128.199.226[.]11IP address
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 2 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Curse of the Krasue: New Linux Remote Access Trojan targets Thailand“Only after multiple non-replies and trying to connect to server after server, it will attempt to connect 128.199.226[.]11 at port 554, which is a port commonly used for RTSP.”
Indicators reported together
named in the same reports- c8f761d3ef7cd16e…22c6e31332eain 1 report
- 902013bc59be545f…2ff6771e44ccin 1 report
- b6db6702ca85bc80…689e54b8205din 1 report
- ed38a61a6b7af436…4353e52f818fin 1 report
- afbc79dfc4c7c4fd…1f3d829967a4in 1 report
- 97f08424b14594a5…afe0a032b772in 1 report
- 38ba7790697da0a7…56dde644e353in 1 report
- e0748b32d0569dfa…68fea86e6632in 1 report
- 4428d7bd7ae613ff…6946cc46b5e1in 1 report
- c9552ba602d20457…b79f2bf371e5in 1 report
- 3e37c7b65c1e46b2…da122c0c4a59in 1 report
- 8a58dce7b5741144…e9dd4dc94831in 1 report
Copy these 12 indicators · defanged
Thanks — we review every report.