207.148.75[.]122IP address
Reported by 2 independent sources · first reported by ESET WeLiveSecurity · last reported
Last reported 4 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
Arsenal de FishMonger actualizado: SprySOCKS para Windows“Tal y como se menciona en el informe de Trend Micro, la dirección IP 207.148.75[.]122, del mismo rango de IP 207.148.64.0/20 que el C&C anterior, fue utilizada por los operadores de FishMonger como servidor de entrega de SprySOCKS en junio de 2023.”
-
FishMonger’s arsenal upgraded: SprySOCKS for Windows“As mentioned in Trend Micro’s report, the IP address 207.148.75[.]122, from the same IP range 207.148.64.0/20 as the C&C above, was used by FishMonger operators as a SprySOCKS delivery server in June 2023.”
Indicators reported together
named in the same reports- ffc3aa7909d4e72c…60dffe5c99b7in 2 reports
- 207.148.78[.]36in 2 reports
- 955bfc3dcc867256…0779fa3416d8in 2 reports
- 44dc4a08c5eb0972…4e06f09006bbin 2 reports
- ab87b29b6f79487c…9001e536f083in 2 reports
- 6490b8e4aade25a3…2db2122470bcin 2 reports
- e7484c24b88a1a24…9a993670285bin 2 reports
- 621d1952839be4b0…e5062ca368edin 2 reports
- 2457eed2ab28e377…9dad2c8079d4in 2 reports
- d2c706b1eaf662bf…73ed84bda24ain 2 reports
- 5f3b87cef56683d9…0d8019b559c4in 2 reports
- c793ca31e3f6628b…bf66232e9a30in 2 reports
Copy these 12 indicators · defanged
Thanks — we review every report.