{ "type": "URL", "indicator": "http://102.39.215.83:9090", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "http://102.39.215.83:9090", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 3628884110, "indicator": "http://102.39.215.83:9090", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 22, "pulses": [ { "id": "69c6f30e2af3822ace33cd7b", "name": "CAPE Sandbox", "description": "", "modified": "2026-04-26T21:26:37.152000", "created": "2026-03-27T21:13:50.811000", "tags": [ "accept", "post http", "cname", "file size", "mwdb", "bazaar", "sha3384", "ssdeep", "file type", "crc32", "shutdown", "title", "body" ], "references": [ "https://vtbehaviour.commondatastorage.googleapis.com/f4bb07fcc5b61e72c473bd3b095141f5b000987d19131803efb7f04ca3d34e49_CAPE%20Sandbox.html?GoogleAccessId=758681729565-rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com&Expires=1774645899&Signature=GNKT7YC1oO0b6Hjq3BNC5%2FfivbaLliRIzmdOPvAVlj5yH7scQYaX%2FN5m%2FxP%2FSqIjBJHSDdesVGIRTDIVUs1FygrwIkiHl30fwh5rEweeHfBeDLgcmYx042R4LwTb2m4yj5PhF7yiAJBzMvLR1l5DWibBOdmIDjrImXRBESKFac7SeGZ8FMz39YjFJGkkMebkE4MFl%2BLU0mX8ylGAVKEcsxae5FE7NBuIxSCECkJCZ94%2BrKkYIn" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 16, "FileHash-SHA1": 16, "FileHash-SHA256": 16, "URL": 868, "domain": 7, "hostname": 59 }, "indicator_count": 982, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "33 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6710c73bf708e52948bbf5f6", "name": "[GS-553] Mirai Botnet IOCs - SEC-1275-1", "description": "", "modified": "2024-11-16T08:03:10.430000", "created": "2024-10-17T08:13:47.307000", "tags": [ "mirai botnet", "iocs", "mirai", "linux", "toggle", "compromise ipv4", "ipv4 port", "combinations", "sha1", "sha256" ], "references": [ "https://1275.ru/ioc/4120/gs-553-mirai-botnet-iocs/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 23, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Gnostis", "id": "44738", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_44738/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 86, "FileHash-SHA1": 86, "FileHash-SHA256": 86, "URL": 4737, "hostname": 1 }, "indicator_count": 4996, "is_author": false, "is_subscribing": null, "subscriber_count": 173, "modified_text": "560 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268ce06cd3b9ed1471f8b", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:05:50.368000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e26917892eba29e13b15ca", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:07:02.862000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 65, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 63, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e2690fa8796bb997357f70", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:06:55.260000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 58, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e26906a8796bb997357f6f", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:06:46.047000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 20, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 61, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268fa7dc9ecf76f1021fb", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:06:34.731000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 60, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268f307c60b2138af80fd", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:06:27.028000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 58, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268e8016e9ee13c769105", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:06:16.939000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 58, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268df3de865e9729fd2b3", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:06:07.006000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 58, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268d6150e8a66b8a044f4", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:05:58.087000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 58, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e2686e04a9be9a8511850f", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:04:14.463000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 26, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268c5988bbadb6ac18d61", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:05:41.806000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268b94f6cabc075ee54cb", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:05:29.769000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268b7a4177a46ed263b2b", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:05:27.725000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268b5bf94fd7a6cdfb575", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:05:25.449000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268b3dbc82f4e92ede460", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:05:23.643000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268a99dc029fbf63674b1", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:05:13.489000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268a298cc52ca5efe2543", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:05:06.077000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e26878fef6ee4dab3b4a81", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:04:24.246000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e2687774ab48d2161f7ef9", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:04:23.680000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e26876c3c9c9710f2e66a5", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:04:22.960000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt", "https://vtbehaviour.commondatastorage.googleapis.com/f4bb07fcc5b61e72c473bd3b095141f5b000987d19131803efb7f04ca3d34e49_CAPE%20Sandbox.html?GoogleAccessId=758681729565-rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com&Expires=1774645899&Signature=GNKT7YC1oO0b6Hjq3BNC5%2FfivbaLliRIzmdOPvAVlj5yH7scQYaX%2FN5m%2FxP%2FSqIjBJHSDdesVGIRTDIVUs1FygrwIkiHl30fwh5rEweeHfBeDLgcmYx042R4LwTb2m4yj5PhF7yiAJBzMvLR1l5DWibBOdmIDjrImXRBESKFac7SeGZ8FMz39YjFJGkkMebkE4MFl%2BLU0mX8ylGAVKEcsxae5FE7NBuIxSCECkJCZ94%2BrKkYIn", "https://1275.ru/ioc/4120/gs-553-mirai-botnet-iocs/" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [ "RUSSIAN THREAT ACTOR, KILLNET" ], "malware_families": [], "industries": [ "Healthcare" ], "unique_indicators": 42504 } } }, "false_positive": [], "alexa": "", "whois": "http://whois.domaintools.com/102.39.215.83", "domain": "Unavailable", "hostname": "Unavailable" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 22, "pulses": [ { "id": "69c6f30e2af3822ace33cd7b", "name": "CAPE Sandbox", "description": "", "modified": "2026-04-26T21:26:37.152000", "created": "2026-03-27T21:13:50.811000", "tags": [ "accept", "post http", "cname", "file size", "mwdb", "bazaar", "sha3384", "ssdeep", "file type", "crc32", "shutdown", "title", "body" ], "references": [ "https://vtbehaviour.commondatastorage.googleapis.com/f4bb07fcc5b61e72c473bd3b095141f5b000987d19131803efb7f04ca3d34e49_CAPE%20Sandbox.html?GoogleAccessId=758681729565-rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com&Expires=1774645899&Signature=GNKT7YC1oO0b6Hjq3BNC5%2FfivbaLliRIzmdOPvAVlj5yH7scQYaX%2FN5m%2FxP%2FSqIjBJHSDdesVGIRTDIVUs1FygrwIkiHl30fwh5rEweeHfBeDLgcmYx042R4LwTb2m4yj5PhF7yiAJBzMvLR1l5DWibBOdmIDjrImXRBESKFac7SeGZ8FMz39YjFJGkkMebkE4MFl%2BLU0mX8ylGAVKEcsxae5FE7NBuIxSCECkJCZ94%2BrKkYIn" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 16, "FileHash-SHA1": 16, "FileHash-SHA256": 16, "URL": 868, "domain": 7, "hostname": 59 }, "indicator_count": 982, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "33 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6710c73bf708e52948bbf5f6", "name": "[GS-553] Mirai Botnet IOCs - SEC-1275-1", "description": "", "modified": "2024-11-16T08:03:10.430000", "created": "2024-10-17T08:13:47.307000", "tags": [ "mirai botnet", "iocs", "mirai", "linux", "toggle", "compromise ipv4", "ipv4 port", "combinations", "sha1", "sha256" ], "references": [ "https://1275.ru/ioc/4120/gs-553-mirai-botnet-iocs/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 23, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Gnostis", "id": "44738", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_44738/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 86, "FileHash-SHA1": 86, "FileHash-SHA256": 86, "URL": 4737, "hostname": 1 }, "indicator_count": 4996, "is_author": false, "is_subscribing": null, "subscriber_count": 173, "modified_text": "560 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268ce06cd3b9ed1471f8b", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:05:50.368000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e26917892eba29e13b15ca", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:07:02.862000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 65, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 63, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e2690fa8796bb997357f70", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:06:55.260000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 58, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e26906a8796bb997357f6f", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:06:46.047000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 20, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 61, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268fa7dc9ecf76f1021fb", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:06:34.731000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 60, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268f307c60b2138af80fd", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:06:27.028000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 58, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268e8016e9ee13c769105", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:06:16.939000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 58, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63e268df3de865e9729fd2b3", "name": "KillNet-DDoS-Blocklist", "description": "KillNet-DDoS-Blocklist - KillNet has targeted the U.S. healthcare industry in the past and is actively targeting\nthe health and public health sector. The group is known to launch DDoS attacks and operates multiple\npublic channels aimed at recruitment and garnering attention from these attacks.", "modified": "2023-03-09T14:03:42.242000", "created": "2023-02-07T15:06:07.006000", "tags": [ "KillNet", "DDOS" ], "references": [ "https://raw.githubusercontent.com/securityscorecard/SSC-Threat-Intel-IoCs/master/KillNet-DDoS-Blocklist/proxylist.txt" ], "public": 1, "adversary": "RUSSIAN THREAT ACTOR, KILLNET", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "FHS-Services", "id": "51336", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 17438 }, "indicator_count": 17438, "is_author": false, "is_subscribing": null, "subscriber_count": 58, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "http://102.39.215.83:9090", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "http://102.39.215.83:9090", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1780173317.9841511 }