Indicators of Compromise

Name: CTIWatch Threat Intelligence Dataset
License: https://creativecommons.org/licenses/by-nc/4.0/

Active only1,678,533 IoCs← click a row for enrichment details

Type	Value / Enrichment	Confidence	Source	Tags	Seen
ip	89.167.9.99	85%	Cowrie Honeypot	ssh-attackhoneypot	06/08/2026
ip	24.36.189.207	85%	Cowrie Honeypot	ssh-attackhoneypot	06/08/2026
ip	20.198.118.186	85%	Cowrie Honeypot	ssh-attackhoneypot	06/08/2026
ip	109.205.181.30	85%	Cowrie Honeypot	ssh-attackhoneypot	06/08/2026
ip	79.175.93.31	85%	Cowrie Honeypot	ssh-attackhoneypot	06/08/2026
ip	81.169.230.124	85%	Cowrie Honeypot	ssh-attackhoneypot	06/08/2026
ip	83.228.208.45	85%	Cowrie Honeypot	ssh-attackhoneypot	06/08/2026
ip	46.151.182.135ThreatFox botnet_cc (win.remcos)	75%	ThreatFox	threatfoxbotnet_cc	06/08/2026
domain	health.duskpoint27.clickThreatFox botnet_cc (win.revstealer)	75%	ThreatFox	threatfoxbotnet_cc	06/08/2026
domain	therodeoroundup.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	aavehmy.therodeoroundup.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	sweethannahs.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	wwohee.sweethannahs.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
ip	139.199.3.92ThreatFox botnet_cc (win.cobalt_strike)	75%	ThreatFox	threatfoxbotnet_cc	06/08/2026
ip	8.135.68.39ThreatFox botnet_cc (win.cobalt_strike)	75%	ThreatFox	threatfoxbotnet_cc	06/08/2026
domain	ign.bayototo.orgThreatFox botnet_cc (win.vidar)	95%	ThreatFox	threatfoxbotnet_cc	06/08/2026
url	https://ign.bayototo.org/ThreatFox botnet_cc (win.vidar)	95%	ThreatFox	threatfoxbotnet_cc	06/08/2026
domain	rumbaju42.icuThreatFox payload_delivery (unknown)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
url	http://139.135.46.28:55160/Mozi.mThreatFox payload_delivery (elf.mozi)	75%	ThreatFox	threatfoxpayload_delivery	06/08/2026
url	http://61.53.8.56:50916/Mozi.mThreatFox payload_delivery (elf.mozi)	75%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	tigersmartialarts.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	butterbread1122.icuThreatFox payload_delivery (js.iclickfix)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	burministr5123.icuThreatFox payload_delivery (js.iclickfix)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	faircloud512421.buzzThreatFox payload_delivery (js.iclickfix)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	elizium999.digitalThreatFox payload_delivery (js.iclickfix)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	korichniuu122.icuThreatFox payload_delivery (js.iclickfix)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	fochinal5123.lifeThreatFox payload_delivery (js.iclickfix)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	trokkypi512122.icuThreatFox payload_delivery (js.iclickfix)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	aqnkjcr.tigersmartialarts.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	tacticalk9familycoin.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	hzrhky.tacticalk9familycoin.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	dayvillelaundry.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	tinyzonetv.imThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	xvaqhrg.tinyzonetv.imThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	oasteadomnuluidiaspora.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	gbugugpucukhbnvwxg.oasteadomnuluidiaspora.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	tiptop-shops.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	tadkaindiaka.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	dfxwbjt.tiptop-shops.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	rwyzls.tadkaindiaka.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
domain	sm2ztett.rossandrossenterprisesinc.comThreatFox payload_delivery (js.clearfake)	95%	ThreatFox	threatfoxpayload_delivery	06/08/2026
ip	149.28.242.174ThreatFox botnet_cc (win.asyncrat)	95%	ThreatFox	threatfoxbotnet_cc	06/08/2026
ip	202.61.140.68ThreatFox botnet_cc (unknown)	95%	ThreatFox	threatfoxbotnet_cc	06/08/2026
ip	82.21.185.81ThreatFox botnet_cc (unknown_rat)	75%	ThreatFox	threatfoxbotnet_cc	06/08/2026
ip	82.21.185.243ThreatFox botnet_cc (unknown_rat)	75%	ThreatFox	threatfoxbotnet_cc	06/08/2026
url	http://130.12.182.77/main.armebv7URLhaus — threat: malware_download — tags: arm, elf, opendir, ua-wget	80%	Abuse.ch URLhaus	malwaremalware_download	06/08/2026
url	http://130.12.182.77/main.archs38URLhaus — threat: malware_download — tags: elf, opendir, ua-wget	80%	Abuse.ch URLhaus	malwaremalware_download	06/08/2026
url	http://130.12.182.77/main.armv4URLhaus — threat: malware_download — tags: arm, elf, opendir, ua-wget	80%	Abuse.ch URLhaus	malwaremalware_download	06/08/2026
url	http://130.12.182.77/tplink.shURLhaus — threat: malware_download — tags: opendir, sh, ua-wget	80%	Abuse.ch URLhaus	malwaremalware_download	06/08/2026
url	http://130.12.182.77/main.armv5URLhaus — threat: malware_download — tags: arm, elf, opendir, ua-wget	80%	Abuse.ch URLhaus	malwaremalware_download	06/08/2026

← PreviousPage 24 / 33571Next →