46.151.182[.]203IP address
Reported by 1 independent source · first reported by Trend Micro Research · last reported
Last reported 6 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise“Both C&C nodes, 83.142.209.11 (checkmarx.zone) and 46.151.182[.]203 (LiteLLM.cloud), were hosted on AS205759, a bulletproof hosting provider operating under Ghosty Networks LLC / DEMENIN B.V.”
Indicators reported together
named in the same reports- models.litellm[.]cloudin 1 report
- checkmarx[.]zonein 1 report
- scan.aquasecurtiy[.]orgin 1 report
- 45.148.10[.]212in 1 report
- 83.142.209[.]11in 1 report
- mirror.gcr[.]ioin 1 report
- litellm[.]cloudin 1 report
Copy these 7 indicators · defanged
Also named with it: CVE-2024-3400
Thanks — we review every report.