Maltrail IOC for 2026-05-01
Source CIRCL OSINT Feed
0
TLP:CLEAR, disclosure is not limited
Description
Maltrail IOC for 2026-05-01
Indicators of compromise
Domains 41
- pcp.masscan.cloudteampcp
- zero.masscan.cloudhacked_npmrepos
- moderxdrsolution.vglummac2
- domainzero.masscan.cloudhacked_npmrepos
- picturemotion.infooffloader
- spademen.cfdoffloader
- treesbrass.infooffloader
- americoq.cyoulummac2
- abnem.icuandroid_fvncbot
- ertbane.icuandroid_fvncbot
URLs 20
- https://api.github.com/repos/stamparm/maltrail/commits/46801441ea42e785687fd534cd810beee9f6e21dteampcp
- https://www.virustotal.com/gui/domain/masscan.cloud/relationsteampcp
- https://api.github.com/repos/stamparm/maltrail/commits/222deae65909c2808c6ab97a34d9684b8ec1d565hacked_npmrepos
- https://socket.dev/blog/mini-shai-hulud-packagist-malicious-intercom-php-package-compromisehacked_npmrepos
- https://api.github.com/repos/stamparm/maltrail/commits/0e98a857d596c67c4f2b01c898a60b23160e7edelummac2
- https://api.github.com/repos/stamparm/maltrail/commits/85fcaf583286e24a3b835cf1c44944f5ec222426vacbot
- https://api.github.com/repos/stamparm/maltrail/commits/e38508d9e7a37175386205c07138fc2f4796f040hacked_npmrepos
- https://api.github.com/repos/stamparm/maltrail/commits/335e222de35d8c2ef0793ac74f7d5977f40beef9offloader
- https://api.github.com/repos/stamparm/maltrail/commits/436ea056c68107f613643ebfb569ebc4b5a033balummac2
- https://api.github.com/repos/stamparm/maltrail/commits/bdf51145ee9c98071817eb06b317ab045797604dandroid_fvncbot
IP addresses 16
- 82.39.109.55vacbot
- 85.239.231.63vacbot
- 178.156.132.188cyberstrikeai
- 195.133.145.56cyberstrikeai
- 206.119.173.47cyberstrikeai
- 45.147.253.14cyberstrikeai
- 47.79.34.97cyberstrikeai
- 136.0.10.116georgeginx
- 23.27.140.251georgeginx
- 23.27.142.233georgeginx
Community reviews
Loading reviews…