A private, community-driven cybersecurity initiative for Guatemala.
Indicators of compromise collected from open sources, and key metrics with their trend over time.
| Indicator | Value | Since the previous collection |
|---|---|---|
| Active indicators of compromise | 104,476 | ▲ +3,803 |
| Indicators related to Guatemala | 98 | ▲ +3 |
| Reported incidents | 6 | ▲ +2 |
| Ransomware victims in Guatemala | 23 | no change |
| Actively exploited vulnerabilities | 1,766 | no change |
| Newly exploited vulnerabilities this month | 0 | ▼ −36 |
| Critical CVEs published in 7 days | 39 | ▲ +13 |
| Infocon level (0 normal – 3 critical) | 0 | no change |
| New IOCs on ThreatFox in 24 h | 1,634 | ▲ +123 |
| IPs enriched with reputation data | 600 |
| Country | IPv4 prefixes | IPv4 addresses | IPv6 prefixes | Active indicators |
|---|---|---|---|---|
| Guatemala | 1,531 | 1,295,360 | 828 | 98 |
| El Salvador | 924 | 263,168 | 60 | 2 |
| Honduras | 1,081 | 471,296 | 119 | 5 |
| Nicaragua | 372 | 148,480 | 51 | 21 |
| Costa Rica | 3,855 | 2,184,960 | 641 | 5 |
| Panama | 5,552 | 2,820,608 | 1,348 | 64 |
| Dominican Republic | 2,680 | 2,003,968 | 1,182 | 15 |
Prefixes originated by each country’s ASNs (Hurricane Electric BGP Toolkit). Any indicator whose IP falls within these ranges is tagged with the country.
181[.]119[.]103[.]103
Reported for abuse · confidence 100%
AbuseIPDBNov 1, 12:00 AM
hxxp://154[.]223[.]128[.]222:53863/bin[.]sh
Malware distribution · 32-bit · arm
URLhaus (abuse.ch)Nov 1, 12:00 AM
hxxp://154[.]223[.]128[.]222:53863/i
Malware distribution · mirai
URLhaus (abuse.ch)Nov 1, 12:00 AM
hxxp://conprisa[.]com[.]gt/itoken-30horas/atendimento/inicial[.]php
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxp://distribuidorapolaris[.]com[.]gt/ddt/rabin/authhh/x2ve86/bwfoawnrb2tab3v0bg9vay5jb20=
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxp://ofertas[.]com[.]gt/stmary/officeonline
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxp://scmconstructores[.]com[.]gt/microsoft-doc
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxp://www[.]ccopssa[.]com[.]gt/wp-two
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://agis[.]com[.]gt/semprepresentecomvoce
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/0esigp/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/1oz5y5/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/48zxzq/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/52j1y3/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/5qfaix/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/7nxwg7/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/ajhz0i/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/bvmuw2/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/cllk0g/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/cziz1i/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/ebkfri/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/eqeucd/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/fm4yts/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/fmglcd/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/foiep2/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
hxxps://automatika[.]gt/gamej/anuth/i6nnpc/3mail@b[.]c
Active phishing hosted on a site in the country
Phishing.DatabaseNov 1, 12:00 AM
| 181[.]119[.]103[.]103 | Reported for abuse · confidence 100% | AbuseIPDB | Nov 1, 12:00 AM |
| hxxp://154[.]223[.]128[.]222:53863/bin[.]sh | Malware distribution · 32-bit · arm | URLhaus (abuse.ch) | Nov 1, 12:00 AM |
| hxxp://154[.]223[.]128[.]222:53863/i | Malware distribution · mirai | URLhaus (abuse.ch) | Nov 1, 12:00 AM |
| hxxp://conprisa[.]com[.]gt/itoken-30horas/atendimento/inicial[.]php | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxp://distribuidorapolaris[.]com[.]gt/ddt/rabin/authhh/x2ve86/bwfoawnrb2tab3v0bg9vay5jb20= | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxp://ofertas[.]com[.]gt/stmary/officeonline | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxp://scmconstructores[.]com[.]gt/microsoft-doc | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxp://www[.]ccopssa[.]com[.]gt/wp-two | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://agis[.]com[.]gt/semprepresentecomvoce | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/0esigp/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/1oz5y5/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/48zxzq/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/52j1y3/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/5qfaix/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/7nxwg7/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/ajhz0i/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/bvmuw2/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/cllk0g/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/cziz1i/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/ebkfri/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/eqeucd/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/fm4yts/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/fmglcd/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/foiep2/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
| hxxps://automatika[.]gt/gamej/anuth/i6nnpc/3mail@b[.]c | Active phishing hosted on a site in the country | Phishing.Database | Nov 1, 12:00 AM |
1–25 of 98
181[.]119[.]103[.]103GT
UFINET PANAMA S.A.
Fingerprint attempt, HTTP Scan, POP3/IMAP Bruteforce, HTTP Bruteforce, HTTP Exploit
181[.]199[.]211[.]222GT
Innova Outsourcing S.A
HTTP Exploit, HTTP Scan, SSH Bruteforce, HTTP Bruteforce, Exploitation attempt, HTTP DoS
190[.]149[.]6[.]54GT
TELECOMUNICACIONES DE GUATEMALA, SOCIEDAD ANONIMA
SSH Bruteforce, Exploitation attempt
190[.]115[.]5[.]17GT
UFINET PANAMA S.A.
Database Bruteforce, SSH Bruteforce, Exploitation attempt
107[.]22[.]152[.]216US
Amazon.com, Inc.
123[.]58[.]219[.]233HK
UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
14[.]33[.]48[.]192KR
Korea Telecom
178[.]128[.]14[.]106US
DigitalOcean, LLC
180[.]76[.]183[.]185CN
Beijing Baidu Netcom Science and Technology Co., Ltd.
186[.]124[.]47[.]119AR
Telecom Argentina S.A.
192[.]42[.]116[.]56NL
SURF B.V.
217[.]65[.]144[.]246FR
Hostinger International Limited
34[.]9[.]68[.]229US
Google LLC
35[.]210[.]181[.]143BE
Google LLC
47[.]253[.]218[.]190US
Alibaba (US) Technology Co., Ltd.
SMB/RDP bruteforce
54[.]204[.]62[.]163US
Amazon.com, Inc.
64[.]227[.]91[.]242US
DigitalOcean, LLC
8[.]216[.]5[.]117JP
Alibaba Cloud (Singapore) Private Limited
8[.]216[.]6[.]154JP
Alibaba Cloud (Singapore) Private Limited
104[.]28[.]234[.]178US
Cloudflare, Inc.
111[.]225[.]214[.]184CN
CHINANET hebei province network
117[.]156[.]78[.]8CN
China Mobile Communications Corporation
121[.]131[.]103[.]35KR
Korea Telecom
129[.]153[.]115[.]59US
Oracle Corporation
147[.]50[.]253[.]71TH
CLOUDFOREST CO.,LTD.
| 181[.]119[.]103[.]103 | GT · UFINET PANAMA S.A. | Malicious | Suspicious | 100% · 128 reports | Ports 161, 500, 1701, 4500, 8080, 8291 | Fingerprint attempt, HTTP Scan, POP3/IMAP Bruteforce, HTTP Bruteforce, HTTP Exploit |
| 181[.]199[.]211[.]222 | GT · Innova Outsourcing S.A | Malicious | Malicious | 100% · 222 reports | — | HTTP Exploit, HTTP Scan, SSH Bruteforce, HTTP Bruteforce, Exploitation attempt, HTTP DoS |
| 190[.]149[.]6[.]54 | GT · TELECOMUNICACIONES DE GUATEMALA, SOCIEDAD ANONIMA | Malicious | Malicious | 100% · 3,304 reports | Ports 80, 443, 3301 | SSH Bruteforce, Exploitation attempt |
| 190[.]115[.]5[.]17 | GT · UFINET PANAMA S.A. | Suspicious | Known | 100% · 291 reports | Ports 80, 1701, 2000, 8291, 872813 known CVEs | Database Bruteforce, SSH Bruteforce, Exploitation attempt |
| 107[.]22[.]152[.]216 | US · Amazon.com, Inc. | — | — | 100% · 695 reports | — | — |
| 123[.]58[.]219[.]233 | HK · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | — | — | 100% · 615 reports | — | — |
| 14[.]33[.]48[.]192 | KR · Korea Telecom | — | — | 100% · 2,951 reports | Ports 80, 188311 known CVEs | — |
| 178[.]128[.]14[.]106 | US · DigitalOcean, LLC | — | — | 100% · 116 reports | — | — |
| 180[.]76[.]183[.]185 | CN · Beijing Baidu Netcom Science and Technology Co., Ltd. | — | — | 100% · 888 reports | Ports 22, 3389 | — |
| 186[.]124[.]47[.]119 | AR · Telecom Argentina S.A. | — | — | 100% · 28 reports | — | — |
| 192[.]42[.]116[.]56 | NL · SURF B.V. | — | — | 100% · 746 reports | Ports 443, 9002, 9003, 9006 | — |
| 217[.]65[.]144[.]246 | FR · Hostinger International Limited | — | — | 100% · 171 reports | — | — |
| 34[.]9[.]68[.]229 | US · Google LLC | — | — | 100% · 23 reports | — | — |
| 35[.]210[.]181[.]143 | BE · Google LLC | — | — | 100% · 112 reports | — | — |
| 47[.]253[.]218[.]190 | US · Alibaba (US) Technology Co., Ltd. | Suspicious | Known | 100% · 814 reports | Ports 21, 80, 135, 139, 445, 3389 | SMB/RDP bruteforce |
| 54[.]204[.]62[.]163 | US · Amazon.com, Inc. | — | — | 100% · 321 reports | — | — |
| 64[.]227[.]91[.]242 | US · DigitalOcean, LLC | — | — | 100% · 150 reports | — | — |
| 8[.]216[.]5[.]117 | JP · Alibaba Cloud (Singapore) Private Limited | — | — | 100% · 549 reports | Ports 22 | — |
| 8[.]216[.]6[.]154 | JP · Alibaba Cloud (Singapore) Private Limited | — | — | 100% · 556 reports | Ports 22 | — |
| 104[.]28[.]234[.]178 | US · Cloudflare, Inc. | — | — | 100% · 305 reports | — | — |
| 111[.]225[.]214[.]184 | CN · CHINANET hebei province network | — | — | 100% · 321 reports | — | — |
| 117[.]156[.]78[.]8 | CN · China Mobile Communications Corporation | — | — | 100% · 85 reports | Ports 82, 83, 111, 554, 1883, 5060, 5672, 7010, 7015, 7021, 7778, 8000, 8080, 8081, 8083, 8086, 8093, 8095, 8113, 8114, 8554, 8557, 8688, 8888, 8889, 9091, 9093, 9094, 9095, 9999, 10023, 30001, 30015, 30021, 30027, 30104, 55000, 61613, 6161657 known CVEs | — |
| 121[.]131[.]103[.]35 | KR · Korea Telecom | — | — | 100% · 444 reports | Ports 23, 161 | — |
| 129[.]153[.]115[.]59 | US · Oracle Corporation | — | — | 100% · 1,918 reports | Ports 22, 111 | — |
| 147[.]50[.]253[.]71 | TH · CLOUDFOREST CO.,LTD. | — | — | 100% · 128 reports | Ports 81, 666 | — |
1–25 of 600
024c7dce1273e6465e5ca49a25204cf2c550185f0150cfcae37e06934fb0d60f
Unknown Loader · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
0280901c2740795149dee80475e7819b8ac93a95d87413f15dd944eaad17a03b
stealler · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
03575d5232dd841c5c94238c6666ea30272e0826c466dba22a4c2445188dba58
ValleyRAT · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
036b2abed755d1925a16d2c9b613f0aa
Coinminer · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
03a680cd8b8c2323d4f78bf578220aec930188a98143b3878160f0d9b8335b40
Mirai · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
03d3e9c54028780d2ff15c654d7a7e70973453d2fae8bdeebf5d9dbb10ff2eab
Mirai · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
04256374f18eab92bd40e60b340d509606b768322e080d485e766f402a7efae1
Mirai · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
0516029f7bc1791a7fad5ad6bda2eb7f069af0b5
stealler · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
0526413d9b0aee920f024b710251c82d907ed922ad5dcb99bf4913b994e4877f
Mirai · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
05c5d5b026e976b85bef06be507c1d39cfc737a2539d6a085892ac4f8b92cf9d
Mirai · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
067ec3b602489fd3d7b57cbbe3f9e24d986b476f072ba12777d0b447cb6226c7
SmartLoader · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
07f27ceed791f56d73d3019572d4f59aecde9f32bb203d8b4d9c5cea2abb18c5
SalatStealer · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
08abd88a5ee20e7c037eba4f62db3b9f24a28e5b
SalatStealer · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
08ca7949817ca3254975490df52db653bfd82932
Quasar RAT · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
0ab06d6cc852ceaf5f7dbf18596fd41b8589f0a417ef13051d9819c3038e8d27
Mirai · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
0ac49697759d9453ad21fd1ac6d70bf3b9baa05ee4b38c528d1cb65d155a6c99
Raven Stealer · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
0b02693ce59fbdcf0aefb9c9d4b49f2384e1eaad8fa960f101bb32afce489488
Mirai · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
0b2f897e1e53c1e76045604d3f8e6e42
SalatStealer · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
0b48c4623e235493a4c9d504e85db52f2e2d52bcb57dbda69bc9d235619aa0ed
Mirai · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
0bb5729f5c75889d712db2dc1626733f
ValleyRAT · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
0bc406bd0c6f8e91dba9b1aff49e85c622b05f93ab15ffca19b4d7c56db5b213
Mirai · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
0c3abc6ddaa4169fca933bcecb52ec09c949276c47efb7384080cddc69e167b3
ValleyRAT · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
0eb81cfd49f3db8a884ec42f9180f701
stealler · Indicator that identifies a malware sample (payload)
ThreatFox (abuse.ch)Nov 1, 12:00 AM
1[.]117[.]69[.]2
Reported for abuse · confidence 100%
AbuseIPDBNov 1, 12:00 AM
1[.]179[.]240[.]27
Reported for abuse · confidence 100%
AbuseIPDBNov 1, 12:00 AM
| 024c7dce1273e6465e5ca49a25204cf2c550185f0150cfcae37e06934fb0d60f | Unknown Loader · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 0280901c2740795149dee80475e7819b8ac93a95d87413f15dd944eaad17a03b | stealler · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 03575d5232dd841c5c94238c6666ea30272e0826c466dba22a4c2445188dba58 | ValleyRAT · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 036b2abed755d1925a16d2c9b613f0aa | Coinminer · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 03a680cd8b8c2323d4f78bf578220aec930188a98143b3878160f0d9b8335b40 | Mirai · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 03d3e9c54028780d2ff15c654d7a7e70973453d2fae8bdeebf5d9dbb10ff2eab | Mirai · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 04256374f18eab92bd40e60b340d509606b768322e080d485e766f402a7efae1 | Mirai · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 0516029f7bc1791a7fad5ad6bda2eb7f069af0b5 | stealler · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 0526413d9b0aee920f024b710251c82d907ed922ad5dcb99bf4913b994e4877f | Mirai · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 05c5d5b026e976b85bef06be507c1d39cfc737a2539d6a085892ac4f8b92cf9d | Mirai · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 067ec3b602489fd3d7b57cbbe3f9e24d986b476f072ba12777d0b447cb6226c7 | SmartLoader · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 07f27ceed791f56d73d3019572d4f59aecde9f32bb203d8b4d9c5cea2abb18c5 | SalatStealer · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 08abd88a5ee20e7c037eba4f62db3b9f24a28e5b | SalatStealer · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 08ca7949817ca3254975490df52db653bfd82932 | Quasar RAT · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 0ab06d6cc852ceaf5f7dbf18596fd41b8589f0a417ef13051d9819c3038e8d27 | Mirai · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 0ac49697759d9453ad21fd1ac6d70bf3b9baa05ee4b38c528d1cb65d155a6c99 | Raven Stealer · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 0b02693ce59fbdcf0aefb9c9d4b49f2384e1eaad8fa960f101bb32afce489488 | Mirai · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 0b2f897e1e53c1e76045604d3f8e6e42 | SalatStealer · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 0b48c4623e235493a4c9d504e85db52f2e2d52bcb57dbda69bc9d235619aa0ed | Mirai · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 0bb5729f5c75889d712db2dc1626733f | ValleyRAT · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 0bc406bd0c6f8e91dba9b1aff49e85c622b05f93ab15ffca19b4d7c56db5b213 | Mirai · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 0c3abc6ddaa4169fca933bcecb52ec09c949276c47efb7384080cddc69e167b3 | ValleyRAT · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 0eb81cfd49f3db8a884ec42f9180f701 | stealler · Indicator that identifies a malware sample (payload) | ThreatFox (abuse.ch) | Nov 1, 12:00 AM |
| 1[.]117[.]69[.]2 | Reported for abuse · confidence 100% | AbuseIPDB | Nov 1, 12:00 AM |
| 1[.]179[.]240[.]27 | Reported for abuse · confidence 100% | AbuseIPDB | Nov 1, 12:00 AM |
1–25 of 1000
The full set of indicators can be queried programmatically, as JSON, CSV or a blocklist, with an API key. Request one here; we review it and send it to you by email.
curl -H "Authorization: Bearer YOUR_KEY" \ "https://cert.gt/api/indicadores?pais=GT"
| Collection | Indicators |
|---|---|
| Oct 11, 11:00 AM | 2,158 |
| Oct 11, 11:04 AM | 2,182 |
| Oct 11, 11:40 AM | 2,427 |
| Oct 12, 12:00 AM | 8,260 |
| Oct 13, 12:00 AM | 14,653 |
| Oct 14, 12:00 AM | 20,741 |
| Oct 15, 12:00 AM | 26,067 |
| Oct 16, 12:00 AM | 31,349 |
| Oct 17, 12:00 AM | 36,107 |
| Oct 18, 12:00 AM | 40,138 |
| Oct 19, 12:00 AM | 44,206 |
| Oct 20, 12:00 AM | 48,429 |
| Oct 21, 12:00 AM | 52,737 |
| Oct 22, 12:00 AM | 58,291 |
| Oct 23, 12:00 AM | 63,002 |
| Oct 24, 12:00 AM | 66,654 |
| Oct 25, 12:00 AM | 70,987 |
| Oct 26, 12:00 AM | 78,542 |
| Oct 27, 12:00 AM | 82,355 |
| Oct 28, 12:00 AM | 86,563 |
| Oct 29, 12:00 AM | 91,134 |
| Oct 30, 12:00 AM | 96,758 |
| Oct 31, 12:00 AM | 100,673 |
| Nov 1, 12:00 AM | 104,476 |