74.125.250[.]129IP address
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 19 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2“"The packets carrying operator commands originate from 74.125.250[.]129, an IP address that stun.l.google.com resolves to."”
Indicators reported together
named in the same reports- 145.249.115[.]184in 1 report
- 112.151.157[.]222in 1 report
- 192.170.240[.]137in 1 report
- 23.81.40[.]193in 1 report
- 147.185.221[.]129in 1 report
Copy these 5 indicators · defanged
Also named with it: CVE-2016-20016, CVE-2014-8361, CVE-2021-35394, CVE-2016-10372, CVE-2023-26801, CVE-2023-41011, CVE-2024-3721, CVE-2025-34037
Thanks — we review every report.