139.162.11[.]152IP address
Reported by 2 independent sources · first reported by ESET WeLiveSecurity · last reported
Last reported 4 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
OceanLotus: del espionaje exterior al foco en objetivos en Vietnam“Sin embargo, la infraestructura staging evolucionó con .el tiempo, con servidores C&C inicialmente alojados en 139.162.11[.]152 y posteriormente migrando a 142.91.98.77.”
-
OceanLotus: From external espionage to domestic targeting“However, the staging infrastructure evolved over time, with C&C servers initially hosted at 139.162.11[.]152 and later migrating to 142.91.98.77.”
Indicators reported together
named in the same reports- metakit.fireant[.]vnin 2 reports
- hxxp://metakit.fireant[.]vn/Software/version.xmlin 2 reports
- 142.91.98[.]77in 2 reports
- hxxps://financemachinelearning[.]com/apparatus/wind/twig/statement.htmlin 2 reports
- financemachinelearning[.]comin 2 reports
- gatewayrvcenter[.]comin 2 reports
- 139.180.128[.]42in 2 reports
- coachcybersecurity[.]comin 2 reports
- 139.99.33[.]239in 2 reports
- mxprodesign[.]comin 2 reports
- 166.88.77[.]186in 2 reports
- power-sync-services[.]comin 2 reports
- 103.119.47[.]104in 2 reports
- 511b77459673ec42…1d233b6c39fbin 2 reports
- 59a8553a4f8130f5…0be4d4da0e98in 2 reports
- 9ca1a5c7f79882db…26bcdcb9f6ddin 2 reports
- a8e2bbbfcb865003…12755ab0c165in 2 reports
- f74f1feb62b662cd…27824e55acb9in 2 reports
- f8f8209987ca7f13…e21bd2ae93a9in 2 reports
- 19a69f856efa811c…997b4724f8bdin 2 reports
Copy these 20 indicators · defanged
Thanks — we review every report.