Pulse Detail — Threat Intelligence

PULSE NAME

Twitter Feed - drb_ra - 16-02-2025

WHITE CyberHunterAutoFeed 2025-02-17 Modified: 2025-03-19

IOCs

HIGH VOLUME

C2 Havoc Evilginx EvilGoPhish Remcos NetSupportRAT DanaBot AsyncRAT CobaltStrike Deimos Mythic Sliver Hak5_Cloud_C2 Supershell

Indicators of Compromise (58)

All URL domain hostname

TYPE	INDICATOR	DESCRIPTION	CREATED
URL	http://186.249.218.242:443	—	2025-02-17
URL	http://156.238.230.148:3333	—	2025-02-17
URL	http://193.26.115.89:40056	—	2025-02-17
URL	http://4.234.160.148:443	—	2025-02-17
URL	http://20.92.165.192:443	—	2025-02-17
URL	http://74.249.102.229:443	—	2025-02-17
URL	http://20.249.208.141:443	—	2025-02-17
URL	http://154.90.39.229:443	—	2025-02-17
URL	http://154.90.39.229:80	—	2025-02-17
URL	http://101.99.93.231:11601	—	2025-02-17
URL	http://5.22.213.130:443	—	2025-02-17
URL	http://194.59.31.111:46167	—	2025-02-17
URL	http://124.71.228.177:9991	—	2025-02-17
URL	http://35.78.180.139:5432	—	2025-02-17
URL	http://88.17.119.80:443	—	2025-02-17
URL	http://13.208.181.173:46174	—	2025-02-17
URL	http://15.236.210.224:9201	—	2025-02-17
URL	http://15.228.201.119:54284	—	2025-02-17
URL	http://15.228.201.119:5984	—	2025-02-17
URL	http://13.245.117.46:19999	—	2025-02-17
URL	http://95.164.55.3:443	—	2025-02-17
URL	http://185.49.126.235:6606	—	2025-02-17
URL	http://185.49.126.235:2004	—	2025-02-17
URL	http://185.49.126.235:8808	—	2025-02-17
URL	http://191.96.207.168:7707	—	2025-02-17
URL	http://191.96.207.168:6606	—	2025-02-17
URL	http://108.61.217.60:8888	—	2025-02-17
URL	http://115.120.250.85:443	—	2025-02-17
URL	http://106.15.184.255:50011	—	2025-02-17
URL	http://20.0.106.6:80	—	2025-02-17
URL	http://194.5.249.178:443	—	2025-02-17
URL	http://101.36.117.41:8086	—	2025-02-17
URL	http://172.179.236.95:55443	—	2025-02-17
URL	http://47.239.165.225:8443	—	2025-02-17
URL	https://wuya-nsw.xyz/api/v1/health	—	2025-02-17
domain	wuya-nsw.xyz	—	2025-02-17
URL	http://172.111.160.2:443	—	2025-02-17
URL	http://13.224.101.73:443	—	2025-02-17
URL	http://102.117.173.23:7443	—	2025-02-17
URL	http://95.163.64.151:443	—	2025-02-17
URL	http://64.188.99.4:443	—	2025-02-17
URL	http://64.188.99.4:8888	—	2025-02-17
URL	http://96.232.200.31:8080	—	2025-02-17
URL	http://95.111.219.197:4433	—	2025-02-17
URL	http://81.163.22.79:443	—	2025-02-17
URL	http://3.70.11.235:7723	—	2025-02-17
URL	http://13.251.129.9:2079	—	2025-02-17
URL	http://35.180.228.21:591	—	2025-02-17
URL	http://162.244.210.40:8808	—	2025-02-17
URL	http://156.238.230.224:3333	—	2025-02-17
URL	http://198.98.48.4:8888	—	2025-02-17
hostname	network.dhcpclient.com	—	2025-02-17
URL	https://network.dhcpclient.com/en_US/all.js	—	2025-02-17
URL	http://20.40.99.133:80	—	2025-02-17
URL	http://185.102.75.120:80	—	2025-02-17
URL	https://cdn.gridgatecloud.com/checkouts/internal/preloads.js	—	2025-02-17
hostname	cdn.gridgatecloud.com	—	2025-02-17
URL	http://196.251.71.31:443	—	2025-02-17

References (52)