5.78.73[.]122IP address
Reported by 3 independent sources · first reported by The Register (security) · last reported
Last reported 16 days agoFeeds last saw it 5 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers““In early June 2026, a compromised Ivanti Sentry victim contacted a dedicated server at 5.78.73[.]122.”
-
Poetry is the new AI security threat as PoeLLM malware infects 3K+ servers““In early June 2026, a compromised Ivanti Sentry victim contacted a dedicated server at 5.78.73[.]122,” according to a Wednesday report shared with The Register.”
Seen in threat feeds
1 feed| Feed | First seen | Last seen | Sightings | What the feed says |
|---|---|---|---|---|
| abuse.ch ThreatFox | 1 | botnet_cc · Unknown malware · CantoIncognito · Cryptomining · PoeLLM · Sektor7 |
Indicators reported together
named in the same reports- 92.119.165[.]74in 1 report
Copy this indicator · defanged
Also named with it: CVE-2026-10520, CVE-2026-42271
Thanks — we review every report.