indicatorurl
hxxp://184[.]174[.]96[.]191:8088/bot[.]x86_64
- First seen
- 2026-07-14
- Last seen
- 2026-07-14
- Sightings
- 1
Posts referencing this indicator
- Langflow Exploited to Build Custom DDoS Gafgyt Botnets
HTTP URL used by the Langflow exploit payload to download the Gafgyt bot binary to /tmp/bot_x86_64 on compromised hosts.