Loading threats
Identifies HTTP request bodies containing the URL-encoded parameter 0x[] with the value androxgh0st, a distinctive payload marker associated with Androxgh0st exploitation activity and automated scanning campaigns targeting web applications and exposed services.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 78.153.140.40 | 100% | 2,881 | 1,714 | 🇬🇧 GB | AS202306 | 2026-03-03 |
| 78.153.140.93 | 100% | 2,293 | 1,202 | 🇬🇧 GB | AS202306 | 2026-03-05 |
| 78.153.140.39 | 100% | 2,152 | 1,371 | 🇬🇧 GB | AS202306 | 2026-03-05 |
| 78.153.140.148 | 100% | 2,063 | 1,293 | 🇬🇧 GB | AS202306 | 2026-03-05 |
| 78.153.140.149 | 100% | 1,673 | 960 | 🇬🇧 GB | AS202306 | 2026-03-05 |
| 78.153.140.147 | 100% | 1,289 | 984 | 🇬🇧 GB | AS202306 | 2026-03-05 |
| 77.83.39.139 | 100% | 1,017 | 1,013 | 🇺🇦 UA | AS214940 | 2026-03-04 |
| 103.219.153.243 | 100% | 358 | 358 | 🇳🇱 NL | AS207083 | 2026-03-04 |
| 188.126.94.90 | 100% | 332 | 332 | 🇩🇰 DK | AS42708 | 2026-02-28 |
| 162.158.88.2 | 9% | 228 | 47 | 🇺🇸 US | AS13335 | 2026-03-04 |
| 20.199.122.58 | 99% | 75 | 75 | 🇫🇷 FR | AS8075 | 2026-03-05 |
| 172.70.80.101 | 4% | 67 | 5 | 🇨🇦 CA | AS13335 | 2026-02-26 |
| 104.23.239.105 | 8% | 60 | 31 | 🇩🇪 DE | AS13335 | 2026-03-03 |
| 94.154.32.25 | 99% | 60 | 60 | 🇫🇷 FR | AS214961 | 2026-03-02 |
| 102.88.109.69 | 97% | 41 | 41 | 🇳🇬 NG | AS29465 | 2026-02-26 |
| 103.237.86.74 | 87% | 38 | 24 | 🇻🇳 VN | AS150895 | 2026-02-25 |
| 104.23.190.23 | 7% | 38 | 24 | 🇺🇸 US | AS13335 | 2026-03-05 |
| 172.70.111.77 | 3% | 32 | 10 | 🇺🇸 US | AS13335 | 2026-02-27 |
| 172.71.203.131 | 3% | 30 | 22 | 🇺🇸 US | AS13335 | 2026-03-04 |
| 162.158.155.101 | 7% | 28 | 8 | 🇺🇸 US | AS13335 | 2026-02-04 |