146.70.41[.]131IP address
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 6 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Uptick in Bomgar RMM Exploitation“…ped onto the system, which was executed out of the PerfLogs directory (c:\PerfLogs\InputUpdate.exe) and configured to the IP address 146.70.41[.]131.”
Indicators reported together
named in the same reports- onionmail[.]orgin 1 report
- 538b3b36dd8a30e7…5c7344f7a4cfin 1 report
- 3529b1422da886b7…9397176956d6in 1 report
- bc9635dcc3444c18…a9fb668b03eain 1 report
- b44dd12179a15a7d…061401f731fein 1 report
- a5035cbd6c316162…9f921bb816a4in 1 report
Copy these 6 indicators · defanged
Also named with it: CVE-2026-1731
Thanks — we review every report.