykh.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:28", "1063959", "propertynewsclub.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:28", "1063960", "afindisc.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:28", "1063961", "propertyinfogroup.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:28", "1063962", "topnewscompany.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:27", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:27", "1063950", "baidenfree.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:27", "1063951", "directoryupdate.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:27", "1063952", "azmnetwork.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:27", "1063953", "onevisioncommunications.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:27", "1063954", "campioni-imam.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:25", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:26", "1063943", "serviceapp1.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:26", "1063944", "softcloud.digital", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:26", "1063945", "appmind.center", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:26", "1063946", "ms-data.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:26", "1063947", "oracleup.cc", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:26", "1063948", "topinfocompany.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:26", "1063949", "blockchainstartups-crypto.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063934", "expresssmash.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063935", "vgroz.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:24", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063936", "baidengop.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063937", "ofilopex.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063938", "aabancaa.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063939", "shermango.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063940", "nongxinyin.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063941", "a6m1n.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:25", "1063942", "emailbox.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:23", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:24", "1063926", "wxtencent.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:24", "1063927", "emergeno.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:24", "1063928", "browngreeer.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:24", "1063929", "processdec.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:24", "1063931", "sndm-sndm.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:24", "1063932", "sinergil.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:24", "1063933", "vinergil.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063918", "westtherr.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063919", "quickaccestwo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063920", "usgrim.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063921", "onelivemusicshop.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063922", "zomerax.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063923", "fsamon.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063924", "sscimails.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:21", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:23", "1063925", "agentrecovery.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:26", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063909", "entertainok.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063910", "jatafatuna.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063911", "pluyk.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063912", "affinm.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063913", "gijoxupe.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063914", "vangshares.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:22", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063915", "fudupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:22", "1063917", "contemporaryto.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:21", "1063902", "ziono.xyz", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:21", "1063903", "lolutow.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:21", "1063904", "niht12.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:21", "1063905", "slfcorporate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:21", "1063906", "baidu-cdn-10.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:21", "1063907", "jandoz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:21", "1063908", "casevor.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:20", "1063897", "gotroops.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:17", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:20", "1063898", "wtxservice.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:17", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:20", "1063899", "xevayuhace.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:20", "1063900", "suppcat.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:20", "1063901", "softloadup.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:19", "1063889", "asbetysh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:19", "1063890", "ascagliarinish.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:19", "1063891", "ascasdsh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:19", "1063892", "aschamp79sh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:19", "1063893", "aschnurmansh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:19", "1063894", "aseleeeksh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:19", "1063895", "asensvsh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063880", "artist2actresssh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063881", "arturprikhodkosh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063882", "arvin78sh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063883", "arvind567shahsh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063884", "arvindkkumsh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063885", "arvosash.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063886", "arwalsersh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063887", "aryaarieash.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:18", "1063888", "aryalalexsh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:16", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063870", "dovaxanil.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063871", "hehegahu.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063872", "agriculturemachineries.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063873", "arhipenkolenagenesh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063874", "aritmiagenesh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063875", "artes911sh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063876", "arthas89sh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063877", "arthurstevens62sh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063878", "arthurtaylor13sh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:17", "1063879", "artis214sh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:15", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:16", "1063864", "zipo-cons.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:16", "1063865", "fazehotafa.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:16", "1063866", "zendriol.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:16", "1063867", "sezezapa.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:16", "1063868", "sorekipe.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:16", "1063869", "zezinuwe.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:14", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:15", "1063858", "shrekf.art", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:15", "1063859", "amaniza.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:15", "1063860", "microcloud.pro", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:15", "1063861", "anexuss.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:15", "1063862", "edictsoft.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:15", "1063863", "out1etshops.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:14", "1063851", "stepnbayac.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:11", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:14", "1063852", "chickenpoken.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:14", "1063853", "hockeysmall.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:14", "1063854", "orthodoxok.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:14", "1063855", "cocesovo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:14", "1063856", "familyinsurancepartner.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:20", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:14", "1063857", "senebuvuyi.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:12", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:13", "1063848", "fincheck.site", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:10", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:13", "1063849", "svchosst.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:11", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:13", "1063850", "conhosst.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:11", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:12", "1063843", "maximumservers.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:18", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:12", "1063844", "conferencedesk.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:11", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:12", "1063845", "bluetechsupply.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:12", "1063846", "allgroupservices.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:11", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:12", "1063847", "acitopram.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:33", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:11", "1063838", "businessservicesolution.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:19", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:11", "1063839", "gravyblicus.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:50", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:11", "1063840", "firmwarekey.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:11", "1063841", "updateraccount.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:11", "1063842", "mvnetworking.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:57", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:10", "1063832", "avasecurityservices.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:10", "1063833", "extranetserver.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:13", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:10", "1063834", "clacem.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:10", "1063835", "eonline-cdn.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:10", "1063836", "cagohufe.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:10", "1063837", "vezawahoy.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:08", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:09", "1063826", "tetafup.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:09", "1063827", "api-trend-micro.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:07", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:09", "1063828", "digital-hardware.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:17", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:09", "1063829", "aboutdatabasesoftware.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:17", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:09", "1063830", "high-control.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:17", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:09", "1063831", "soft-base.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:17", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:08", "1063821", "iptvr.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:08", "1063823", "mingw.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:08", "1063824", "transfercloud.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:11", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:08", "1063825", "flashcom.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:11", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:07", "1063818", "sciencelifedata.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:07", "1063819", "bookingsupport.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:07", "1063820", "ateyakima.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:05", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:06", "1063813", "buy1walmart.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:03", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:06", "1063816", "drbeat.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:03", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:06", "1063817", "aialadin.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:04", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:05", "1063810", "hhkj222.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:02", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:05", "1063811", "yw2204.shop", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:03", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:05", "1063812", "nordicqlobal.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:03", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:04", "1063806", "favls.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:01", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:04", "1063807", "linkkedin.life", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:01", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:04", "1063808", "magellanfit.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:01", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:48:03", "1063805", "afspd.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:01", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:46:51", "1063804", "164.92.70.225:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:34", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-30 19:44:07", "1063802", "abritrum-bridges.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:01", "75", "False", "https://threatview.io/Downloads/High-Confidence-CobaltstrikeC2_platforms.txt", "CobaltStrike,threatview-io", "0", "abuse_ch"
"2022-12-28 19:56:09", "1063208", "a.wv2022.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:00", "100", "False", "None", "CobaltStrike,TENCENT-NET-AP-CN Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2022-12-28 02:22:09", "1063123", "apacheorg.wiki", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:00", "100", "False", "None", "CLOUDIE-AS-AP Cloudie Limited,CobaltStrike", "0", "drb_ra"
"2022-12-24 19:00:50", "1062406", "updatemicrotok.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:00", "100", "False", "None", "AS-SERVERION,CobaltStrike", "0", "drb_ra"
"2022-12-19 21:43:42", "1053949", "eserverx.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:01", "100", "False", "None", "AEZA-AS,CobaltStrike", "0", "drb_ra"
"2022-12-19 11:41:44", "1050306", "cmdatabase.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:57", "100", "False", "None", "ADM Service Ltd.,CobaltStrike", "0", "drb_ra"
"2022-12-17 12:12:59", "1050198", "cloudmane.online", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:01", "100", "False", "None", "CobaltStrike,Partner LLC", "0", "drb_ra"
"2022-12-13 11:43:38", "1036758", "8.212.49.116:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:41", "100", "False", "None", "Alibaba (US) Technology Co. Ltd.,CobaltStrike", "0", "drb_ra"
"2022-12-12 01:38:31", "1036111", "qw.conhoosst.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:02", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-12-08 20:45:56", "1035723", "expoglobalservice.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:02", "100", "False", "None", "CobaltStrike,TIER-NET", "0", "drb_ra"
"2022-12-07 20:05:59", "1035558", "www.microsofer.top", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:05", "100", "False", "None", "CobaltStrike,Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2022-12-05 20:03:53", "1031731", "googlecontentuser.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:02", "100", "False", "https://twitter.com/TheDFIRReport/status/1599780643222654976", "CobaltStrike", "0", "abuse_ch"
"2022-12-05 19:27:32", "1031726", "test.227api.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:52", "100", "False", "None", "CobaltStrike,YISUCLOUDLTD-HK YISU CLOUD LTD", "0", "drb_ra"
"2022-12-05 11:42:38", "1029025", "palalto.live", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:02", "100", "False", "None", "CobaltStrike,Private Layer INC", "0", "drb_ra"
"2022-12-04 20:18:27", "1028963", "esoftwareupdates.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:02", "100", "False", "None", "ASGHOSTNET,CobaltStrike", "0", "drb_ra"
"2022-12-02 21:28:11", "1028767", "globalplayservices.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:02", "100", "False", "None", "CHERRYSERVERS3-AS,CobaltStrike", "0", "drb_ra"
"2022-12-02 20:50:52", "1028737", "rapidfinact.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:03", "100", "False", "None", "CobaltStrike,SHINJIRU-MY-AS-AP Shinjiru Technology Sdn Bhd", "0", "drb_ra"
"2022-12-02 20:38:18", "1028720", "globalsteamclub.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:02", "100", "False", "None", "CHERRYSERVERS3-AS,CobaltStrike", "0", "drb_ra"
"2022-12-01 20:32:20", "1028501", "get-music-online.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:02", "100", "False", "None", "CHERRYSERVERS3-AS,CobaltStrike", "0", "drb_ra"
"2022-11-27 16:10:54", "1024554", "msndla.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:02", "100", "False", "None", "CobaltStrike,PONYNET", "0", "drb_ra"
"2022-11-24 11:54:46", "1023854", "childhealthresources.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:24", "100", "False", "None", "AMAZON-02,CobaltStrike", "0", "drb_ra"
"2022-11-24 11:50:52", "1023821", "360safeupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:01", "100", "False", "None", "CobaltStrike,Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2022-11-20 10:32:06", "1021044", "aksaholdings.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:03", "100", "False", "None", "Amazon.com Inc.,CobaltStrike", "0", "drb_ra"
"2022-11-15 06:56:25", "1012628", "msisfx.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:03", "100", "False", "https://twitter.com/malware_traffic/status/1592262598195646464", "CobaltStrike", "0", "abuse_ch"
"2022-11-12 17:46:46", "1009773", "get-smartbuyer.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:03", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-11-10 11:51:33", "1000509", "qw.stakcl.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:03", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-11-08 20:20:30", "991420", "sogouupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:02", "100", "False", "None", "CobaltStrike,TENCENT-NET-AP-CN Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2022-11-07 20:10:29", "985010", "dnsupdatecheck.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:03", "100", "False", "None", "CHERRYSERVERS3-AS,CobaltStrike", "0", "drb_ra"
"2022-11-04 11:23:08", "973832", "ipulsecloud.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:06", "100", "False", "None", "CobaltStrike,FLYSERVERS-ENDCLIENTS", "0", "drb_ra"
"2022-11-03 12:12:17", "964538", "zadiguser.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:07", "50", "False", "", "None", "1", "anonymous"
"2022-11-03 12:12:17", "964540", "wasazokiwo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:14", "50", "False", "", "None", "1", "anonymous"
"2022-11-03 12:12:17", "964541", "yuwajeni.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:08", "50", "False", "", "None", "1", "anonymous"
"2022-11-03 12:12:17", "964542", "yavahiyil.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:07", "50", "False", "", "None", "1", "anonymous"
"2022-11-03 12:12:17", "964543", "rabihino.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:18", "50", "False", "", "None", "1", "anonymous"
"2022-11-03 12:12:17", "964545", "nokevohoh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:19", "50", "False", "", "None", "1", "anonymous"
"2022-11-03 12:12:17", "964546", "rawocav.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:19", "50", "False", "", "None", "1", "anonymous"
"2022-11-03 12:12:17", "964548", "deyikurihe.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:18", "50", "False", "", "None", "1", "anonymous"
"2022-10-30 19:51:44", "952862", "freshuper.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:04", "100", "False", "None", "CobaltStrike,tzulo inc.", "0", "drb_ra"
"2022-10-29 12:32:13", "952596", "reebons.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:04", "100", "False", "None", "CobaltStrike,Perviy TSOD LLC", "0", "drb_ra"
"2022-10-29 12:23:49", "952587", "gaswert.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:04", "100", "False", "None", "CobaltStrike,GLOBAL INTERNET SOLUTIONS LLC", "0", "drb_ra"
"2022-10-29 11:54:42", "952582", "sajij.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:04", "100", "False", "None", "CobaltStrike,Perviy TSOD LLC", "0", "drb_ra"
"2022-10-29 10:14:36", "952555", "asasyz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:04", "100", "False", "None", "CobaltStrike,Partner LLC", "0", "drb_ra"
"2022-10-29 10:12:26", "952552", "agazud.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:04", "100", "False", "None", "CobaltStrike,LLC Baxet", "0", "drb_ra"
"2022-10-29 09:57:36", "952534", "tuuik.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:04", "100", "False", "None", "CobaltStrike,GLOBAL INTERNET SOLUTIONS LLC", "0", "drb_ra"
"2022-10-29 09:56:46", "952528", "alfuhin.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:05", "100", "False", "None", "CobaltStrike,Partner LLC", "0", "drb_ra"
"2022-10-27 23:43:27", "950974", "amaladin.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:04", "100", "False", "None", "CobaltStrike,HOSTKEY-USA", "0", "drb_ra"
"2022-10-26 10:09:11", "949937", "aualadin.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:04", "100", "False", "None", "CobaltStrike,Perviy TSOD LLC", "0", "drb_ra"
"2022-10-23 13:42:10", "916136", "bthserv.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:05", "100", "False", "None", "CobaltStrike,Internet Solutions & Innovations LTD.", "0", "drb_ra"
"2022-10-23 13:37:35", "916115", "nuesro.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:05", "100", "False", "None", "CobaltStrike,Partner LLC", "0", "drb_ra"
"2022-10-23 13:36:50", "916100", "pasadonline.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:03", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-10-22 19:40:40", "915911", "worldsgates.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:06", "100", "False", "None", "CobaltStrike,LUCIDACLOUD LIMITED", "0", "drb_ra"
"2022-10-22 19:39:30", "915908", "protramal.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:06", "100", "False", "None", "CobaltStrike,Perviy TSOD LLC", "0", "drb_ra"
"2022-10-22 01:11:02", "915846", "spltst.icu", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:05", "100", "False", "None", "CobaltStrike,combahton GmbH", "0", "drb_ra"
"2022-10-16 13:10:54", "891477", "cehocihit.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:14", "100", "False", "None", "CobaltStrike,LEASEWEB-USA-PHX", "0", "drb_ra"
"2022-10-16 12:38:04", "891461", "cloudmicro.pro", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:13", "100", "False", "None", "CobaltStrike,PLI-AS", "0", "drb_ra"
"2022-10-13 21:41:28", "887212", "keycloud.live", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:06", "100", "False", "None", "CobaltStrike,PARTNER-AS", "0", "drb_ra"
"2022-10-13 21:13:41", "886703", "activeservers.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:17", "100", "False", "None", "Amati Foundation,CobaltStrike", "0", "drb_ra"
"2022-10-13 21:12:51", "886693", "newyearbalance.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:06", "100", "False", "None", "CHERRYSERVERS3-AS,CobaltStrike", "0", "drb_ra"
"2022-10-13 21:02:36", "886516", "xamayojir.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:08", "100", "False", "None", "CobaltStrike,LEASEWEB-USA-PHX", "0", "drb_ra"
"2022-10-13 20:58:25", "886499", "xicefoga.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:20", "100", "False", "None", "CobaltStrike,LEASEWEB-USA-WDC", "0", "drb_ra"
"2022-10-13 19:51:56", "884091", "ams-prd-cob.nl", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:10", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-10-13 19:35:22", "883488", "tagujog.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:08", "100", "False", "None", "CobaltStrike,LEASEWEB-USA-PHX", "0", "drb_ra"
"2022-10-13 19:32:23", "883412", "mysqlserver.org", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:17", "100", "False", "None", "CobaltStrike,ICME", "0", "drb_ra"
"2022-10-13 19:23:44", "883142", "xuluxetas.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:08", "100", "False", "None", "CobaltStrike,LEASEWEB-USA-NYC", "0", "drb_ra"
"2022-10-12 17:16:11", "880419", "hadujaza.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:11", "100", "False", "https://www.trendmicro.com/en_us/research/22/j/black-basta-infiltrates-networks-via-qakbot-brute-ratel-and-coba.html", "CobaltStrike", "0", "abuse_ch"
"2022-10-05 18:54:33", "871733", "softsupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:06", "100", "False", "https://twitter.com/1ZRR4H/status/1577718910652129280", "CobaltStrike", "0", "abuse_ch"
"2022-10-05 18:54:33", "871734", "anushl.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:06", "100", "False", "https://twitter.com/1ZRR4H/status/1577718910652129280", "CobaltStrike", "0", "abuse_ch"
"2022-09-29 08:45:45", "858399", "anbush.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:09", "100", "False", "https://twitter.com/1ZRR4H/status/1575364140285267970", "CobaltStrike", "0", "abuse_ch"
"2022-09-29 08:45:45", "858402", "get-topservice.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:07", "100", "False", "https://twitter.com/1ZRR4H/status/1575364140285267970", "CobaltStrike", "0", "abuse_ch"
"2022-09-29 08:45:45", "858403", "msoftupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:06", "100", "False", "https://twitter.com/1ZRR4H/status/1575364140285267970", "CobaltStrike", "0", "abuse_ch"
"2022-09-29 08:45:45", "858404", "pregabas.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:06", "100", "False", "https://twitter.com/1ZRR4H/status/1575364140285267970", "CobaltStrike", "0", "abuse_ch"
"2022-09-22 11:26:18", "851096", "34.92.131.12:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:10", "100", "False", "None", "CobaltStrike,Google LLC", "0", "drb_ra"
"2022-09-20 16:58:14", "850706", "87.246.7.38:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:11", "75", "False", "https://twitter.com/1ZRR4H/status/1572261285139714051", "CobaltStrike", "0", "abuse_ch"
"2022-09-20 16:57:02", "850701", "cloudmicro.tech", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:09", "100", "False", "https://twitter.com/1ZRR4H/status/1572261285139714051", "CobaltStrike", "0", "abuse_ch"
"2022-09-20 16:57:02", "850702", "fregiyu.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:10", "100", "False", "https://twitter.com/1ZRR4H/status/1572261285139714051", "CobaltStrike", "0", "abuse_ch"
"2022-09-20 16:57:02", "850704", "microcloud.live", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:08", "100", "False", "https://twitter.com/1ZRR4H/status/1572261285139714051", "CobaltStrike", "0", "abuse_ch"
"2022-09-17 21:24:41", "850260", "154.22.117.31:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:11", "100", "False", "None", "CobaltStrike,Cogent Communications", "0", "drb_ra"
"2022-09-14 22:07:14", "849761", "198.98.53.34:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:10", "100", "False", "None", "CobaltStrike,PONYNET", "0", "drb_ra"
"2022-09-05 19:10:52", "847988", "globallookclub.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:26", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:50", "847986", "realfunsolutions.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:27", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:48", "847972", "www.service1app.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:25", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:48", "847975", "youronlinesports.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:25", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:48", "847976", "yourinfosolutions.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:25", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:48", "847978", "login.onemusic24.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:27", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:48", "847981", "zx.jacollans.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:26", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:47", "847942", "satorkar.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:18", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:47", "847943", "er.theinfoinc.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:20", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:47", "847957", "realmacnow.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:22", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:47", "847958", "onemusicllc.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:22", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:47", "847959", "ateliernow.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:22", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:47", "847960", "er.dropklant.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:22", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:46", "847929", "sprinthunter.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:13", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:46", "847930", "newstamagavk.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:12", "100", "False", "", "None", "0", "_ik_"
"2022-09-05 19:10:46", "847934", "www.onestepstar.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:17", "100", "False", "", "None", "0", "_ik_"
"2022-08-31 18:29:19", "847028", "barabezo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:14", "100", "False", "https://bazaar.abuse.ch/sample/08ec3f13e8637a08dd763af6ccb46ff8516bc46efaacb1e5f052ada634a90c0e/", "CobaltStrike", "0", "abuse_ch"
"2022-08-31 16:32:01", "847018", "alojun.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:12", "100", "False", "", "None", "0", "_ik_"
"2022-08-31 16:32:01", "847019", "asdder.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:12", "100", "False", "", "None", "0", "_ik_"
"2022-08-31 16:32:01", "847020", "www.zominoz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:13", "100", "False", "", "None", "0", "_ik_"
"2022-08-30 06:22:11", "846258", "jevomukif.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:18", "100", "False", "https://raw.githubusercontent.com/pan-unit42/tweets/master/2022-08-29-IOCs-for-Monster-Libra-TA551-IcedID-with-Cobalt-Stike.txt", "CobaltStrike", "0", "abuse_ch"
"2022-08-20 06:53:07", "844214", "msdnupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:18", "100", "False", "", "CobaltStrike", "0", "abuse_ch"
"2022-08-20 06:53:07", "844215", "msdupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:19", "100", "False", "", "CobaltStrike", "0", "abuse_ch"
"2022-08-18 12:15:06", "843958", "caxoxc.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:19", "100", "False", "", "CobaltStrike", "0", "abuse_ch"
"2022-08-16 11:38:21", "843546", "47.108.180.121:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:40", "100", "False", "None", "CobaltStrike,Hangzhou Alibaba Advertising Co.Ltd.", "0", "drb_ra"
"2022-08-11 06:03:19", "842464", "jahojahi.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:14", "100", "False", "https://raw.githubusercontent.com/pan-unit42/tweets/master/2022-08-10-IOCs-for-IcedID-and-Cobalt-Strike.txt", "CobaltStrike", "0", "abuse_ch"
"2022-08-06 07:00:06", "841613", "zambeziz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:20", "100", "False", "", "CobaltSrike", "0", "abuse_ch"
"2022-07-27 08:49:04", "839793", "zuyonijobo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:21", "100", "False", "https://isc.sans.edu/diary/28884", "Cobalt Strike", "0", "abuse_ch"
"2022-07-06 05:36:04", "802793", "digerm.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:23", "100", "False", "", "None", "0", "abuse_ch"
"2022-07-05 05:12:06", "796822", "chitozx.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:23", "100", "False", "", "None", "0", "abuse_ch"
"2022-07-02 13:06:49", "750750", "42.192.21.181:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:10", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2022-06-28 08:57:21", "730561", "18.117.254.165:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:36", "100", "False", "None", "Amazon.com Inc.,CobaltStrike", "0", "drb_ra"
"2022-06-26 10:56:33", "729038", "blinkinuf.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:24", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-26 10:56:32", "729037", "malrok.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:24", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 17:11:58", "720823", "trumpiko.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:25", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 17:11:58", "720824", "freygor.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:24", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 17:11:58", "720826", "sinjoan.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:27", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 17:11:58", "720827", "afluix.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:27", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:20", "720273", "www.edge-chrome.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:44", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:20", "720276", "www.hellomrsone.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:57", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:19", "720260", "we.topsmartservice.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:29", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:19", "720263", "wpsserver.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:31", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:18", "720248", "thedaily-news.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:28", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:17", "720239", "sevenhungredbucks.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:26", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:17", "720241", "snccoupr-int.cf", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:26", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:17", "720247", "telembank.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:44", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:16", "720230", "ppew.au", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:42", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:16", "720231", "pretunz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:29", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:16", "720236", "rss.top-business-blog.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:30", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:16", "720237", "scarfaceserver.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:28", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:15", "720226", "outlet-studio.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:27", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:14", "720208", "js.msedgeupdate.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:42:42", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:13", "720198", "harborfreight.delivery", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:56", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:13", "720201", "hityok.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:29", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:13", "720203", "jiguz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:28", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:13", "720204", "jijuanjo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:26", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:13", "720206", "jqueryupdatenow.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:28", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:13", "720207", "jqueryupneed.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:28", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:12", "720188", "fifacud.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:26", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:12", "720189", "filaspo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:30", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:12", "720193", "gasienda.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:30", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:11", "720185", "dreamkoks.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:25", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:54:10", "720176", "democrazzy.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:16", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:53:31", "720156", "cloud.sovarermscloud.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:30", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:53:28", "720136", "backupcreds.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:32", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:53:28", "720140", "biohazzzard.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:29", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:53:28", "720141", "bksfinance.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:47", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:53:28", "720143", "boronab.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:28", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:53:27", "720132", "araizx.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:25", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-23 10:53:27", "720133", "arminext.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:30", "50", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-22 18:35:13", "719898", "aginij.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:26", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-06-18 00:27:59", "716186", "142.11.206.50:443", "ip:port", "botnet_cc", "win.danabot", "DanaTools", "DanaBot", "2026-08-31 12:04:30", "100", "False", "None", "DanaBot", "0", "abuse_ch"
"2022-06-15 20:53:40", "710534", "85.175.101.203:80", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:48:12", "100", "False", "None", "CobaltStrike,STC-AS", "0", "drb_ra"
"2022-05-19 18:01:58", "606362", "criobob.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:31", "75", "False", "None", "cobaltstrike,emotet", "0", "Cryptolaemus1"
"2022-05-19 18:01:58", "606363", "prozakx.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:31", "75", "False", "None", "cobaltstrike,emotet", "0", "Cryptolaemus1"
"2022-05-19 18:01:58", "606364", "terroklo.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:31", "75", "False", "None", "cobaltstrike,emotet", "0", "Cryptolaemus1"
"2022-05-19 18:01:57", "606360", "microdozz.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:31", "75", "False", "None", "cobaltstrike,emotet", "0", "Cryptolaemus1"
"2022-05-10 18:53:07", "549372", "us189-hpgsgae5dva9fzch.z01.azurefd.net", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:41", "75", "False", "None", "cobaltstrike,threatview.io", "0", "Malwar3Ninja"
"2022-05-08 16:20:03", "548951", "artidomain.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:33", "100", "False", "https://twitter.com/ian_kenefick/status/1523288477559062529", "Cobalt Strike", "0", "abuse_ch"
"2022-04-30 19:45:18", "544836", "116.62.185.223:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:34", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
"2022-04-29 19:30:18", "540702", "165.227.180.6:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:39", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-04-25 12:31:07", "532916", "120.26.240.21:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:43", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
"2022-04-23 16:42:50", "530098", "193.29.13.216:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:44", "100", "False", "None", "***************************************,CobaltStrike", "0", "drb_ra"
"2022-04-21 16:54:57", "523516", "45.8.158.25:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:35", "100", "False", "None", "ASBAXETN,CobaltStrike", "0", "drb_ra"
"2022-04-19 13:44:33", "521565", "115.29.171.175:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:43", "100", "False", "None", "CNNIC-ALIBABA-CN-NET-AP Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
"2022-04-18 18:01:52", "521083", "84.32.188.190:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:34", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-04-15 22:57:51", "520317", "137.184.42.85:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:41", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-04-14 16:59:25", "519914", "84.32.188.104:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:36", "100", "False", "None", "CobaltStrike,UAB Cherry Servers", "0", "drb_ra"
"2022-04-14 10:30:57", "519792", "furfen.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:32", "100", "False", "None", "BumbleBee,Cobalt Strike", "0", "abuse_ch"
"2022-04-13 16:57:52", "519116", "175.41.21.29:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:39", "100", "False", "None", "CobaltStrike,XLC-AS-AP XLC GLOBAL", "0", "drb_ra"
"2022-04-12 16:50:58", "518853", "175.41.16.98:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:44", "100", "False", "None", "CobaltStrike,XLC-AS-AP XLC GLOBAL", "0", "drb_ra"
"2022-04-10 17:05:31", "518404", "138.68.110.227:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:40", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-04-06 22:59:35", "516676", "13.55.118.253:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:36", "100", "False", "None", "AMAZON-02,CobaltStrike", "0", "drb_ra"
"2022-04-05 22:55:20", "493695", "185.186.143.111:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:35", "100", "False", "None", "ASKONTEL,CobaltStrike", "0", "drb_ra"
"2022-04-05 16:53:16", "492845", "194.37.97.153:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:58", "100", "False", "None", "CobaltStrike,M247 Ltd", "0", "drb_ra"
"2022-03-30 09:51:36", "466600", "blopik.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:47", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-29 08:36:59", "461231", "borizhog.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:47", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-24 22:55:12", "448027", "37.72.172.110:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:37", "100", "False", "None", "CobaltStrike,HVC-AS", "0", "drb_ra"
"2022-03-24 10:56:07", "446029", "1.14.76.111:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:40", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2022-03-23 20:44:05", "443786", "139.60.160.8:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:37", "100", "False", "None", "CobaltStrike,HOSTKEY-USA", "0", "drb_ra"
"2022-03-23 16:44:21", "443190", "apeduze.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:33", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-22 10:51:28", "438442", "drimzis.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:50", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-22 10:51:28", "438443", "blinkij.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:46", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-17 22:47:07", "398650", "152.136.178.142:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:44", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2022-03-17 12:19:46", "396104", "dunclikf.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:52", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-10 15:29:52", "393426", "sifgu.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:46", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-10 15:29:52", "393427", "gfsert.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:46", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-10 15:29:52", "393429", "shizij.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:52", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-10 15:29:52", "393430", "zxerm.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:52", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-10 15:29:52", "393431", "korunder.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:53", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-10 15:29:51", "393424", "chesft.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:51", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-10 15:29:51", "393425", "uktyl.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:46", "100", "False", "None", "None", "0", "stoerchl"
"2022-03-09 17:18:35", "393312", "defenr.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:51", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-09 17:18:35", "393313", "fedij.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:51", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-09 17:18:35", "393314", "kejimn.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:51", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-09 17:18:34", "393311", "brikeb.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:50", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-08 17:09:32", "393046", "kapuleti.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:51", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-06 16:43:33", "392705", "45.12.1.24:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:42", "100", "False", "None", "CobaltStrike,YURTEH-AS", "0", "drb_ra"
"2022-03-05 16:45:53", "392630", "45.12.1.25:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:35", "100", "False", "None", "CobaltStrike,YURTEH-AS", "0", "drb_ra"
"2022-03-05 16:43:28", "392595", "45.12.1.26:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:35", "100", "False", "None", "CLOUDNETWORKS-AS,CobaltStrike", "0", "drb_ra"
"2022-03-01 07:06:28", "391528", "defegh.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:52", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-01 07:06:28", "391530", "klycnmik.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:52", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-03-01 07:06:28", "391531", "ngrety.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:52", "100", "False", "None", "Cobalt Strike", "0", "abuse_ch"
"2022-02-27 06:03:58", "391111", "lifegothistory.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:53", "100", "False", "https://twitter.com/1ZRR4H/status/1497771037718724612", "Cobalt Strike", "0", "abuse_ch"
"2022-02-22 16:44:41", "390123", "192.241.133.130:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:49", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-22 16:42:29", "390104", "159.65.246.188:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:49", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:58:18", "389873", "68.183.200.63:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:48", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:57:13", "389866", "138.68.227.71:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:48", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:56:32", "389865", "165.227.219.211:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:48", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:55:44", "389864", "165.232.154.73:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:49", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:54:53", "389861", "143.198.110.248:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:48", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:54:15", "389860", "178.128.171.206:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:49", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:53:10", "389853", "165.227.23.218:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:48", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:52:19", "389850", "161.35.137.163:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:49", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-21 16:51:26", "389847", "64.227.0.177:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:49", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-20 16:42:59", "389656", "45.55.36.143:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:48", "100", "False", "None", "CobaltStrike,DIGITALOCEAN-ASN", "0", "drb_ra"
"2022-02-09 22:36:37", "384626", "168.61.180.98:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:58", "100", "False", "None", "CobaltStrike,MICROSOFT-CORP-MSN-AS-BLOCK", "0", "drb_ra"
"2022-02-01 10:45:03", "373668", "bornometa.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:54", "100", "False", "https://twitter.com/1ZRR4H/status/1488311508652204037", "Cobalt Strike", "0", "abuse_ch"
"2022-02-01 10:45:03", "373671", "jenevabaiden.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:59", "100", "False", "https://twitter.com/1ZRR4H/status/1488311508652204037", "Cobalt Strike", "0", "abuse_ch"
"2022-02-01 10:45:03", "373673", "sbronm.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:54", "100", "False", "https://twitter.com/1ZRR4H/status/1488311508652204037", "Cobalt Strike", "0", "abuse_ch"
"2022-01-29 22:33:30", "362296", "101.34.182.130:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:44", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2022-01-25 22:30:16", "332687", "192.227.155.185:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:37", "100", "False", "None", "AS-COLOCROSSING,CobaltStrike", "0", "drb_ra"
"2022-01-25 22:29:00", "332653", "146.70.29.233:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:38", "100", "False", "None", "CobaltStrike,M247", "0", "drb_ra"
"2022-01-22 22:25:42", "313943", "107.172.219.129:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:38", "100", "False", "None", "AS-COLOCROSSING,CobaltStrike", "0", "drb_ra"
"2022-01-18 22:32:52", "299262", "193.201.9.229:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:59", "100", "False", "None", "CobaltStrike,SELECTEL", "0", "drb_ra"
"2022-01-18 13:51:16", "298501", "citrixseruritys.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:57", "100", "False", "https://twitter.com/MichalKoczwara/status/1483137082465865729", "Cobalt Strike", "0", "abuse_ch"
"2022-01-18 13:51:16", "298505", "milanvar.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:44:00", "100", "False", "https://twitter.com/MichalKoczwara/status/1483137082465865729", "Cobalt Strike", "0", "abuse_ch"
"2022-01-15 22:26:20", "295525", "23.227.198.246:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:58", "100", "False", "None", "CobaltStrike,HVC-AS", "0", "drb_ra"
"2022-01-15 10:32:22", "295436", "217.79.243.148:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:58", "100", "False", "None", "CobaltStrike,HVC-AS", "0", "drb_ra"
"2022-01-14 22:28:25", "295353", "149.255.35.131:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:59", "100", "False", "None", "CobaltStrike,HVC-AS", "0", "drb_ra"
"2022-01-13 22:28:33", "294999", "81.68.225.136:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:37", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2022-01-10 16:24:49", "292303", "39.98.48.153:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 06:00:23", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
"2022-01-07 10:30:52", "291740", "39.104.25.164:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:40", "100", "False", "None", "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
"2021-12-16 10:42:30", "276593", "77.83.36.54:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:43", "100", "False", "None", "CobaltStrike,ISI-ASN", "0", "drb_ra"
"2021-12-13 10:06:28", "275144", "101.32.204.81:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:42", "100", "False", "None", "CobaltStrike,TENCENT-NET-AP-CN Tencent Building Kejizhongyi Avenue", "0", "drb_ra"
"2021-11-22 16:01:01", "252110", "62.113.255.12:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:39", "100", "False", "None", "CobaltStrike,TTM", "0", "drb_ra"
"2021-11-04 17:48:48", "242948", "107.173.89.148:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:41", "100", "False", "None", "AS-COLOCROSSING,CobaltStrike", "0", "drb_ra"
"2021-10-31 17:43:37", "240983", "104.128.92.144:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:59", "100", "False", "None", "CobaltStrike,IT7NET", "0", "drb_ra"
"2021-10-27 09:58:20", "238207", "fivepointschiro.com", "domain", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:54", "100", "False", "https://twitter.com/mojoesec/status/1453040284686770185", "CobaltStrike", "0", "abuse_ch"
"2021-10-22 12:07:15", "236436", "111.230.196.200:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:40", "100", "False", "None", "CobaltStrike", "0", "drb_ra"
"2021-10-13 17:43:22", "233476", "23.224.152.139:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:38", "100", "False", "None", "CNSERVERS,CobaltStrike", "0", "drb_ra"
"2021-10-11 23:27:10", "232821", "139.198.183.44:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:40", "100", "False", "None", "CobaltStrike,YUNIFY-NET Yunify Technologies Inc.", "0", "drb_ra"
"2021-10-09 23:36:53", "232263", "121.37.255.60:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:44", "100", "False", "None", "CobaltStrike,HWCSNET Huawei Cloud Service data center", "0", "drb_ra"
"2021-09-18 17:39:24", "223357", "47.95.207.79:443", "ip:port", "botnet_cc", "win.cobalt_strike", "Agentemis,BEACON,CobaltStrike,cobeacon", "Cobalt Strike", "2026-09-01 05:43:42", "100", "False", "None", "CNNIC-ALIBABA-CN-NET-AP Hangzhou Alibaba Advertising Co.Ltd.,CobaltStrike", "0", "drb_ra"
# Number of entries: 4826