##############################################################################
# URLhaus ASN CSV Feed                                                       #
# Generated on 2025-11-20 10:54:44 UTC                                       #
#                                                                            #
# For questions please refer to:                                             #
# https://urlhaus.abuse.ch/feeds/                                            #
##############################################################################
#
# Feed generated for AS4816
#
# Dateadded (UTC),URL,URL_status,Threat,Tags,Host,IPaddress,ASnumber,Country
"2025-10-11 20:51:15","http://103.236.55.233:8080/02.08.2022.exe","offline","malware_download","censys|CobaltStrike","103.236.55.233","103.236.55.233","4816","CN"
"2025-10-10 20:40:08","http://103.236.55.233:8888/02.08.2022.exe","offline","malware_download","censys|CobaltStrike","103.236.55.233","103.236.55.233","4816","CN"
"2025-01-10 22:26:11","http://103.24.179.18:7004/02.08.2022.exe","offline","malware_download","CobaltStrike|shellcode","103.24.179.18","103.24.179.18","4816","CN"
"2024-06-07 11:05:09","http://103.39.225.134:8000/Exploit.class","offline","malware_download","java-bytecode","103.39.225.134","103.39.225.134","4816","CN"
"2024-03-18 16:52:34","http://103.39.225.134:8000/marshalsec-0.0.3-SNAPSHOT-all.jar","offline","malware_download","Exploit|Log4j","103.39.225.134","103.39.225.134","4816","CN"
"2024-03-18 16:51:50","http://103.39.225.134:8000/jndi_tool.jar","offline","malware_download","Exploit|Log4j","103.39.225.134","103.39.225.134","4816","CN"
"2024-03-18 16:51:09","http://103.39.225.134:8000/Exploit.java","offline","malware_download","Exploit|Log4j","103.39.225.134","103.39.225.134","4816","CN"
"2020-10-28 00:55:11","http://lidaxianren.com/wp-content/browse/4J7PSvPFCZg/","offline","malware_download","doc|emotet|epoch1|Heodo","lidaxianren.com","103.39.214.130","4816","CN"
"2020-10-27 16:55:14","http://www.lidaxianren.com/wp-content/browse/4J7PSvPFCZg/","offline","malware_download","doc|emotet|epoch1|Heodo","www.lidaxianren.com","103.39.214.130","4816","CN"
"2018-10-03 06:33:09","http://syntek.net/005LDLDKCRI/xerox/US/Invoice-receipt","offline","malware_download","doc|emotet|heodo","syntek.net","45.250.185.51","4816","CN"
"2018-08-31 05:17:11","http://syntek.net/DOC/En/Past-Due-Invoice/","offline","malware_download","doc|emotet|epoch2|Heodo","syntek.net","45.250.185.51","4816","CN"
"2018-08-30 20:57:18","http://syntek.net/DOC/En/Past-Due-Invoice","offline","malware_download","doc|emotet|Heodo","syntek.net","45.250.185.51","4816","CN"
"2018-08-28 04:12:45","http://syntek.net/005LDLDKCRI/SEP/Business/","offline","malware_download","doc|emotet|Heodo","syntek.net","45.250.185.51","4816","CN"
"2018-08-28 04:12:44","http://syntek.net/005LDLDKCRI/SEP/Business","offline","malware_download","doc|emotet|Heodo","syntek.net","45.250.185.51","4816","CN"
"2018-08-16 03:40:08","http://syntek.net/D95jyj/","offline","malware_download","doc|emotet|Heodo","syntek.net","45.250.185.51","4816","CN"
"2018-08-15 12:16:51","http://syntek.net/D95jyj","offline","malware_download","doc|emotet|Heodo","syntek.net","45.250.185.51","4816","CN"
# of entries: 16