Threat Intelligence — C2 Infrastructure Monitoring

C2 Server Database

KEYDAL-verified command and control infrastructure. Obtained exclusively from manually reviewed samples.

Weekly Report Malware Families
3777 Active C2
2365 Passive
40 Sinkholed
126 Malware Families
Total Distribution — 6182 servers 61% active threat
■ Active (61%) ■ Sinkhole (1%) ■ Passive (38%)
All Families AgentTesla 109 AsyncRAT 375 BluStealer 32 Cl0p 1 Cryptbot 1 DBatLoader 1 DCRat 245 FormBook 1 GootLoader 1 NjRAT 224 RecordBreaker 1 RemcosRAT 9
digicert.com
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
stem.ru
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
digicert.com
DCRat TCP DOMAIN
digicert.com
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
crypto.io
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
dublincore.org
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
googleapis.com
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
comodoca.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
comodoca.com
NjRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
freightfacilitators.com
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
digicert.com
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
comodoca.com
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
digicert.com
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
digicert.com
AsyncRAT TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
digicert.com
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
example.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
digicert.com
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
trycloudflare.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
x87sw.top
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
amazonaws.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
195.133.40.89
Cryptbot HTTP :80 IP RU
digicert.com
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
digicert.com
BluStealer TCP DOMAIN
digicert.com
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
yahoo.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
globalsign.com
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
bing.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
discord.com
DCRat TCP DOMAIN
sectigo.com
BluStealer TCP DOMAIN
microsoft.com
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
rambler.ru
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
digicert.com
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
comodoca.com
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
google.ru
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
188.120.241.201
RecordBreaker HTTP :80 IP RU
microsoft.com
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
yandex.ru
AsyncRAT TCP DOMAIN
nuget.org
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
BluStealer TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
google.com
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
digicert.com
AgentTesla TCP DOMAIN
stem.ru
AgentTesla TCP DOMAIN
github.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
breakingsecurity.net
RemcosRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
fluentvalidation.net
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
github.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
newtonsoft.com
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
digicert.com
DCRat TCP DOMAIN
ventnor.com
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
fluentvalidation.net
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
json.net
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
digicert.com
AgentTesla TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
latofonts.com
NjRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
stem.ru
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
digicert.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
github.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
globalsign.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
8989ktw.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
RemcosRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
oracle.com
DCRat TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
itab.net
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
breakingsecurity.net
RemcosRAT TCP DOMAIN
23.227.203.68
GootLoader HTTPS :443 IP US
ystem.net
AsyncRAT TCP DOMAIN
pmoc.me
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
digicert.com
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
digicert.com
NjRAT TCP DOMAIN
itab.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
comodoca.com
NjRAT TCP DOMAIN
system.io
RemcosRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
exec.in
DCRat TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
golang.org
AsyncRAT TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
acoustica.com
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
breakingsecurity.net
RemcosRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
oser.me
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
autoitscript.com
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
golang.org
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
mingw.org
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
github.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
github.com
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
fluentvalidation.net
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
comodoca.com
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
paint.net
RemcosRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
americanshippingline.com
RemcosRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
gsystem.net
NjRAT TCP DOMAIN
purl.org
RemcosRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
x87sw.top
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
166bet.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
adobe.com
RemcosRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
xanasoft.com
BluStealer TCP DOMAIN
digicert.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
trycloudflare.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
sandboxie-plus.com
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
adobe.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
BluStealer TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
trycloudflare.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
BluStealer TCP DOMAIN
globalsign.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
shhnowisnottheti.me
NjRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
github.com
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
autoitscript.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
trycloudflare.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
golang.org
DCRat TCP DOMAIN
openssl.org
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
crates.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
154.53.38.164
Cl0p HTTPS :443 IP RU
system.io
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
stem.net
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
digicert.com
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
sectigo.com
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
toast.in
NjRAT TCP DOMAIN
exec.in
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
comodoca.com
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
comodoca.com
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
command.com
NjRAT TCP DOMAIN
oracle.com
DCRat TCP DOMAIN
digicert.com
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
digicert.com
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
stem.ru
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
nuget.org
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
newtonsoft.com
BluStealer TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
45.61.136.16
FormBook HTTP :80 IP US
system.io
AsyncRAT TCP DOMAIN
googleapis.com
AgentTesla TCP DOMAIN
microsoft.com
AgentTesla TCP DOMAIN
txet.me
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
digicert.com
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
sysinternals.com
AsyncRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
digicert.com
AgentTesla TCP DOMAIN
pmoc.me
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
acoustica.com
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
oser.me
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
digicert.com
BluStealer TCP DOMAIN
comodoca.com
AsyncRAT TCP DOMAIN
stem.ru
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
sordum.org
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
baidu.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
BluStealer TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
aliyuncs.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
sysinternals.com
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
github.com
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
digicert.com
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
scheimerltda.com
AgentTesla TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
oracle.com
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
github.com
DCRat TCP DOMAIN
176.32.34.88
DBatLoader HTTP :80 IP UA
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
microsoft.com
NjRAT TCP DOMAIN
system.io
NjRAT TCP DOMAIN
microsoft.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
googleapis.com
DCRat TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
AgentTesla TCP DOMAIN
microsoft.com
AgentTesla TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
system.io
AsyncRAT TCP DOMAIN
microsoft.com
AsyncRAT TCP DOMAIN
trycloudflare.com
AsyncRAT TCP DOMAIN
system.io
DCRat TCP DOMAIN
system.io
NjRAT TCP DOMAIN

Abuse History (79 records)

HedefTürPlatformStatusMalwareTarihNot
raccoon2-panel.cc DOMAIN NameCheap Pending RecordBreaker 01.07.2026 RecordBreaker (Raccoon v2) panel domain
secure-login-portal.top DOMAIN MalwareBazaar Pending LummaStealer 28.06.2026 LummaStealer credential harvest domain. Rapor beklemede.
smokeloader-panel.ru DOMAIN Reg.ru RU Sent SmokeLoader 28.06.2026 SmokeLoader C2 panel Rusya domain
onyxtrustsec.com DOMAIN Spamhaus Sent LummaStealer 25.06.2026 LummaStealer C2 domain - DNS sinkhole onerisi verildi
185.196.8.210 IP FlyServers RU Pending LummaStealer 25.06.2026 LummaStealer aktif C2 - Rusya BH hosting
89.187.167.118 IP AbuseIPDB Approved AsyncRAT 20.06.2026 AsyncRAT aktif C2 - Hetzner, port 4444
aurora-stealer.net DOMAIN NameCheap Pending Aurora 20.06.2026 Aurora Stealer satis sitesi
cloudflareprotected.xyz DOMAIN DomainAbuse Pending WarzoneRAT 15.06.2026 WarzoneRAT C2 domain - sahte Cloudflare domain, port 5200
91.215.85.232 IP Abuse.ch Sent LummaStealer 15.06.2026 LummaStealer aktif C2 - 12 kampanyada tespit edildi. Rapor gonderildi.
stealc-panel.ru DOMAIN Reg.ru RU Sent StealC 15.06.2026 StealC C2 panel domain
92.255.57.48 IP abuse.ch Sent BitRAT 10.06.2026 BitRAT C2 - MIRAN-AS, TCP port 7777
103.43.76.41 IP abuse.ch Sent BitRAT 08.06.2026 BitRAT C2 - Asia hosting, TCP port 7777
45.87.152.64 IP abuse.ch Sent LummaStealer 01.06.2026 LummaStealer HTTPS panel tespit edildi - aktif
194.147.90.166 IP AbuseIPDB Sent Meduza 01.06.2026 Meduza Stealer HTTP panel - Netherlands Leaseweb
panel-redline.ru DOMAIN Reg.ru RU Sent RedLine 01.06.2026 RedLine Stealer panel Rusya domain
185.174.137.219 IP AbuseIPDB Approved StealC 30.05.2026 StealC HTTP panel - Russia Timeweb hosting, aktif panel
blackguard-shop.ru DOMAIN Reg.ru RU Sent BlackGuard 25.05.2026 BlackGuard Stealer satis panel
onyxtrustsec.com DOMAIN ICANN Sent RemcosRAT 20.05.2026 RemcosRAT C2 domain - DNSSEC bypass, aktif kampanya
risepro-shop.ru DOMAIN Reg.ru RU Sent RisePro 20.05.2026 RisePro Stealer satis sitesi Rusya domain
89.19.209.214 IP AbuseIPDB Approved Vidar 15.05.2026 Vidar Stealer HTTP C2 - panel tespit edildi
fakedriversupport.com DOMAIN Cloudflare Pending LummaStealer 15.05.2026 LummaStealer payload hosting - sahte surucu guncelleme
194.165.16.77 IP Spamhaus Sent RedLine 10.05.2026 RedLine Stealer C2 - HTTPS exfiltration tespit edildi
gootkit-cdn.com DOMAIN GoDaddy Sent Gootloader 10.05.2026 Gootloader watering hole domain
47.88.65.243 IP AbuseIPDB Sent RemcosRAT 20.04.2026 RemcosRAT C2 - Asia hosting, phishing email kampanyasi
xworm-updates.xyz DOMAIN NameCheap Sent XWorm 20.04.2026 XWorm v5.2 dropper domain
185.215.113.31 IP AbuseIPDB Approved NjRAT 15.04.2026 NjRAT C2 tespit edildi - TCP port 1177, aktif yayilim kampanyasi
185.220.101.52 IP Hostinger Sent AsyncRAT 15.04.2026 AsyncRAT C2 Hostinger IP - port 8808
api.telegram.org DOMAIN Telegram Sent Vidar 10.04.2026 Vidar dead-drop C2 - Telegram kanalinda C2 adresi paylasimi
62.197.162.218 IP Spamhaus Sent DCRat 05.04.2026 DCRat botnet C2 - Contabo DE, HTTP panel
193.233.20.158 IP AbuseIPDB Approved NjRAT 20.03.2026 NjRAT reverse shell traffic, port 7707
5.75.176.228 IP abuse.ch Approved Vidar 18.03.2026 Vidar Stealer C2 - Hetzner hosting, Telegram bot relay
45.155.37.29 IP FastComet Hosting Removed PrivateLoader 12.03.2026 PrivateLoader C2 barindiran hosting hizmetine karsi abuse bildirimi. Hesap askiya alindi.
45.133.174.124 IP FBI Sent CobaltStrike 10.03.2026 Cobalt Strike beacon server - DigitalOcean US, ransomware pre-deployment
192.99.39.52 IP AbuseIPDB Approved AgentTesla 05.03.2026 AgentTesla SMTP exfiltration relay - OVH Canada hosting
45.61.136.16 IP Psychz Networks US Removed FormBook 20.02.2026 FormBook HTTP C2 panel. Psychz abuse ekibi 7 gun sonra hesabi kapatti.
91.92.246.33 IP Serverius NL Sent XWorm 15.02.2026 XWorm v5.2 C2. Hollanda hosting. Bildiri gonderildi, yanit bekleniyor.
91.92.241.86 IP AbuseIPDB Approved RedLine 14.02.2026 RedLine C2 - credential exfiltration, port 6606
mblogci3rudehaagbryjznltdp33ojwzkq6hn2pckvjq33rycmzczpid.onion DOMAIN abuse.ch Pending Raccoon 14.02.2026 Raccoon Stealer v2 onion C2 - Tor hidden service
149.102.143.58 IP AbuseIPDB Approved XWorm 22.01.2026 XWorm RAT C2 - WebSocket iletisim tespit edildi
85.195.206.19 IP RegHost LLC Removed DBatLoader 22.01.2026 DBatLoader dropper C2. IP blacklistlendi.
45.61.139.15 IP Psychz Networks Removed RemcosRAT 08.01.2026 RemcosRAT C2 Psychz Networks. 5 gun icinde IP blacklistlendi.
94.26.229.168 IP Selectel Sent DCRat 20.12.2025 DCRat panel barindiran Rus hosting. Selectel 4 haftadir yanit vermedi.
185.220.101.47 IP MalwareBazaar Approved AsyncRAT 10.12.2025 AsyncRAT C2 - Hetzner DE VPS, port 6606
94hd72k.shop DOMAIN Namecheap Removed LummaStealer 05.12.2025 LummaStealer panel domaini. Namecheap 3 gun icinde suspend etti.
cdn-files-storage.net DOMAIN Shadowserver Sent FormBook 01.12.2025 FormBook HTTP C2 ve yuk barindirma domain.
45.89.127.108 IP Abuse.ch Approved AsyncRAT 12.11.2025 AsyncRAT C2 - self-signed SSL sertifikasi kullanmaktadir.
94.156.66.79 IP BriskServer RU Sent LummaStealer 10.11.2025 LummaStealer C2 sunucusu. Rus hosting bildirimi dikkate almadi, IP aktif.
193.142.146.35 IP Hetzner Online Removed AsyncRAT 18.10.2025 AsyncRAT C2 sunucusu. Hetzner hizli yanit verdi ve hesabi kapatti.
vidarstealer.shop DOMAIN Tucows OpenSRS Removed Vidar 05.10.2025 Vidar Stealer dagitim domaini. Tucows 48 saat icinde suspend etti.
njrat-c2-2025.ddns.net DOMAIN NameSilo Removed NjRAT 22.09.2025 NjRAT DDNS domaini. NameSilo 48 saat icinde domain kaldirdi.
support-team-help.xyz DOMAIN AbuseIPDB Approved AgentTesla 10.09.2025 AgentTesla SMTP C2 domain - IANA raporu onaylandi.
37.120.198.248 IP MalwareBazaar Sent RemcosRAT 01.09.2025 RemcosRAT v4.9 C2 - legitimate KVM panelinde barindiriliyor.
185.252.148.78 IP FlokiNET Sent NjRAT 30.08.2025 NjRAT C2 Letonya bulletproof hosting. FlokiNET abuse bildirisi cevaplanmadi.
microsoft-update365.com DOMAIN Spamhaus Removed NjRAT 15.08.2025 NjRAT icin sahte Microsoft domain - Spamhaus DBL karadestesi.
update-cdn-secure.com DOMAIN Abuse.ch Removed RedLine 22.07.2025 RedLine Stealer dagitim domaini - ICANN kaldirdi.
darkcomet-c2.ru DOMAIN RU-CENTER Sent DarkComet 15.07.2025 DarkComet C2 .ru TLD. Rus registrar abuse bildirisi cevapsiz kaldi.
41.216.188.11 IP Africa Online Removed Emotet 15.06.2025 Emotet C2 Afrika tabanli hosting. Bildiri sonrasinda IP blacklistlendi.
5.8.88.226 IP Shadowserver Removed IcedID 30.05.2024 IcedID C2 - FBI/DOJ Nisan 2024 Operation EndGame kapsaminda kaldirildi.
185.220.100.240 IP AbuseIPDB Approved IcedID 30.05.2024 IcedID Tor exit relay C2 - Operation EndGame kapsami.
193.233.203.144 IP AbuseIPDB Sent BlackGuard 15.04.2024 BlackGuard Stealer HTTPS panel - aktif kampanya 2024
188.120.241.201 IP abuse.ch Sent RecordBreaker 10.03.2024 RecordBreaker infostealer panel - Timeweb Russia
45.144.154.29 IP AbuseIPDB Sent Arechclient 28.02.2024 ArechClient RAT C2 - Leaseweb Netherlands
89.208.31.197 IP AbuseIPDB Approved Phemedrone 01.02.2024 Phemedrone Stealer C2 - GitHub Actions ve Telegram relay zinciri
45.131.66.167 IP AbuseIPDB Approved XLoader 20.01.2024 XLoader infostealer C2 - Selectel RU hosting
95.217.35.154 IP AbuseIPDB Approved QakBot 20.09.2023 QakBot C2 (Hetzner FI) - Black Basta ransomware chain
103.124.105.230 IP AbuseIPDB Sent RecordBreaker 15.09.2023 RecordBreaker (Raccoon v2) C2 - India hosting, aktif kampanya
181.174.165.208 IP Abuse.ch Removed QakBot 01.09.2023 FBI Operation Duck Hunt - QakBot botnet C2 sinkhole edildi.
212.117.180.232 IP Shadowserver Removed QakBot 01.09.2023 QakBot Knight kampanya C2 - FBI ve Europol isbirligi sonucu devre disi birakildi.
102.182.32.78 IP AbuseIPDB Removed QakBot 01.09.2023 QakBot Madhatter C2 - Operation Duck Hunt kapsaminda devre disi birakildi.
5.252.176.98 IP AbuseIPDB Approved Aurora 15.01.2023 Aurora Stealer C2 - Go-based, Timeweb Russia hosting
94.232.43.202 IP AbuseIPDB Removed Erbium 01.11.2022 Erbium Stealer C2 - Nov 2022 shutdown, operator doxxed
45.139.199.83 IP FBI Removed Raccoon 28.10.2022 Raccoon Stealer v1 C2 - Ukrayna operasyonu, operatör tutuklandı (Oct 2022)
79.141.164.52 IP CISA Removed Dridex 15.06.2022 Dridex botnet C2 - FBI/Europol operasyonu ile kaldirildi
103.143.173.206 IP CERT-ID Sent Emotet 10.05.2022 Emotet botnet resurgence C2 - Indonesia compromised server
80.66.88.65 IP Spamhaus Approved Arkei 10.05.2022 Arkei Stealer C2 - Selectel RU, Vidar öncüsü
45.156.25.1 IP MalwareBazaar Removed TrickBot 14.03.2022 TrickBot VNC modulu C2 - Spamhaus kaldirma talebi onaylandi.
144.91.65.153 IP CERT-DE Removed Emotet 28.01.2022 Emotet C2 kaldirildi - Europol/Eurojust Operasyon LADYBIRD
185.234.218.151 IP Abuse.ch Approved TrickBot 18.10.2021 TrickBot modular C2 - Europol Ekim 2021 kaldirma operasyonunda etkisizlestirildi.
45.147.231.250 IP Interpol Removed TrickBot 12.04.2021 TrickBot C2 - Microsoft legal action ile kaldirildi (Oct 2020)
This data is for defensive purposes only. Misusing C2 addresses is prohibited. Reports are submitted to AbuseIPDB, Spamhaus and CERT-TR.