23.106.122[.]155IP address
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 6 months ago
What the reports say
1 report, newest first · the exact sentence from each-
W3LL Unmasked: Inside the Takedown of a Global BEC Phishing-as-a-Service Ecosystem“One particularly revealing discovery was identifying a backend server of the W3LL sender (23.106.122[.]155) – the tool threat actors used for delivering phishing emails.”
Indicators reported together
named in the same reports- w3ll[.]storein 1 report
Copy this indicator · defanged
Thanks — we review every report.