145.249.115[.]184IP address
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 19 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2“However, one of the 13 servers ("145.249.115[.]184") is said to have returned an all-zero transaction ID instead of echoing the transaction ID of the original Binding Request in the Binding Success Response.”
Indicators reported together
named in the same reports- 112.151.157[.]222in 1 report
- 192.170.240[.]137in 1 report
- 23.81.40[.]193in 1 report
- 147.185.221[.]129in 1 report
- 74.125.250[.]129in 1 report
Copy these 5 indicators · defanged
Also named with it: CVE-2016-20016, CVE-2014-8361, CVE-2021-35394, CVE-2016-10372, CVE-2023-26801, CVE-2023-41011, CVE-2024-3721, CVE-2025-34037
Thanks — we review every report.