42.96.20[.]16IP address

Reported by 1 independent source · first reported 5 Oct 2026 by SANS Internet Storm Center · last reported 5 Oct 2026

Last reported 19 days ago

What the reports say

1 report, newest first · the exact sentence from each

“42.96.20[.]16 131423”

SANS Internet Storm CenterVendor5 Oct 2026
TTY Logs and the Data it Captures, (Sun, Oct 4th)

Indicators reported together

named in the same reports

f904275333aeac48…9321ba2690d8in 1 report
102.88.137[.]80in 1 report
182.253.221[.]210in 1 report
46.188.119[.]26in 1 report
159.223.97[.]218in 1 report
185.158.22[.]150in 1 report
193.233.48[.]169in 1 report
209.99.190[.]200in 1 report
45.64.74[.]51in 1 report
202.152.148[.]27in 1 report
hxxps://github[.]com/bruneaug/DShield-Sensor/blob/main/sensor_scripts/daily_tty.shin 1 report
hxxps://github[.]com/bruneaug/DShield-SIEMin 1 report

Copy these 12 indicators · defanged

12 indicators, defanged, one per line

f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8
102.88.137[.]80
182.253.221[.]210
46.188.119[.]26
159.223.97[.]218
185.158.22[.]150
193.233.48[.]169
209.99.190[.]200
45.64.74[.]51
202.152.148[.]27
hxxps://github[.]com/bruneaug/DShield-Sensor/blob/main/sensor_scripts/daily_tty.sh
hxxps://github[.]com/bruneaug/DShield-SIEM

Thanks — we review every report.

Report a wrong value