101.99.91[.]151IP address
Reported by 2 independent sources · first reported by GreyNoise · last reported
Last reported 4 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
ViciousTrap: Turning Edge Devices into Honeypots at Scale“All exploitation attempts originate from the single IP address 101.99.91[.]151.”
-
GreyNoise Discovers Stealthy Backdoor Campaign Affecting Thousands of ASUS Routers“101.99.91[.]151”
Indicators reported together
named in the same reports- 101.99.94[.]173in 2 reports
- 111.90.148[.]151in 1 report
- 111.90.148[.]112in 1 report
- 101.99.91[.]239in 1 report
- c15f77d64b7bbfb3…95562b37dec4in 1 report
- 212.232.23[.]217in 1 report
- 155.254.60[.]160in 1 report
- 103.43.19[.]61in 1 report
- 103.56.17[.]163in 1 report
- 103.43.18[.]59in 1 report
- 212.232.23[.]168in 1 report
- 212.232.23[.]143in 1 report
- 101.99.90[.]20in 1 report
- d92d2f102e1e4178…a799507e3e77in 1 report
- 20dff1120d968330…4e59474dc6bdin 1 report
- 79.141.163[.]179in 1 report
- 111.90.146[.]237in 1 report
Copy these 17 indicators · defanged
Also named with it: CVE-2023-20118, CVE-2021-32030, CVE-2023-39780
Thanks — we review every report.