85.31.235[.]109IP address
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 1 month ago
What the reports say
2 reports, newest first · the exact sentence from each-
Balonx Sistema: El Rostro Detrás del PhaaS que Impacta la Banca Mexicana“El framework PBX subyacente utiliza las versiones 17.0.4.31 y 17.0.28 de FreePBX y opera en un servidor SIP propietario ubicado en 85.31.235[.]109, a través del puerto 5160/TCP (los comentarios del código fuente indican que el puerto 5060 no está disponible).”
-
Balonx Sistema: The Face Behind the PhaaS Affecting Mexican Banking“The underlying PBX framework is FreePBX versions 17.0.4.31 and 17.0.28, operating on a proprietary SIP server at 85.31.235[.]109 on port 5160/TCP (port 5060 is noted as unavailable in the source code comments).”
Indicators reported together
named in the same reports- spyroid[.]netin 2 reports
- 196.251.84[.]11in 2 reports
- callbalonx[.]infoin 2 reports
- hxxps://phishing-domain[.]xyz/12345%E2%80%9Din 2 reports
- phishing-domain[.]xyzin 2 reports
- aclaraciones-digital[.]onlinein 2 reports
- soporte-aclaracion[.]xyzin 2 reports
- balonx[.]onlinein 2 reports
- panelbalonxfs[.]xyzin 2 reports
- 17.0.4[.]31in 1 report
Copy these 10 indicators · defanged
Thanks — we review every report.