41.102.167[.]182IP address
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 2 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Managing Attack Surface“…d of the threat actor’s activity for the day, there was a single query for maa.php recorded in the web server logs, originating from 41.102.167[.]182.”
Indicators reported together
named in the same reports- hxxps://raw.githubusercontent[.]com/hightidAOaa/azdaz/main/maa.phpin 1 report
- 35.195.172[.]146in 1 report
- hxxps://github[.]com/hightidAOaa/azdaz/raw/main/fata.phpin 1 report
- 0.tcp.eu.ngrok[.]ioin 1 report
Copy these 4 indicators · defanged
Thanks — we review every report.