92.119.165[.]74IP address
Reported by 2 independent sources · first reported by Help Net Security · last reported
Last reported 16 days agoFeeds last saw it 5 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers“…ion of the poem, the words “driver,” “diode,” “decryption” and “string” translated to 92, 119, 165 and 74, which gave the C2 address 92.119.165[.]74.”
Seen in threat feeds
1 feed| Feed | First seen | Last seen | Sightings | What the feed says |
|---|---|---|---|---|
| abuse.ch ThreatFox | 1 | botnet_cc · Unknown malware · CantoIncognito · Cryptomining · PoeLLM · Sektor7 |
Indicators reported together
named in the same reports- 5.78.73[.]122in 1 report
Copy this indicator · defanged
Also named with it: CVE-2026-10520, CVE-2026-42271
Thanks — we review every report.