{"success":true,"data":{"threats":[{"id":"7fdd10f2-369f-43bf-aa6a-595ff1948462","slug":"urlhaus-3946659","externalId":"urlhaus-3946659","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 42[.]229[.]175[.]66","description":"URLhaus recorded hxxp://42[.]229[.]175[.]66:55978/bin[.]sh as malware download. The URL is currently online. Reported by geenensp.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","32-bit","elf","mips","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946659/","type":"report","title":"URLhaus entry 3946659"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T20:33:17.000Z","addedAt":"2026-10-08T20:48:11.072Z","updatedAt":"2026-10-08T20:48:11.072Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"19edc8cc-cae5-441f-866e-23efde479a72","slug":"urlhaus-3946658","externalId":"urlhaus-3946658","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 115[.]48[.]144[.]79","description":"URLhaus recorded hxxp://115[.]48[.]144[.]79:58929/i as malware download. The URL is currently online. Reported by geenensp.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","32-bit","elf","mips","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946658/","type":"report","title":"URLhaus entry 3946658"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T20:19:08.000Z","addedAt":"2026-10-08T20:48:11.083Z","updatedAt":"2026-10-08T20:48:11.083Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"926a300c-85c9-4526-9401-d577357707cb","slug":"urlhaus-3946655","externalId":"urlhaus-3946655","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 182[.]127[.]179[.]145","description":"URLhaus recorded hxxp://182[.]127[.]179[.]145:57484/bin[.]sh as malware download. The URL is currently online. Reported by geenensp.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","32-bit","elf","mips","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946655/","type":"report","title":"URLhaus entry 3946655"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T20:10:18.000Z","addedAt":"2026-10-08T20:48:11.104Z","updatedAt":"2026-10-08T20:48:11.104Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"4b9fd33c-9de5-4d91-b8ba-37f4aebb428e","slug":"urlhaus-3946654","externalId":"urlhaus-3946654","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 115[.]48[.]144[.]79","description":"URLhaus recorded hxxp://115[.]48[.]144[.]79:58929/bin[.]sh as malware download. The URL is currently online. Reported by geenensp.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","32-bit","elf","mips","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946654/","type":"report","title":"URLhaus entry 3946654"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T19:55:17.000Z","addedAt":"2026-10-08T20:48:11.111Z","updatedAt":"2026-10-08T20:48:11.111Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"5889c345-0e5b-4806-84fa-8ef45f9f8ca3","slug":"urlhaus-3946652","externalId":"urlhaus-3946652","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 109[.]236[.]46[.]199","description":"URLhaus recorded hxxp://109[.]236[.]46[.]199:59235/bin[.]sh as malware download. The URL is currently online. Reported by geenensp.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","32-bit","arm","elf","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946652/","type":"report","title":"URLhaus entry 3946652"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T19:35:19.000Z","addedAt":"2026-10-08T19:48:01.876Z","updatedAt":"2026-10-08T20:48:11.127Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"f587fbcb-7750-4b41-b1aa-da7de4c33bdc","slug":"urlhaus-3946647","externalId":"urlhaus-3946647","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 180[.]190[.]202[.]146","description":"URLhaus recorded hxxp://180[.]190[.]202[.]146:57951/bin[.]sh as malware download. The URL is currently online. Reported by geenensp.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","32-bit","arm","elf","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946647/","type":"report","title":"URLhaus entry 3946647"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T19:07:10.000Z","addedAt":"2026-10-08T19:35:28.645Z","updatedAt":"2026-10-08T20:48:11.167Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"568571da-06d4-4e38-aaeb-dc2fb2ac7153","slug":"urlhaus-3946612","externalId":"urlhaus-3946612","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 115[.]49[.]193[.]168","description":"URLhaus recorded hxxp://115[.]49[.]193[.]168:43695/i as malware download. The URL is currently online. Reported by adliwahid.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946612/","type":"report","title":"URLhaus entry 3946612"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T18:32:07.000Z","addedAt":"2026-10-08T18:42:06.843Z","updatedAt":"2026-10-08T20:48:11.429Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"dbd58bb5-bf7b-4deb-8009-5bc94c05c1f4","slug":"threatfox-1957838","externalId":"threatfox-1957838","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Mozi url: hxxp://202[.]47[.]52[.]84:56257/Mozi[.]m","description":"URL that delivers a malware payload indicator associated with Mozi. Indicator that identifies a malware distribution server (payload delivery) Reporter confidence 75%.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:url","threat:payload-delivery","malware:elf-mozi","confidence:75","elf","iot","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957838/","type":"report","title":"ThreatFox IOC 1957838"},{"url":"https://honeylabs.net/lookup/202.47.52.84","type":"report","title":"Reporter reference"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T18:19:15.000Z","addedAt":"2026-10-08T18:41:57.515Z","updatedAt":"2026-10-08T20:48:02.992Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"89e50699-5567-436a-affa-84a410d754ba","slug":"threatfox-1957837","externalId":"threatfox-1957837","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Mozi url: hxxp://119[.]179[.]71[.]155:40230/Mozi[.]m","description":"URL that delivers a malware payload indicator associated with Mozi. Indicator that identifies a malware distribution server (payload delivery) Reporter confidence 75%.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:url","threat:payload-delivery","malware:elf-mozi","confidence:75","elf","iot","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957837/","type":"report","title":"ThreatFox IOC 1957837"},{"url":"https://honeylabs.net/lookup/119.179.71.155","type":"report","title":"Reporter reference"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T18:19:15.000Z","addedAt":"2026-10-08T18:41:57.508Z","updatedAt":"2026-10-08T20:48:02.983Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"598ef38f-9240-417c-949e-55afa7b957dc","slug":"threatfox-1957836","externalId":"threatfox-1957836","source":"abuse.ch ThreatFox","sourceType":"community","type":"indicator","title":"Mozi url: hxxp://190[.]196[.]253[.]23:10238/Mozi[.]m","description":"URL that delivers a malware payload indicator associated with Mozi. Indicator that identifies a malware distribution server (payload delivery) Reporter confidence 75%.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["threatfox","ioc","ioc:url","threat:payload-delivery","malware:elf-mozi","confidence:75","elf","iot","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://threatfox.abuse.ch/ioc/1957836/","type":"report","title":"ThreatFox IOC 1957836"},{"url":"https://honeylabs.net/lookup/190.196.253.23","type":"report","title":"Reporter reference"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T18:19:14.000Z","addedAt":"2026-10-08T18:41:57.521Z","updatedAt":"2026-10-08T20:48:03.001Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"d7ce1309-a599-45fa-bb40-4e776bc4002b","slug":"urlhaus-3946610","externalId":"urlhaus-3946610","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 42[.]224[.]199[.]236","description":"URLhaus recorded hxxp://42[.]224[.]199[.]236:41233/i as malware download. The URL is currently online. Reported by adliwahid.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946610/","type":"report","title":"URLhaus entry 3946610"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T18:17:09.000Z","addedAt":"2026-10-08T18:42:06.856Z","updatedAt":"2026-10-08T20:48:11.443Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"ddb5548e-f61a-41c3-84b3-980b1d90f5bd","slug":"urlhaus-3946607","externalId":"urlhaus-3946607","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 125[.]40[.]86[.]102","description":"URLhaus recorded hxxp://125[.]40[.]86[.]102:53452/i as malware download. The URL is currently online. Reported by adliwahid.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946607/","type":"report","title":"URLhaus entry 3946607"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T18:17:06.000Z","addedAt":"2026-10-08T18:42:06.876Z","updatedAt":"2026-10-08T20:48:11.466Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"2b004942-20e8-467f-b8b7-0f9cf2691ed4","slug":"urlhaus-3946577","externalId":"urlhaus-3946577","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 219[.]157[.]52[.]153","description":"URLhaus recorded hxxp://219[.]157[.]52[.]153:49181/bin[.]sh as malware download. The URL is currently online. Reported by geenensp.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","32-bit","elf","mips","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946577/","type":"report","title":"URLhaus entry 3946577"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T18:10:20.000Z","addedAt":"2026-10-08T18:42:07.081Z","updatedAt":"2026-10-08T20:48:11.671Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"59b4d2bd-bc8d-43c1-9003-face3d526273","slug":"urlhaus-3946374","externalId":"urlhaus-3946374","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 42[.]225[.]228[.]19","description":"URLhaus recorded hxxp://42[.]225[.]228[.]19:48883/i as malware download. The URL is currently online. Reported by adliwahid.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946374/","type":"report","title":"URLhaus entry 3946374"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T18:03:15.000Z","addedAt":"2026-10-08T18:42:08.444Z","updatedAt":"2026-10-08T20:48:13.074Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"befe1da5-c664-4e2e-9b46-cc60a17eb985","slug":"urlhaus-3946372","externalId":"urlhaus-3946372","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 115[.]49[.]193[.]168","description":"URLhaus recorded hxxp://115[.]49[.]193[.]168:43695/bin[.]sh as malware download. The URL is currently online. Reported by adliwahid.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946372/","type":"report","title":"URLhaus entry 3946372"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T18:02:07.000Z","addedAt":"2026-10-08T18:42:08.458Z","updatedAt":"2026-10-08T20:48:13.089Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"8575b5c4-8ada-4fdf-b1db-3f5daf11780f","slug":"urlhaus-3946371","externalId":"urlhaus-3946371","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 125[.]40[.]86[.]102","description":"URLhaus recorded hxxp://125[.]40[.]86[.]102:53452/bin[.]sh as malware download. The URL is currently online. Reported by adliwahid.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946371/","type":"report","title":"URLhaus entry 3946371"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T18:02:06.000Z","addedAt":"2026-10-08T18:42:08.464Z","updatedAt":"2026-10-08T20:48:13.097Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"527bde39-46e7-4aed-b8e4-6a3f54bba145","slug":"urlhaus-3946368","externalId":"urlhaus-3946368","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 125[.]43[.]34[.]132","description":"URLhaus recorded hxxp://125[.]43[.]34[.]132:36892/bin[.]sh as malware download. The URL is currently online. Reported by adliwahid.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946368/","type":"report","title":"URLhaus entry 3946368"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T17:47:08.000Z","addedAt":"2026-10-08T18:42:08.484Z","updatedAt":"2026-10-08T20:48:13.119Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"eacf0802-9777-430b-878d-060576e9c906","slug":"urlhaus-3946367","externalId":"urlhaus-3946367","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 42[.]224[.]199[.]236","description":"URLhaus recorded hxxp://42[.]224[.]199[.]236:41233/bin[.]sh as malware download. The URL is currently online. Reported by adliwahid.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946367/","type":"report","title":"URLhaus entry 3946367"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T17:47:08.000Z","addedAt":"2026-10-08T18:42:08.492Z","updatedAt":"2026-10-08T20:48:13.126Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"1a06d0fb-9101-4bcf-af9d-3ded20e7baec","slug":"urlhaus-3946365","externalId":"urlhaus-3946365","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 221[.]14[.]84[.]60","description":"URLhaus recorded hxxp://221[.]14[.]84[.]60:35948/bin[.]sh as malware download. The URL is currently online. Reported by adliwahid.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946365/","type":"report","title":"URLhaus entry 3946365"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T17:47:07.000Z","addedAt":"2026-10-08T18:42:08.504Z","updatedAt":"2026-10-08T20:48:13.141Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]},{"id":"37722eb5-1449-4762-a273-1b8fe35b5519","slug":"urlhaus-3946364","externalId":"urlhaus-3946364","source":"abuse.ch URLhaus","sourceType":"community","type":"malware","title":"Malware distribution URL on 125[.]47[.]113[.]29","description":"URLhaus recorded hxxp://125[.]47[.]113[.]29:42844/i as malware download. The URL is currently online. Reported by geenensp.","cveId":null,"cvssScore":null,"cvssVector":null,"severity":"unknown","vendor":null,"product":null,"affectedVersions":[],"cwes":[],"tags":["urlhaus","ioc","ioc:url","threat:malware-download","status:online","32-bit","elf","mips","mozi"],"relatedCves":[],"titleFingerprint":null,"countryCodes":[],"knownExploited":false,"patchAvailable":false,"patchLinks":[],"references":[{"url":"https://urlhaus.abuse.ch/url/3946364/","type":"report","title":"URLhaus entry 3946364"}],"epssScore":null,"epssPercentile":null,"nucleiTemplatePath":null,"nucleiSeverity":null,"enrichment":null,"publishedAt":"2026-10-08T17:33:22.000Z","addedAt":"2026-10-08T17:42:06.905Z","updatedAt":"2026-10-08T20:48:13.148Z","epssUpdatedAt":null,"nucleiUpdatedAt":null,"links":[]}],"pagination":{"page":1,"limit":20,"total":13551,"totalPages":678,"hasNext":true,"hasPrev":false}},"meta":{"apiVersion":"v1","requestedAt":"2026-10-08T23:49:06.949Z","durationMs":73,"filters":{"search":null,"severity":[],"type":[],"country":[],"tag":["mozi"],"cwe":[],"vendor":null,"product":null,"cve":null,"source":[],"days":null,"publishedAfter":null,"publishedBefore":null,"minCvss":null,"maxCvss":null,"minEpss":null,"knownExploited":null,"hasPatch":null,"hasNucleiTemplate":null},"sort":"newest","unknownParams":[],"warnings":[]}}