[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]
@abuse_ch abuse.ch
abuse.ch posts on X about sas, hosted, rce, msi the most. They currently have XXXXXX followers and X posts still getting attention that total XXXXX engagements in the last XX hours.
Engagements: XXXXX #
- X Week XXXXXX +157%
- X Month XXXXXX +483%
- X Months XXXXXXX +135%
- X Year XXXXXXX +123%
Mentions: X #
Followers: XXXXXX #
- X Week XXXXXX +0.19%
- X Month XXXXXX +0.83%
- X Months XXXXXX +4%
- X Year XXXXXX +7%
CreatorRank: XXXXXXXXX #
Social Influence
Social topic influence sas 25%, hosted 25%, rce 25%, msi XX%
Top accounts mentioned or mentioned by @smica83 @skocherhan @jameswt_wt @shadowopcode
Top Social Posts
Top posts by engagements in the last XX hours
"Mirai botnet #zerobot spreading through 172.86.123.179 (cloudzy ) Mirai botnet C2 domain: 0bot.qzz .io (Gandi SAS ) Mirai botnet C2 server: 140.233.190.96:69 (Internet Magnate ) Payload URLs: 🌐 Mirai malware sample: 🤖 More #Mirai IOCs are available on ThreatFox: 🦊"
X Link 2025-12-04T06:57Z 36.3K followers, 4428 engagements
"Exploitation of recent React RCE vul (CVE-2025-55182 - #React2Shell) leading to #Mirai infection Botnet Mirai C2 domains 📡: effeminate.fuckphillipthegerman .ru trap.fuckphillipthegerman .ru tranny.fuckphillipthegerman .ru Botnet Mirai C2 servers all hosted at FORTIS : 138.124.72.251:52896 138.124.69.154:60328 5.144.176.19:60328 Mirai #malware sample 🤖: Payload delivery host 🌐: Releated IOCs 🦊:"
X Link 2025-12-10T04:54Z 36.3K followers, 15.2K engagements
"Mirai campaign spreading through 213.209.143.85 (Railnet ) messing around with the victim's system iptables 🤔 Mirai botnet C2 domain: womp.datasurge .vip (NameCheap ) Mirai botnet C2 server: 176.65.148.57:6969 (Pfcloud ) Payload URL: 🌐 Mirai malware sample: 🤖 More #Mirai IOCs are available on ThreatFox: 🦊"
X Link 2025-12-05T11:41Z 36.3K followers, 3588 engagements
"Unknown malware using WebSockets for botnet command&control spreading through #ClickFix 🖱ClickFix - 📃VBS - ⚙MSI Payload delivery host: Malware sample 🤖: Botnet C2 domains: 📡w2li .xyz 📡w2socks .xyz The same malware is also being spread by #Amadey pay-per-install (PPI): ➡"
X Link 2025-12-15T07:40Z 36.3K followers, 8702 engagements