Blocking: Most likely safe to block.
Release 20261012T180322Z · built 2026-10-12 18:03 UTC · valid until 2026-10-15 18:03 UTC
Validated, and reported as malicious by at least one credible research team. Includes everything on Confident. Run it in alert or log-only mode for a week or two, look at every hit, then switch to block.
4,178 indicators. Numbers in the Sources column link to the original reports.
| Indicator (defanged) | Type | Reported as | Block scope | First reported | List | Sources |
|---|---|---|---|---|---|---|
183[.]166[.]90[.]97 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
183[.]240[.]139[.]216 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
183[.]250[.]213[.]20 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
183[.]250[.]213[.]55 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
183[.]250[.]213[.]80 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
183[.]250[.]213[.]83 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
183[.]253[.]28[.]104 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
183[.]253[.]28[.]121 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
183[.]253[.]28[.]67 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
183[.]253[.]29[.]110 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
183[.]253[.]29[.]189 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
183[.]253[.]29[.]66 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
185[.]135[.]73[.]192 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
185[.]213[.]82[.]239 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
185[.]213[.]82[.]243 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
185[.]213[.]82[.]55 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
185[.]213[.]82[.]65 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
185[.]216[.]118[.]71 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
193[.]42[.]24[.]68 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
193[.]42[.]25[.]73 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
198[.]13[.]38[.]211 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
2[.]58[.]242[.]74 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
202[.]101[.]145[.]22 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
202[.]182[.]106[.]31 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
202[.]182[.]109[.]151 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
202[.]39[.]151[.]239 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
202[.]99[.]19[.]250 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
202[.]99[.]19[.]254 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
203[.]69[.]36[.]122 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
203[.]74[.]126[.]20 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
207[.]148[.]122[.]69 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
207[.]148[.]4[.]96 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
207[.]148[.]67[.]146 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
207[.]148[.]68[.]131 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
207[.]148[.]73[.]238 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
207[.]148[.]92[.]220 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
207[.]246[.]108[.]64 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
207[.]246[.]114[.]173 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
207[.]246[.]117[.]149 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
207[.]246[.]118[.]144 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
207[.]246[.]127[.]64 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
208[.]72[.]154[.]55 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
210[.]242[.]152[.]155 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
210[.]242[.]38[.]241 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
210[.]242[.]76[.]32 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
210[.]243[.]225[.]41 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
210[.]66[.]220[.]39 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
210[.]71[.]166[.]50 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]20[.]100[.]78 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]20[.]100[.]79 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]20[.]104[.]187 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]20[.]115[.]60 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]20[.]144[.]116 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]20[.]154[.]60 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]20[.]91[.]77 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]21[.]19[.]11 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]21[.]61[.]46 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]22[.]143[.]228 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]75[.]185[.]37 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]78[.]84[.]17 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]99[.]100[.]90 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]99[.]100[.]91 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]99[.]103[.]102 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]99[.]103[.]243 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
211[.]99[.]98[.]197 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
212[.]107[.]28[.]16 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
212[.]107[.]28[.]22 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
212[.]107[.]28[.]23 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
216[.]128[.]128[.]238 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
216[.]128[.]149[.]106 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
218[.]26[.]159[.]254 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
218[.]5[.]157[.]171 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
218[.]5[.]173[.]137 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
219[.]143[.]179[.]250 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
219[.]92[.]229[.]53 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
220[.]128[.]108[.]164 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
220[.]128[.]125[.]3 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
220[.]130[.]153[.]127 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
220[.]130[.]176[.]23 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
220[.]130[.]254[.]251 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
220[.]162[.]9[.]150 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
220[.]250[.]44[.]62 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
221[.]216[.]116[.]238 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
221[.]216[.]208[.]188 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
221[.]218[.]136[.]12 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
221[.]218[.]136[.]192 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
221[.]218[.]137[.]229 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
221[.]218[.]138[.]123 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
221[.]218[.]139[.]248 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
221[.]218[.]141[.]96 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
221[.]218[.]142[.]26 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
221[.]218[.]143[.]112 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
221[.]218[.]143[.]122 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
221[.]218[.]143[.]184 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
222[.]92[.]153[.]125 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
223[.]104[.]39[.]82 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
223[.]104[.]40[.]128 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
223[.]104[.]40[.]142 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
223[.]104[.]40[.]204 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
223[.]104[.]41[.]13 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
223[.]104[.]55[.]183 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
223[.]27[.]34[.]132 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
27[.]149[.]115[.]78 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
27[.]149[.]79[.]35 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
27[.]154[.]105[.]36 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
27[.]154[.]215[.]126 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
31[.]232[.]221[.]35 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]112[.]10[.]102 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]112[.]10[.]99 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]112[.]186[.]135 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]112[.]188[.]119 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]112[.]198[.]68 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]112[.]200[.]35 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]112[.]206[.]121 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]249[.]156[.]117 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]249[.]156[.]122 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]249[.]156[.]159 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]249[.]156[.]178 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]249[.]156[.]205 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]249[.]156[.]206 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]249[.]156[.]220 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]249[.]156[.]226 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]249[.]156[.]51 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36[.]249[.]156[.]69 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
39[.]72[.]220[.]221 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
42[.]73[.]98[.]232 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]123[.]189[.]19 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]131[.]69[.]197 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]32[.]140[.]182 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]32[.]232[.]146 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]32[.]61[.]246 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]32[.]84[.]223 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]63[.]116[.]190 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]63[.]123[.]142 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]63[.]17[.]9 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]63[.]48[.]36 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]63[.]59[.]121 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]63[.]62[.]217 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]63[.]94[.]71 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]63[.]95[.]62 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]76[.]169[.]12 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]76[.]194[.]89 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]76[.]243[.]67 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]76[.]37[.]168 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]76[.]37[.]85 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]76[.]43[.]37 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]76[.]66[.]19 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]77[.]11[.]47 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]77[.]195[.]169 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]77[.]231[.]209 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]77[.]28[.]77 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
45[.]77[.]86[.]70 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
49[.]93[.]136[.]14 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
49[.]93[.]184[.]194 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
5[.]188[.]230[.]69 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
5[.]188[.]34[.]134 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
59[.]120[.]144[.]153 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
59[.]120[.]167[.]25 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
59[.]120[.]58[.]176 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
59[.]120[.]82[.]67 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
59[.]124[.]120[.]178 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
59[.]125[.]128[.]54 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
60[.]184[.]242[.]224 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
60[.]220[.]43[.]193 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
60[.]220[.]84[.]41 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
60[.]220[.]84[.]63 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
60[.]248[.]1[.]64 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
60[.]248[.]110[.]97 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
60[.]248[.]152[.]204 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
60[.]248[.]88[.]151 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
60[.]249[.]239[.]86 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
60[.]250[.]146[.]19 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
60[.]250[.]199[.]112 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
60[.]251[.]155[.]19 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
60[.]251[.]201[.]8 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
60[.]251[.]205[.]37 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
60[.]251[.]58[.]145 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
61[.]216[.]74[.]97 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
61[.]219[.]118[.]99 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
61[.]220[.]112[.]137 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
61[.]220[.]35[.]15 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
61[.]221[.]55[.]4 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
61[.]222[.]245[.]73 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
61[.]247[.]165[.]27 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
64[.]176[.]38[.]35 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
65[.]20[.]97[.]251 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
66[.]42[.]103[.]188 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
66[.]42[.]36[.]236 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
66[.]42[.]40[.]189 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
66[.]42[.]42[.]109 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
66[.]42[.]60[.]242 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
66[.]42[.]77[.]138 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
77[.]111[.]226[.]5 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
78[.]141[.]221[.]241 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
78[.]141[.]238[.]97 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
95[.]179[.]186[.]251 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
95[.]179[.]189[.]106 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
95[.]179[.]235[.]135 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
98[.]159[.]37[.]4 | IP address | Listed by researchers | That address only | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
1933c314041415939331fce183939547 | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
1bcaef76b2063f1b80b0fa0d277ec9c5 | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
38f5ff8169423e2c756848c02e8cac3b | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
48ca18a25424a0f52276290b619a7a83 | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
4d33bfb75e27fefaa72526899604d557 | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
4f61b9ab907f351bb40b37b10f4974d0 | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
596b990b0b389d906a8f4384837c1878 | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
5b5a2c7fa705d8b1eb04da5db900b0d7 | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
655cd134976d3e80c521708aa8be418b | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
6d57c42dee8bd7789969e2dd28671162 | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
776807750280daad05348f931a33e4ef | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
7ce68f0dd85355ba2897a68521167e56 | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
7d5a182f70bed0e4fa2f8615aba070de | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
8829f6f1cc5fc0aab2f6e71bfd7dc53d | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
8dcc4f9ccc6b6adf7eeeb3f51c95afad | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
a05cdf6afcbb107961307f59cbab5e4f | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
a73eca669fe80628dbbd2c7d9bb14c8f | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
a973c0ab904c1b74655a906b99b76850 | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
b04375cca637f0702bf27feaff22a92d | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
bcacc7ca999980d26c186ef791242fb5 | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
be121e707f817aa9392c55af1e7ec2aa | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
d61326c4e6d24aa9b67e2b7a3ef7cedf | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
dae8f50ea44225fae3ba1f160b42bfdc | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
ef713447f18f5b7ee16af4ac37ec4133 | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
f01a9a2d1e31332ed36c1a4d2839f412 | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
f62cbbbdf35c7790909c26c7c5fbce05 | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
f8de2e99dc7523d2c83d1a48e844c5ff | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
fc6e8ca41cf4f6100177352660e520b4 | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
fdece34bc084f1e252aeae274650eb8d | MD5 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
0e6fecb2d369b0eae63731616a3daada52036634885ab1b85b115af6bc5bcb86 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
2ecb51d7fa3bc3fa7ad7df64c6d0cd1f4ff2b37ed6839d3cff529fb08af49fb0 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
2f5c406eb64ad8902c8e30610d43fd3efc05a14cdb8fb158818953eaf3dc6a81 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
2fbcb1995c458e5affd5fb8f1f979a08ddce21714a2e413aa3d5dc44f9f245fe | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
33790218d5871af646feef5be29e0596d4703a45ce675c1eb2ca00140b3a1bde | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
36f3b7645609ef40444dbc68f01d26c543d67689eda4937272ea5cfa4df1b522 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
456586ababa08f70216c4459f4d6375676166ebfddd98a33b447ceb5099e8dc5 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
46e59172c40c95d83c3a6f24f801fc2265653c8b575b66a726463e2a4eebd7f2 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
4d488f21269b18e37aaca93ac2a61707c9b611e506cdb3b287277746e94636b5 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
5782ff2c835c88cc1ee521d2e8c523cfad73db3f9a29c93b40c4223f0338ade9 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
644decbc6ce8c52382f4755fa6fc2cb4d89a0e7ec0e574c11b398a6f2eed04b1 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
645f6f2667af01a94d04a9d7a71916a13d9426835d636b4ceee2e25ccb34e525 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
670fa10a2ddde21fd594c4fef86b554d864089ed2de7153b472e921c623403ae | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
67db57a1f957031b78f29aa91e2e87780eae3835290259eff846d8f14afb794b | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
72c6af6a4be99e31c4a7a0aa4f01750792788e7f6f9749243a9f2c47c14a708f | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
752b14c6e6936991d51fcd5ebf40d303e657c2372893604f96044848ad9a5f24 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
7b9efc7ef8957411cdd22582ce4bfb3a5f76d9c91cdb7e36bf85c9785a2480e9 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
804a53be802378a8ec4c94602fd3d6584e0d472d83148e8a42c731950fec415d | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
86f1cfa6a2e0a8cb6fc1fbee28472308e6467932f8658a6a4885e29ed8c34a67 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
8a592e22c51311d482272ec5aba0103c9cd0cfd78e5b5ba75dfa8f1c56926672 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
8b869a5edaff74ff18bca3658a519a19771e66d00ff7849af7a142dd6fc8da85 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
9dc85f9569a15eaf51c7d34254767ea30dd67b2178cec4cc7125288b9544fe00 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
a14844e982f172d0f23910558c3f390a9d4c45dc32db825c2af7cf0ed8631db2 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
add7dd142e4f7e2873bc8f7b7fb6308063608e0b49a773dea93abad4047f1489 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
b1552703ff0035f197c22cdb3a514bb6aa45ec98de3ef5409faab0978f18c35e | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
c4503db6ece93eddf4511e787607cb14606a1df9f526f1e39992497119437cec | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
c7f86a4623db5c90273cea041d43207849c5c6b0060c370b2095f13871b1366d | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
c9d5dc956841e000bfd8762e2f0b48b66c79b79500e894b4efa7fb9ba17e4e9e | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
e7e727458f573dded05537baddac2867d2801db1c3c74410398d063dfd6f6575 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
e93244080a749b521f63476343ce3c81cc8c1b672fa0d9e67359aee37544c784 | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | CISA Cybersecurity Advisories [1] |
050926727cdd74f0b3a8a098e60b76d10fb06b14 | SHA-1 hash | Malware file | That file | 2026-10-08 | Blocking | ESET WeLiveSecurity [1] |
1e2c4aac30edff86cd9a30bd08b199bcd3d0ccce | SHA-1 hash | Malware file | That file | 2026-10-08 | Blocking | ESET WeLiveSecurity [1] |
c85d28f7d272ce2bbbfb9dae71d21bf25b8d00fc | SHA-1 hash | Malware file | That file | 2026-10-08 | Blocking | ESET WeLiveSecurity [1] |
f886b615cb9e23ead2718ff2a61155acfb04ce9e | SHA-1 hash | Malware file | That file | 2026-10-08 | Blocking | ESET WeLiveSecurity [1] |
25a0735d0db7dc40e5d45ce42d9c106067e6a66e184d967cfecfab17c3bcb5ef | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | Socket [1] |
b50a00900399ba99fb6ce1fc151519cb99d44320ef2a631f2237e1aea0ad6fec | SHA-256 hash | Malware file | That file | 2026-10-08 | Blocking | Socket [1] |
66ds[.]lol | Domain | Command and control | Domain and subdomains | 2026-10-07 | Blocking | Censys [1] |
escofiringbijou[.]com | Domain | Command and control | Domain and subdomains | 2026-10-07 | Blocking | Censys [1] |
fc[.]rsqqq[.]top | Domain | Listed by researchers | That exact host | 2026-10-07 | Blocking | Censys [1] |
st[.]onlinefc[.]top | Domain | Listed by researchers | That exact host | 2026-10-07 | Blocking | Censys [1] |
112[.]213[.]108[.]85 | IP address | Listed by researchers | That address only | 2026-10-07 | Blocking | Censys [1] |
14[.]128[.]47[.]81 | IP address | Command and control | That address only | 2026-10-07 | Blocking | Censys [1] |
154[.]18[.]187[.]160 | IP address | Malware download | That address only | 2026-10-07 | Blocking | Censys [1] |
154[.]217[.]250[.]206 | IP address | Command and control | That address only | 2026-10-07 | Blocking | Censys [1] |
154[.]219[.]127[.]94 | IP address | Listed by researchers | That address only | 2026-10-07 | Blocking | Censys [1] |
156[.]239[.]230[.]120 | IP address | Command and control | That address only | 2026-10-07 | Blocking | Censys [1] |
166[.]88[.]95[.]90 | IP address | Command and control | That address only | 2026-10-07 | Blocking | Censys [1] |
185[.]189[.]45[.]40 | IP address | Malware download | That address only | 2026-10-07 | Blocking | Censys [1] |
199[.]30[.]90[.]154 | IP address | Listed by researchers | That address only | 2026-10-07 | Blocking | Censys [1] |
202[.]146[.]222[.]253 | IP address | Data theft | That address only | 2026-10-07 | Blocking | Censys [1] |
203[.]91[.]77[.]253 | IP address | Listed by researchers | That address only | 2026-10-07 | Blocking | Censys [1] |
218[.]25[.]85[.]177 | IP address | Command and control | That address only | 2026-10-07 | Blocking | Censys [1] |
218[.]25[.]85[.]178 | IP address | Command and control | That address only | 2026-10-07 | Blocking | Censys [1] |
23[.]148[.]212[.]237 | IP address | Malware download | That address only | 2026-10-07 | Blocking | Censys [1] |
43[.]134[.]165[.]205 | IP address | Malware download | That address only | 2026-10-07 | Blocking | Censys [1] |
59[.]46[.]4[.]117 | IP address | Command and control | That address only | 2026-10-07 | Blocking | Censys [1] |
59[.]46[.]4[.]119 | IP address | Command and control | That address only | 2026-10-07 | Blocking | Censys [1] |
1334417664270db20af705f422878c53c8378203 | SHA-1 hash | Malware file | That file | 2026-10-07 | Blocking | Censys [1] |
864d68e64618d6bfc26d75d6f780ae0b7bfed3698cc8333818ed32519e560d1f | SHA-256 hash | Malware file | That file | 2026-10-07 | Blocking | Censys [1] |
flat-wildflower-f954[.]fondationanimalaidrelief[.]workers[.]dev | Domain | Listed by researchers | That exact host | 2026-10-07 | Blocking | Socket [1] |
green-firefly-ab28[.]icy-star-f45c[.]workers[.]dev | Domain | Listed by researchers | That exact host | 2026-10-07 | Blocking | Socket [1] |
silent-wind-get[.]icy-star-f45c[.]workers[.]dev | Domain | Data theft | That exact host | 2026-10-07 | Blocking | Socket [1] |
small-boat-969c[.]icy-star-f45c[.]workers[.]dev | Domain | Listed by researchers | That exact host | 2026-10-07 | Blocking | Socket [1] |
7d9d7e80ed52350616be0215a7ded10aaeb9aaa64e34ff8af7f9177c8c855799 | SHA-256 hash | Malware file | That file | 2026-10-07 | Blocking | Socket [1] |
be246ca5cb1372394e0443df45454f88ca39eb4a8dcfc4a99cb8865100fb4897 | SHA-256 hash | Malware file | That file | 2026-10-07 | Blocking | Socket [1] |
c550f0860012e0dfab14ed65a9425961e22025e0ab23fd9d69d294a8aa34db2f | SHA-256 hash | Malware file | That file | 2026-10-07 | Blocking | Socket [1] |
d9432e41e0401715bce4ce11f4a7104d94fab1ec89be553ba57a2097e418c1a1 | SHA-256 hash | Malware file | That file | 2026-10-07 | Blocking | Socket [1] |
da447fe02e4577da97144a4d92b395078954fde1ff196746413837e1e4a20bcd | SHA-256 hash | Malware file | That file | 2026-10-07 | Blocking | Socket [1] |
eb134bbf73046800c8177383754cf754b8776ec30cf5cc8a13655d259e49a4bf | SHA-256 hash | Malware file | That file | 2026-10-07 | Blocking | Socket [1] |
onthegotree[.]site | Domain | Listed by researchers | Domain and subdomains | 2026-10-07 | Blocking | Huntress [1] |
5956f9afb3ba610c38b2cfda88dd15be98783963769a12020c93ce05e749b3c3 | SHA-256 hash | Malware file | That file | 2026-10-07 | Blocking | Huntress [1] |
hxxps://up-theta-rose[.]vercel[.]app/action1[.]msi | URL | Malware download | That exact URL | 2026-10-06 | Blocking | SANS Internet Storm Center [1] |
hxxps://update-two-tau[.]vercel[.]app/adobe-ne | URL | Malware download | That exact URL | 2026-10-06 | Blocking | SANS Internet Storm Center [1] |
64[.]227[.]4[.]134 | IP address | Listed by researchers | That address only | 2026-10-06 | Blocking | Huntress [1] |
1f1bb322591b6d27fd2946e373d7d2efc2f4e1e66818846060d391600b600fba | SHA-256 hash | Malware file | That file | 2026-10-06 | Blocking | Huntress [1] |
d00833318a04caa019c6f95dcb3598ad947d405010bfb2f3cbd04530a00bc3a4 | SHA-256 hash | Malware file | That file | 2026-10-06 | Blocking | Huntress [1] |
09b550d66b7ce269fa577edcac54d6ba3e0f3cb5b660a2921b9372d37d52e254 | SHA-256 hash | Malware file | That file | 2026-10-06 | Blocking | ANY.RUN [1] |
16f83f056177c4ec24c7e99d01ca9d9d6713bd0497eeedb777a3ffefa99c97f0 | SHA-256 hash | Malware file | That file | 2026-10-06 | Blocking | ANY.RUN [1] |
977d3b78bdf5723430e2e21cf1eb515a2335a0e370c76fa2dda4315ba062f429 | SHA-256 hash | Malware file | That file | 2026-10-06 | Blocking | ANY.RUN [1] |
d8ce0a5866178495a66d23c9587822164966111fcd34764011e907951c599711 | SHA-256 hash | Malware file | That file | 2026-10-06 | Blocking | ANY.RUN [1] |
asdfafadafg[.]online | Domain | Phishing | Domain and subdomains | 2026-10-06 | Blocking | Unit 42 [1] |
cloud[.]g-drive[.]cam | Domain | Phishing | That exact host | 2026-10-06 | Blocking | Unit 42 [1] |
drivegoogel[.]cam | Domain | Phishing | Domain and subdomains | 2026-10-06 | Blocking | Unit 42 [1] |
googeldrive[.]cam | Domain | Phishing | Domain and subdomains | 2026-10-06 | Blocking | Unit 42 [1] |
googelmeet[.]online | Domain | Phishing | Domain and subdomains | 2026-10-06 | Blocking | Unit 42 [1] |
meetonline[.]cam | Domain | Phishing | Domain and subdomains | 2026-10-06 | Blocking | Unit 42 [1] |
38[.]180[.]136[.]127 | IP address | Listed by researchers | That address only | 2026-10-06 | Blocking | Unit 42 [1] |
65[.]109[.]214[.]145 | IP address | Listed by researchers | That address only | 2026-10-06 | Blocking | Unit 42 [1] |
87[.]248[.]129[.]239 | IP address | Listed by researchers | That address only | 2026-10-06 | Blocking | Unit 42 [1] |
91[.]107[.]156[.]29 | IP address | Command and control | That address only | 2026-10-06 | Blocking | Unit 42 [1] |
3fd810a3aa0039993393741b32287c367a9a5037a41e826906440887cdd3ed13 | SHA-256 hash | Malware file | That file | 2026-10-06 | Blocking | Unit 42 [1] |
53f35e49eb9b271fd8cbcd3daacb525328dbf159a03dbd1c7adebe0363daa402 | SHA-256 hash | Malware file | That file | 2026-10-06 | Blocking | Unit 42 [1] |
6e7d9b33f1e72ea1ede71373a604ecdb060dab7d42055179c1eede9ecd1fd239 | SHA-256 hash | Malware file | That file | 2026-10-06 | Blocking | Unit 42 [1] |
76273382e4252c1f60a2251141e108942494409c759358320735891762c0682e | SHA-256 hash | Malware file | That file | 2026-10-06 | Blocking | Unit 42 [1] |
7cc571aca6d8715d9aaad3d83e1bcd30467565d583db1dfe73697c5d00a1f875 | SHA-256 hash | Malware file | That file | 2026-10-06 | Blocking | Unit 42 [1] |
d3561bd4aad003dc3e08157b0891860bb496b80cd6e44901692e08ab1d4e8260 | SHA-256 hash | Malware file | That file | 2026-10-06 | Blocking | Unit 42 [1] |
f5b12772db6817f7a765a6fe7565fd3d4f87edc28e42fe3ec0244a372a410fc9 | SHA-256 hash | Malware file | That file | 2026-10-06 | Blocking | Unit 42 [1] |
f5ba1645694c62f527ed6ceda8c68a5c3dd92b4032439167e8e937e72803b4bd | SHA-256 hash | Malware file | That file | 2026-10-06 | Blocking | Unit 42 [1] |
hxxps://cloud[.]g-drive[.]cam/drive/file/d/ | URL | Phishing | That exact URL | 2026-10-06 | Blocking | Unit 42 [1] |
hxxps://cloud[.]g-drive[.]cam/signin/v2/identifier?from=landing | URL | Malware download | That exact URL | 2026-10-06 | Blocking | Unit 42 [1] |
118[.]145[.]196[.]225 | IP address | Malware download | That address only | 2026-10-05 | Blocking | Fortinet Threat Research [1] |
124[.]163[.]212[.]119 | IP address | Malware download | That address only | 2026-10-05 | Blocking | Fortinet Threat Research [1] |
222[.]223[.]152[.]97 | IP address | Malware download | That address only | 2026-10-05 | Blocking | Fortinet Threat Research [1] |
2bedc26d4b29b435c21962beed7db21188a0219a0d28334bba8b4fb1656d7b15 | SHA-256 hash | Malware file | That file | 2026-10-02 | Blocking | Rapid7 [1] |
2fe2dd402ee6f9c578fce6dd4b36daaa407e99133e5dd502f2afca80feb60150 | SHA-256 hash | Malware file | That file | 2026-10-02 | Blocking | Rapid7 [1] |
4925bcca085ec504f51191645da278d8e96698d91f3c6df44146336c697b4de8 | SHA-256 hash | Malware file | That file | 2026-10-02 | Blocking | Rapid7 [1] |
652508a9cf40bee883dc0e5e219dfeba71fe7dac591d01c89f74c21f73b4963f | SHA-256 hash | Malware file | That file | 2026-10-02 | Blocking | Rapid7 [1] |
7e667ba5f9df912e02275d3cfe3809d16f822fe776f4035c84b118ebd925b1b5 | SHA-256 hash | Malware file | That file | 2026-10-02 | Blocking | Rapid7 [1] |
925c041807d4fb9dfe2ad84f963c2a4c60ea1289f6a0bdccbfb944478ffc2cf2 | SHA-256 hash | Malware file | That file | 2026-10-02 | Blocking | Rapid7 [1] |
a37ea9897221d4495b538de72b74f2aa1d2ff09b7b6dcedd395aee58931adbf3 | SHA-256 hash | Malware file | That file | 2026-10-02 | Blocking | Rapid7 [1] |
a4379e115d3c4420f5d4b92561022d6e0897990e7297be65c033d47de68e6a6a | SHA-256 hash | Malware file | That file | 2026-10-02 | Blocking | Rapid7 [1] |
a65048eb30661e27f8edc2dd8d8c77ec87faec1f1750f6e04e7ecaf069a32858 | SHA-256 hash | Malware file | That file | 2026-10-02 | Blocking | Rapid7 [1] |
a6f3b7f932761fb1fd5e74123f2482e36c65dd13e769af2ce08c65da195bfa7a | SHA-256 hash | Malware file | That file | 2026-10-02 | Blocking | Rapid7 [1] |
bf8135f46ecedfe5bd06fcecbb2e721c2367ff765b18f4aa3f868e6597f49e47 | SHA-256 hash | Malware file | That file | 2026-10-02 | Blocking | Rapid7 [1] |
fingercakes4sale[.]store | Domain | Malware download | Domain and subdomains | 2026-10-02 | Blocking | Socket [1] [2] |
5e68ca8c2097caccdb74d2752b85b85595a4bf646b442b8431a2416e87dbf268 | SHA-256 hash | Malware file | That file | 2026-10-02 | Blocking | Socket [1] |
684c877a52d226d50584cb886ca8ec5bec6355d4de853f406734c79d5b387804 | SHA-256 hash | Malware file | That file | 2026-10-02 | Blocking | Socket [1] |
a276b76d3b00f302bb4dfb3690125c85ff472b16049c3c37476ac5e51096df07 | SHA-256 hash | Malware file | That file | 2026-10-02 | Blocking | Socket [1] |
da2d950e50326171adbff9c2bfd6f28998e32623ea7c2c475b9159a45cfb86bb | SHA-256 hash | Malware file | That file | 2026-10-02 | Blocking | Socket [1] |
hxxps://fingercakes4sale[.]store/dsyuC | URL | Malware download | That exact URL | 2026-10-02 | Blocking | Socket [1] [2] |
aac3165ece2959f39ff98334618d10d9 | MD5 hash | Malware file | That file | 2026-10-01 | Blocking | Cisco Talos [1] |
c2efb2dcacba6d3ccc175b6ce1b7ed0a | MD5 hash | Malware file | That file | 2026-10-01 | Blocking | Cisco Talos [1] |
90b1456cdbe6bc2779ea0b4736ed9a998a71ae37390331b6ba87e389a49d3d59 | SHA-256 hash | Malware file | That file | 2026-10-01 | Blocking | Cisco Talos [1] |
96fa6a7714670823c83099ea01d24d6d3ae8fef027f01a4ddac14f123b1c9974 | SHA-256 hash | Malware file | That file | 2026-10-01 | Blocking | Cisco Talos [1] |
sitemufl06qs0r4o[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemui6m6bbj1bd[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemui8go6g99bb[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuicitd4jrtr[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuidkr38kji0[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuidlij5urd0[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuif3pa5k4eh[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuife3h91vjj[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuioeefbyh3i[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuioi7005ekb[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuizkhpdbjnv[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuj1xencnin8[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuj7lzbasipw[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujbcz1nas1x[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujdi54aitrf[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujejvp4tp0x[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujffobdhxgj[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuji07m137aw[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujoqrmsm0et[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujrfn7witew[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujsm7brhwh0[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujtcvh5q9fj[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujtd8ingh2b[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujtdkvy6c7n[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujufht1ntj4[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujufs1975v4[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujug76lkyke[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujumvtmjaf1[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujuncdlpnng[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujuno47vpud[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujunzgjapds[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujw19idqe01[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujw1uspghl1[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujwcvm5ufu8[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemujxjlv2lmhh[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuk3jcm1olr8[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuk3jpe1eph7[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuk3z1hh2tvn[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuk3zjrr2ufy[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuk3zu5776gi[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuk6zd201nsw[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuk7f31386dx[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuk7fi1dcrp4[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuk7fvnvihra[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuk7xbyszpzj[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuk7y434m4om[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuk7yi5eqn74[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuk7ys6db9qj[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuk9ayiwadjz[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuk9c4oppeco[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemukh5awm67rj[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemukpy2hpmpwv[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemukrod1am6ez[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemukvxv7j5hmv[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemukvy7wudsqb[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemukww7ivnaji[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemukwxih8302f[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemul94tcv4l80[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemul95f18sowo[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemul95pxqgmm8[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemulaay8dbm66[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemulaucnbmnrd[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemulffos1qryn[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuli8pd7qi9z[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemulpmt6if530[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemulpnff7964j[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemulpo7jkntfz[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemulr9d1dg77r[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemuls00qrsh0k[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
sitemulszq4rm2yn[.]xyz | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Malwarebytes Labs [1] |
whapido[.]com | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Lab52 [1] |
217[.]156[.]8[.]181 | IP address | Listed by researchers | That address only | 2026-10-01 | Blocking | Lab52 [1] |
62[.]164[.]177[.]145 | IP address | Listed by researchers | That address only | 2026-10-01 | Blocking | Lab52 [1] |
6bbf10bcbef7ac5102b54c81137859891a3802dbacd888be90f990d50e18b0b4 | SHA-256 hash | Malware file | That file | 2026-10-01 | Blocking | Lab52 [1] |
hxxp://188[.]190[.]4[.]111/25vtps[.]txt | URL | Listed by researchers | That exact URL | 2026-10-01 | Blocking | Lab52 [1] |
hxxp://188[.]190[.]4[.]111/dldwuibjn_chShllcodeTrn[.]txt | URL | Listed by researchers | That exact URL | 2026-10-01 | Blocking | Lab52 [1] |
heritiage[.]org | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Proofpoint Threat Insight [1] |
heritiages[.]org | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Proofpoint Threat Insight [1] |
shinjirou[.]info | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Proofpoint Threat Insight [1] |
tw-koryu[.]org | Domain | Listed by researchers | Domain and subdomains | 2026-10-01 | Blocking | Proofpoint Threat Insight [1] |
108[.]61[.]163[.]187 | IP address | Listed by researchers | That address only | 2026-10-01 | Blocking | Proofpoint Threat Insight [1] |
104[.]248[.]244[.]66 | IP address | Listed by researchers | That address only | 2026-09-30 | Blocking | Unit 42 [1] |
162[.]33[.]178[.]9 | IP address | Listed by researchers | That address only | 2026-09-30 | Blocking | Unit 42 [1] |
193[.]149[.]176[.]207 | IP address | Listed by researchers | That address only | 2026-09-30 | Blocking | Unit 42 [1] |
216[.]245[.]184[.]164 | IP address | Listed by researchers | That address only | 2026-09-30 | Blocking | Unit 42 [1] |
45[.]61[.]136[.]143 | IP address | Listed by researchers | That address only | 2026-09-30 | Blocking | Unit 42 [1] |
66[.]227[.]183[.]84 | IP address | Listed by researchers | That address only | 2026-09-30 | Blocking | Unit 42 [1] |
1bd314b661396c7086f6367fbbb48025e03ca2de69c073d53a8b0a38aa5fbb7d | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Unit 42 [1] |
79c65fa04541032e251fa4796b97800374b63c7982593dd1a2e0db605d429186 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Unit 42 [1] |
ae22ef2517b5c0fb47f78745b9cb5260acee0e751b89bcd354640ff8bc8d29ec | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Unit 42 [1] |
2379ac0e03b1a67c4ca5693136eff4945e644a91 | SHA-1 hash | Malware file | That file | 2026-09-30 | Blocking | ReversingLabs [1] |
b4f20b39aa6df1002872f07973024d85aa49abaf | SHA-1 hash | Malware file | That file | 2026-09-30 | Blocking | ReversingLabs [1] |
d2438106211ebd12c4f0a248848bc9864c97a3c0 | SHA-1 hash | Malware file | That file | 2026-09-30 | Blocking | ReversingLabs [1] |
e5d1f3c45ee7cca6ae59cf64e0573050bbe136ec | SHA-1 hash | Malware file | That file | 2026-09-30 | Blocking | ReversingLabs [1] |
hxxps://aware-cr1[.]com/api/beacon | URL | Command and control | That exact URL | 2026-09-30 | Blocking | Zscaler ThreatLabz [1] |
oast[.]online | Domain | Malware download | That exact host | 2026-09-30 | Blocking | Microsoft Threat Intelligence [1] |
requestrepo[.]com | Domain | Malware download | That exact host | 2026-09-30 | Blocking | Microsoft Threat Intelligence [1] |
wsweb03[.]blob[.]core[.]windows[.]net | Domain | Data theft | Domain and subdomains | 2026-09-30 | Blocking | Microsoft Threat Intelligence [1] |
117[.]107[.]25[.]243 | IP address | Command and control | That address only | 2026-09-30 | Blocking | Microsoft Threat Intelligence [1] |
192[.]255[.]193[.]111 | IP address | Command and control | That address only | 2026-09-30 | Blocking | Microsoft Threat Intelligence [1] |
193[.]42[.]40[.]135 | IP address | Command and control | That address only | 2026-09-30 | Blocking | Microsoft Threat Intelligence [1] |
45[.]32[.]30[.]235 | IP address | Command and control | That address only | 2026-09-30 | Blocking | Microsoft Threat Intelligence [1] |
22ef852f6ebc39ee71235b90648b4b200b385c47d25c79545986493f8c70db69 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Microsoft Threat Intelligence [1] |
518fe65dd349180191d9b258ab24876aaed6613cd657d0b626d1fc24e03a22b6 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Microsoft Threat Intelligence [1] |
65a7576c389326b6cdf9c993d0be6e5d50fed9655d1cdf2a3a50f2c21c8ec435 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Microsoft Threat Intelligence [1] |
6ab7de2509038edf580aef6229c1c3db17f4da8f2d7d940818faf617d1938244 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Microsoft Threat Intelligence [1] |
aea991f694911e321b0ab97534f2ad0291c392c0a43dabff664c563618bd036d | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Microsoft Threat Intelligence [1] |
b594a42b8f1c6f090327bb9a3361c2d3515537fb7ac8da6b9061b9a3f330e159 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Microsoft Threat Intelligence [1] |
bf28f38122bf20d5fac969cc414daa6a890cdea872d389ca93d2092b6b7773cf | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Microsoft Threat Intelligence [1] |
dee5af1c0f76b45d28bafd6e60c07bb8e391d98addf81ef8f13d073acdb3c48a | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Microsoft Threat Intelligence [1] |
d2nq35tel3ucuo[.]cloudfront[.]net | Domain | Malware download | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
d32tpl7xt7175h[.]cloudfront[.]net | Domain | Command and control | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
microsoft-flash[.]com | Domain | Malware download | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
my-3lyt6wcp[.]pages[.]dev | Domain | Malware download | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
my-662ylt3w[.]pages[.]dev | Domain | Malware download | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
my-6g16qsfe[.]pages[.]dev | Domain | Malware download | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
my-goq6xmbm[.]pages[.]dev | Domain | Malware download | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
my-h3qli6kq[.]pages[.]dev | Domain | Malware download | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
my-qc39r814[.]pages[.]dev | Domain | Malware download | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
my-sv7c1fzs[.]pages[.]dev | Domain | Malware download | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
my-u0up9qri[.]pages[.]dev | Domain | Malware download | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
my-vtsdod2n[.]pages[.]dev | Domain | Malware download | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
my-wgoxp32b[.]pages[.]dev | Domain | Malware download | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
oisadjfoinsiduhfnoisdnfosdnoifnsoid[.]pages[.]dev | Domain | Malware download | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
osc-cdn[.]com | Domain | Phishing | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
pub-0173d1566dcd4fd49fa25f11f14bfe4c[.]r2[.]dev | Domain | Listed by researchers | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
pub-abfa7742e315485a98a5fafd6dbfb68e[.]r2[.]dev | Domain | Listed by researchers | Domain and subdomains | 2026-09-30 | Blocking | Cisco Talos [1] |
wps-cn[.]com | Domain | Malware download | That exact host | 2026-09-30 | Blocking | Cisco Talos [1] |
103[.]27[.]110[.]220 | IP address | Malware download | That address only | 2026-09-30 | Blocking | Cisco Talos [1] |
01b5c6acb20e41799a0e96d9d1d6e1c44791883706b6285e874fcb15cc93b31a | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
077bd873217d8abfbb6482d11966ca34f3fef7ad5166f24fbc5dc3ddefe894a1 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
079acd58a74479ac8b108b618d2a4da8a8bd560a04459cd90e2fec9da5027513 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
09ef7c736bccfafefc44d9910d499173b88063b73b221fc0dc9e9105107e5cff | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
0a6fb71ab1362d065c7ec2678c1e73d9a0721b0e7099d392ba7559bb2eec4970 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
0b4e5e017c0f0ccac79e13ca5d580a75af67a24ca0763f9ebfdaaeb1ba4fc739 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
0c39264337a1186b2e765e24073399cbdcba118306614eb411e315887af578bd | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
131ac3e0df777910e0a32e43d5744bccb0490750d4c2adc359da41d76d383c46 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
133a46ba41136ca21c93fb08c28446826d8c0d9b7923a16f2d152d595a710098 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
170b0eee60a335f32c1d0c19a0bb8d8bbc0a5b298ea9486b546f58d25cc8a464 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
17b53ffa8e005f0e82491d3f9c0a4984c44da52e1668a855c11a137f627c5b4b | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
1fadc90b61ce536abda78eb387a7f3d745f00c16775d3f762845ccc0fde567da | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
23d5f1af8581ae200615d9a66d539f2043c3248b649e862557b379d7e8b7a3ac | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
2f1513c822af0c6635dd3c69dc38f0b2f6e02012ea36415fff111a5d4d5fae05 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
334f39279ff3aae40fe74340c887ae018c75bc42790586bdf9070adb5889100c | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
3a4c9020eeb5ef22a1ff443e606ccb6705fe287c583121c713d2c9f9f1f2a2af | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
3a94910eb8022592ce030e6861359f7e980fc1b5a6ccd290cbb071d3e95ed02a | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
40e7e77aff603f4c2ef17b3bc8ea836e714d0734a1e5b946e52f95536ec5c91d | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |
47f98dfe01759a464e22d5ec55d012dccb38ce010dd73e3ba8d7ffefca12b4b2 | SHA-256 hash | Malware file | That file | 2026-09-30 | Blocking | Cisco Talos [1] |